Privacy Policy
Last updated: 21-May-2026
1. Introduction
Welcome to PerfectPx AI ("PerfectPx AI", "we", "us", or "our"). PerfectPx AI is an AI-powered platform that helps creators generate, edit, and publish social media content — including videos, captions, and audio — directly to their connected channels on third-party platforms such as YouTube, TikTok, and Instagram.
This privacy policy (the "Policy") describes how we collect, use, protect, and disclose information when you access our website at https://ai.perfectpx.org and use the features it provides (the "Service"). By using the Service you agree to the practices described in this Policy. If you do not agree, please do not use the Service.
2. Information We Collect
We collect the following categories of information.
(a) Information you provide directly to us:
- Account information: your name, email address, and password (stored as a salted hash; we never store your password in plaintext).
- Profile and channel information: the channels you create or connect inside PerfectPx AI, channel names, and the preferences you configure.
- Content you create or upload through the Service: prompts, scripts, captions, generated videos, audio, images, and associated project metadata.
- Communications: messages you send us via email or other support channels.
(b) Information we collect automatically when you use the Service:
- Device and connection details such as IP address, browser type and version, operating system, language preference, and approximate location derived from your IP address.
- Usage information such as pages visited, features used, actions taken, and timestamps, used to operate, secure, and improve the Service.
- Cookies, local storage, and similar technologies (see Section 6 below).
(c) Information we receive from third-party integrations you authorize:
- OAuth access tokens, refresh tokens, and account identifiers that you authorize us to receive from Google/YouTube (see Section 4), TikTok (see Section 5), and any other publishing platform you connect.
- Basic public metadata about the channels and content you choose to publish through the Service (such as channel ID, channel title, video ID, publish status).
3. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, operate, maintain, and improve the Service and its features.
- To generate, store, edit, and deliver the AI-generated content you create through the Service.
- To publish content to the third-party platforms you connect (e.g., YouTube, TikTok, Instagram) on your behalf and at your explicit request.
- To track the publish status, delivery state, and basic public statistics of the content you publish through the Service, and to display this information back to you inside your own dashboard.
- To authenticate you, secure your account, and prevent abuse, fraud, and unauthorized access.
- To communicate with you about your account, transactions, security events, and material changes to the Service or this Policy.
- To comply with applicable law, respond to lawful requests, and enforce our Terms of Service.
We do not sell your personal information. We do not use your data — including data received from connected platforms such as Google/YouTube or TikTok — to train, develop, or improve generalized AI or machine-learning models.
4. Application Data & Third-Party Services (YouTube/Google)
PerfectPx AI uses YouTube API Services and Google OAuth to enable you to upload and publish AI-generated videos directly to your YouTube channel.
4.1 Scopes Requested and Why
We request the minimum scopes necessary for our publishing features:
https://www.googleapis.com/auth/youtube.upload— to upload the videos you explicitly create and submit for publishing to your YouTube channel.https://www.googleapis.com/auth/youtube.readonly— used solely for data belonging to you: to verify the YouTube channel you connect (channel ID and channel title), to read metadata of the videos you upload through PerfectPx AI (video ID, publish status, basic public statistics of those specific videos), and to display this information back to you inside your own dashboard.
We do NOT use the youtube.readonly scope to read videos you did not upload through PerfectPx AI, your subscriptions, your watch or search history, your private playlists, your comments, or any other YouTube data. Aggregate trending-content discovery features inside PerfectPx AI are powered by a separate, server-side YouTube Data API key owned by PerfectPx AI and never use your personal OAuth token.
We do NOT request, access, or store any data beyond what these scopes strictly require for the publishing feature you authorize.
4.2 Data We Receive from Google
When you authorize PerfectPx AI we receive and store:
- OAuth access token and refresh token
- Your Google account identifier (
sub) and email address - The target YouTube channel ID and channel title
- Metadata of videos you upload through PerfectPx AI (video ID, title, publish status)
4.3 How We Protect This Data (Data Protection Mechanisms)
- In transit: all traffic between your browser, our servers, and Google APIs is encrypted using TLS 1.2 or higher. HTTP is disabled.
- At rest: OAuth tokens and any sensitive identifiers are encrypted using AES-256 before being written to our database. Encryption keys are managed via a dedicated key-management service and rotated periodically.
- Access control: access to production data is restricted to a minimal number of authorized engineering personnel under the principle of least privilege, requires multi-factor authentication, and is logged and auditable.
- Isolation: tokens are never exposed to the client/browser, never embedded in URLs, and never written to application logs.
- Hosting: data is stored on reputable cloud infrastructure providers within secured environments.
4.4 Limited Use Disclosure
PerfectPx AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we affirm that we do NOT:
- Sell Google user data.
- Use Google user data to serve advertisements (including retargeting, personalized, or interest-based advertising).
- Use Google user data for any purpose unrelated to the user-facing features that you explicitly request.
- Use Google user data to train, develop, or improve generalized AI / ML models. Your data is never used as training material.
- Allow humans to read Google user data, except (i) with your explicit prior consent for specific data, (ii) when necessary for security purposes such as investigating abuse, (iii) when required to comply with applicable law, or (iv) when the data has been aggregated and anonymized for internal operations.
4.5 Data Retention and Deletion
- OAuth tokens are retained only as long as your YouTube integration with PerfectPx AI is active.
- You can revoke access at any time from your Google Security Settings or by disconnecting the integration inside PerfectPx AI. Upon revocation or disconnection, the stored tokens and channel identifiers are deleted from our database within 7 days.
- You may request deletion of all data associated with your account by emailing info@perfectpx.org. We will process such requests within 30 days.
4.6 Third-Party Sharing
We do not share, sell, rent, or transfer Google user data to any third party, except sub-processors strictly necessary to operate the Service (see Section 7), which are bound by equivalent data protection obligations.
