Privacy Policy

Effective Date: June 27th, 2025

At VideoLink, operated by Vitzo LLC, your privacy is important to us. This Privacy Policy explains what information we collect, how we use it, and what choices you have. By using VideoLink, you agree to the terms described here.

1. Account Eligibility

VideoLink does not support account creation for users under the age of 13. Users under 13 may access VideoLink only through school-facilitated access or with appropriate educational consent. We do not knowingly collect personal information from children under 13 without proper authorization. If we become aware that such information has been collected without consent, we will delete it promptly.

2. Information We Collect

We collect the following types of information:

• Account Information: When you sign up, we collect your email address and may associate it with your usage data.
• Technical Data: Including your IP address, browser type, operating system, and interactions with our platform.
• Cookies and Local Storage: Used to enhance functionality, retain login sessions, and analyze platform use.
• User-Modified Video Info: When you change a video's title or description within VideoLink, that customization is stored solely to personalize your shared VideoLink link. These changes do not alter the original video on YouTube, do not modify the embedded player, and are not submitted to YouTube.

We do not collect passwords, private message content, or behavioral tracking data beyond what is necessary for platform functionality.

For users in the European Union, a cookie consent banner is displayed before any non-essential cookies or analytics tools (such as Google Analytics) are activated. You may choose to accept, reject, or customize these preferences.

3. How We Use Your Information

We use your data to:

• Provide and maintain access to VideoLink
• Send notifications such as shared content or login access
• Analyze usage statistics to improve the service
• Communicate with you about your account or platform updates
• Ensure platform integrity and security

Our legal basis for processing is your consent and our legitimate interest in providing and improving the service. We do not use your information for advertising, profiling, or third-party marketing.

3a. Payment Processing via FastSpring

All payments, taxes, and subscriptions for VideoLink are handled by our Merchant of Record, FastSpring. When making a purchase, you are redirected to FastSpring’s secure checkout. Any personal or payment data (such as your credit card or billing address) is collected and processed solely by FastSpring in accordance with their Privacy Policy and Terms of Use. We only receive minimal transaction data (such as payment amount and license type) needed to manage your access.

FastSpring complies with GDPR, the EU–U.S. Data Privacy Framework, and California privacy regulations. EU users are provided with consent options and data disclosures during checkout.

3b. Marketing Emails

We may send marketing emails or product updates to registered users. You may unsubscribe at any time using the link provided in each email or by contacting us at [email protected]. Transactional messages related to your account or purchases may still be sent even if you opt out of marketing messages.

4. Sharing and Disclosure

We do not sell or rent your data. We may share information with:

• Trusted service providers (e.g., hosting, email delivery) solely for service operation
• Legal authorities when required by law or to protect our rights or user safety
• Analytics or infrastructure tools that help us operate VideoLink

5. Data Security

We protect your data with encryption and standard security practices. Access to personal data is limited to authorized personnel. While no online system is completely immune to risks, we take all reasonable steps to keep your data secure.

6. FERPA and COPPA Compliance

When used in educational contexts:

• Schools may authorize the use of VideoLink on behalf of students under 13, in line with COPPA
• By agreeing to the Terms of Service and DPA, institutions designate Vitzo LLC as a “school official” under FERPA
• Student data is used strictly for educational purposes and never for commercial targeting
• Parents may contact us at [email protected] to review or request deletion of their child’s personal data

7. Your Rights

You may at any time:

• Request access to your personal data
• Request correction or deletion
• Withdraw consent to processing
• Object to how your data is being used

To exercise any of these rights, email us at [email protected].

8. Policy Updates

We may revise this policy from time to time. If significant changes are made, we will notify users via email or post a notice on the website. Your continued use of the platform after such changes constitutes acceptance.

9. Contact Information

If you have questions or concerns about your privacy or this policy, contact:

Vitzo LLC
Email: [email protected]

10. Use of YouTube API Services and Google OAuth

VideoLink uses YouTube API Services to enable users to view, trim, and share YouTube content. If you log in using your Google account, we request the following limited data for authentication:

• Google account ID
• Name
• Email address

This data is used only to facilitate login. It is not shared or used for any other purpose.

By using VideoLink, you agree to the YouTube Terms of Service and Google Privacy Policy. You may revoke VideoLink’s access at any time via your Google security settings.

We do not access or store any private YouTube data, such as your playlists, subscriptions, or viewing history. Only public metadata is used to power basic video display features.

VideoLink uses embedded YouTube videos. YouTube may collect data about your interaction with those videos, even if you do not click play. This may include your IP address and device information. For more details, please see the YouTube Privacy Policy.

11. Subprocessors

To operate VideoLink, we rely on trusted third-party service providers (“subprocessors”) who assist with hosting, analytics, infrastructure, and communications. These include:

• Cloudflare – content delivery and DDoS protection
• AWS (Amazon Web Services) – server infrastructure and storage
• Firebase (Google) – authentication and backend services
• Google Analytics – site usage tracking (with consent, where required)

All subprocessors are contractually required to uphold appropriate security and data protection standards. A full list of current subprocessors is available upon request.