Privacy Policy

Last updated: March 2026

Overview

Spundle ("we", "us", "our") is owned and operated by Vanshita Garg. It is a content repurposing platform that helps creators and agencies turn YouTube videos into short-form clips and written content for distribution across social media platforms. This Privacy Policy explains what data we collect, how we use it, and how you can control it.

Data We Collect

Google / YouTube account

When you sign in with Google, we receive your name, email address, and profile picture from Google OAuth. We use your YouTube account access to read your channel's video list and metadata so we can ingest and repurpose your content.

Instagram account

If you connect an Instagram account, we request the following permissions:

  • instagram_basic — read your Instagram profile and account information (username, account ID)
  • instagram_content_publish — publish approved content (clips and posts) to your Instagram account on your behalf

We only publish content when you explicitly trigger a publish action. We never post without your consent.

Video content

We temporarily download sections of your YouTube videos to generate short clips. Processed clips are stored in secure cloud storage and are only accessible to you.

How We Store Your Data

All data is stored securely with the following protections:

  • Access tokens (Google, Instagram) are stored encrypted in our database — never in client-side storage or cookies accessible to third parties
  • All data is stored server-side only
  • Data is transmitted over HTTPS/TLS at all times
  • We do not log or store the content of your videos beyond what is needed to generate your repurposed content

How We Use Your Data

  • To authenticate your account and keep it secure
  • To ingest your YouTube videos and generate clips, posts, and threads
  • To publish content to your connected social media accounts when you request it
  • To send you product updates and notifications (opt-out anytime)

Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

We use the following third-party services to operate the platform:

  • Google / YouTube API — to authenticate users and fetch video data
  • Meta / Instagram API — to publish content to Instagram on your behalf
  • Google Gemini API — to analyse transcripts and detect the best moments for clips (transcript text only, no PII)
  • Cloudflare R2 — to store exported video clips securely

Each of these services operates under their own privacy policies and data protection obligations.

Your Rights and Data Deletion

You can control your data at any time:

  • Disconnect Instagram: Remove the Instagram connection from your account settings at any time. This immediately revokes our ability to publish to your account.
  • Delete your account: Contact us at the email below and we will delete all your data within 30 days, including stored clips, transcripts, and account information.
  • Data portability: Request a copy of your data at any time by contacting us.

You can also revoke our access to your Google or Instagram account at any time directly through your Google account settings or Instagram's app permissions.

Cookies

We use session cookies only to keep you signed in. We do not use tracking cookies or third-party advertising cookies.

Contact

If you have any questions about this Privacy Policy, or to request data deletion, please contact us at:

vanshita@spundle.ai