4.7 Security Incidents
In the event of a data breach affecting Google user data, we will notify affected users and, where applicable, the relevant authorities, within 72 hours of becoming aware of the incident, in accordance with applicable law.
By using our Service, you agree to be bound by the YouTube Terms of Service. Please also review the Google Privacy Policy.
5. Application Data & Third-Party Services (TikTok)
PerfectPx AI integrates with TikTok via the TikTok for Developers platform (Login Kit and Content Posting API) to allow you to publish your AI-generated videos directly to your TikTok account.
5.1 Data We Receive from TikTok
When you connect your TikTok account, we receive and store:
- OAuth access token and refresh token
- Your TikTok
open_id(account identifier scoped to PerfectPx AI) - Basic profile metadata necessary to label the connected account inside your PerfectPx AI dashboard (such as display name and avatar URL, where provided by TikTok)
5.2 How We Use This Data
We use TikTok data solely to (a) identify your connected account and (b) upload the videos and accompanying metadata (caption, privacy level, disclosure flags) that you explicitly choose to publish. We do not read your TikTok inbox, followers, watch history, search history, private content, or any other data beyond what is strictly required for the publishing features you authorize.
5.3 Data Protection
The data-protection mechanisms described in Section 4.3 (TLS in transit, AES-256 encryption at rest, restricted access with multi-factor authentication, isolation from the client and from application logs, and reputable cloud hosting) apply equally to TikTok OAuth tokens and identifiers.
5.4 Retention and Revocation
You can revoke PerfectPx AI's access to your TikTok account at any time from your TikTok account settings, or by disconnecting the integration from within PerfectPx AI. Upon disconnection, the stored tokens and identifiers are deleted from our database within 7 days.
5.5 Third-Party Sharing
We do not share, sell, rent, or transfer your TikTok data to any third party, except sub-processors strictly necessary to operate the Service (see Section 7), which are bound by equivalent data protection obligations.
By using our TikTok integration, you also agree to the TikTok Terms of Service and acknowledge the TikTok Privacy Policy.
6. Cookies, Local Storage & Analytics
We use cookies, local storage, and similar technologies to:
- Keep you signed in (session cookies and authentication tokens).
- Remember your preferences such as theme, language, and UI state.
- Measure aggregate usage of the Service to help us operate and improve it.
You can control or block cookies through your browser settings. Please note that blocking essential cookies may prevent parts of the Service (e.g., signing in) from functioning correctly. We do not use advertising or third-party tracking cookies for cross-site behavioral profiling.
7. Data Sharing & Sub-processors
We do not sell or rent your personal information. We share data only with the following categories of recipients:
- Sub-processors that operate the Service on our behalf and are contractually bound by data-protection obligations. These currently include Amazon Web Services (cloud hosting and storage) and Cloudflare (content delivery, security, and edge networking), as well as the AI, voice, and media providers necessary to power the features you use (such as Google Generative AI, ElevenLabs, AWS Polly, and Speechmatics).
- Third-party platforms to which you explicitly publish content (YouTube, TikTok, Instagram). Sharing is limited to the data you choose to publish and is performed only at your explicit request.
- Authorities and other third parties, when we believe in good faith that disclosure is required by applicable law, valid legal process, or is necessary to protect the rights, property, or safety of PerfectPx AI, our users, or the public.
8. International Data Transfers
PerfectPx AI is operated using cloud infrastructure that may store and process data in different countries. By using the Service, you understand that your information may be transferred to, stored, and processed in jurisdictions outside your country of residence, which may have different data-protection laws. Where required by applicable law, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses — to provide an adequate level of protection for cross-border transfers.
9. Your Privacy Rights
Depending on where you reside, you may have the following rights with respect to your personal information:
- Access — request a copy of the personal information we hold about you.
- Rectification — request that we correct inaccurate or incomplete information.
- Erasure — request that we delete your personal information, subject to legal retention requirements.
- Restriction or objection — request that we restrict or stop certain processing of your information.
- Portability — request a machine-readable copy of the information you have provided to us.
- Withdraw consent — withdraw your consent at any time where our processing relies on it (for example, by disconnecting a third-party integration).
- Lodge a complaint — with your local data-protection authority.
To exercise any of these rights, please contact us at info@perfectpx.org. We may need to verify your identity before responding, and we will reply within the timeframes required by applicable law.
If you are a California resident, you also have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, the right to delete, and the right to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioral advertising.
10. Data Security
We implement appropriate technical and organizational measures designed to protect your information. These include TLS 1.2 or higher for data in transit, AES-256 encryption at rest for sensitive identifiers and authentication tokens, strict access controls protected by multi-factor authentication, isolation of secrets from the client browser and from application logs, and hosting on reputable cloud-infrastructure providers within secured environments.
No security control is perfect. You remain responsible for keeping your account credentials confidential, using strong unique passwords, and notifying us promptly of any suspected unauthorized access to your account.
11. Children's Privacy
PerfectPx AI is not directed to individuals under the age of 13 (or the equivalent minimum age in the relevant jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without verified parental consent, we will take steps to delete such information promptly.
12. Account Deletion
You may delete your PerfectPx AI account and all associated data at any time by emailing info@perfectpx.org or by using the account-deletion option inside your account settings. Upon deletion, all OAuth tokens, personal data, and integration metadata associated with your account are permanently removed from our active systems within 30 days, except where retention is required by law.
13. Changes to This Privacy Policy
We may update this Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this Policy and, where appropriate, by additional means such as email notification or an in-product notice. Your continued use of the Service after such changes constitutes your acceptance of the revised Policy.
14. Contact Information
To ask questions or comment about this Policy and our privacy practices, contact us at: info@perfectpx.org
See also our Terms of Service.