Legal

Privacy Policy

Last updated: February 11, 2026

This Privacy Policy explains how usefull.io ("usefull.io", "we", "us") collects, uses, stores, and protects your information when you use our website, dashboard, and supported input channels (such as Instagram DM and Telegram bot).

usefull.io helps you turn saved short-form content into structured results and send those results to connected services. We collect only the data needed to provide this product reliably and securely.

1. Scope and Controller

This policy applies to usefull.io services available through our website and product interfaces. For data protection requests, the controller contact is: privacy@usefull.io.

2. Information We Collect

2.1 Account and profile data

  • Email address and account identifiers.
  • Instagram username and related account metadata (when you connect supported channels).
  • Connected integration status (for example Notion, Spotify, Google services).

2.2 Content and processing data

  • Links and messages you submit (for example Reel/TikTok/Pin links via supported channels).
  • Source metadata such as platform, timestamp, and source URL.
  • Structured output generated for your library (recipes, tracks, places, books, movies, products, events, software).
  • Thumbnails and context fields derived from the content.
  • Raw transcript text may be generated for internal processing and quality control.

2.3 Integration and token data

  • OAuth tokens and technical credentials needed to export your data to connected services.
  • These credentials are stored in encrypted form.

2.4 Technical and security data

  • IP address, user-agent, request and webhook logs.
  • Service diagnostics, rate-limit and abuse-prevention signals.

3. What We Do Not Store

  • We do not keep original video files after processing is complete.
  • We do not store passwords for third-party services when OAuth is used.
  • We do not sell your personal data.

4. How We Use Information

  • To process submitted content and generate structured results in your dashboard.
  • To export data to integrations you explicitly connect.
  • To maintain account functionality, notifications, and customer support.
  • To improve extraction quality, reliability, and product safety.
  • To detect abuse, prevent fraud, and enforce our Terms.

5. Legal Bases (GDPR)

Where GDPR applies, we process personal data under one or more of these legal bases:

  • Contract: to provide the service you request.
  • Legitimate interests: to secure, operate, and improve the product.
  • Consent: when required for optional features.
  • Legal obligations: when required by law.

6. Data Sharing and Processors

We may share data with service providers only as needed to operate the product, for example:

  • Infrastructure and hosting providers.
  • AI processing providers (for extraction and analysis workflows).
  • External APIs needed for integrations and data enrichment (for example Notion, Spotify, Google services).
  • Security and monitoring providers.

We require processors to protect data appropriately and use it only for contracted purposes.

7. Retention and Deletion

  • Original uploaded/transient video files are deleted after processing.
  • Structured library data is kept while your account is active or until you request deletion.
  • Security and operational logs are retained for a limited period needed for reliability and abuse prevention.
  • You can request account deletion and data deletion (right to be forgotten).

8. Cookies and Analytics

  • We use minimal cookies required for authentication and essential product functionality.
  • We do not run advertising tracking cookies without consent.
  • Product analytics, when used, are focused on service performance and improvement.

9. Security Measures

  • HTTPS in transit.
  • Encryption for sensitive integration tokens (for example AES-256 or equivalent vault-based controls).
  • Access controls and least-privilege internal access.
  • Webhook signature verification for supported channels.
  • Rate limiting and monitoring to reduce abuse risk.

10. International Data Transfers

Depending on where you and our providers are located, data may be processed in countries outside your jurisdiction. We use contractual and technical safeguards designed to protect personal data during such transfers.

11. Your Rights

Depending on your location, you may have rights to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Export your data (for example JSON/CSV when available).
  • Delete your account and associated personal data.
  • Restrict or object to certain processing activities.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with your local supervisory authority.

12. Children's Privacy

usefull.io is not intended for children under the age required by applicable law in your jurisdiction. If you believe a child has provided personal data to us, contact us and we will investigate and remove the data where required.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If material changes are made, we will update the "Last updated" date and provide notice through the website or product interface when appropriate.

14. Contact

For privacy questions or requests, contact: privacy@usefull.io