Privacy Policy

Vantage is a social media manager: it prepares your posts and publishes them to the social platforms you connect. Today its features are for video. You upload a video or give us a link to one, Vantage transcribes it, you edit the framing, captions and overlays, and Vantage publishes the result to YouTube, TikTok, Facebook and Instagram, straight away or at a time you schedule. This policy explains what we collect, why, and what you can do about it.

Vantage is run by Freedom! Family Limited, a company registered in Hong Kong (“we”, “us”). We handle personal data under Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486).

You must be at least 13 years old to use Vantage. If you are under 18, you need the permission of a parent or guardian.

• Your account: the name, email address and profile picture of the account you sign in with, when you last signed in, and when you accepted these terms.
• Connected platforms: the access tokens each platform gives us so we can publish for you, the permissions you granted, and each connected account’s id, name and picture. We never see your platform passwords.
• Your media: the videos you upload, the links you give us and the videos we download from them, their transcripts, and the clips, renders and drafts you make, with their titles, descriptions, captions and schedules.
• What you publish: where each post went, its id on that platform and its status there.
• Feedback: what you send us, with any files you attach.
• Billing: if you pay for a plan, your customer and subscription ids at Stripe, your plan and whether it is paid up. Your card details go to Stripe and never reach us.
• Sessions and logs: each signed-in session with a description of its browser and device, so you can see and end your sessions; server logs of errors and of the work done for your account; and an audit record of the changes made in your account, such as a saved clip, an edited post or a deleted account. Vantage does not store your IP address. Our hosting providers handle network traffic, including IP addresses, to deliver the site.
• Days you use Vantage: the dates on which you used Vantage while signed in, so we can count how many people use it each day and each month.
• We do not ask for sensitive information, such as about your health or religion.

We use your data only to run Vantage for you: to sign you in, to store, transcribe, render and publish your videos when and where you choose, to show how your posts are doing on each platform, to keep the service working and secure, and to answer your feedback.

We do not sell your data, and Vantage shows no ads.

When you sign in with a platform or connect one, it asks you to grant Vantage the permissions below. Each one is listed exactly as we request it, with what we use it for.

YouTube (Google)

• openid — signs you in with your Google account.
• email — reads your email address, to identify your account.
• profile — reads your name and profile picture, to show who is signed in.
• https://www.googleapis.com/auth/youtube.upload — uploads the videos you publish to your channel.
• https://www.googleapis.com/auth/youtube.readonly — reads your channel’s name and picture.
• https://www.googleapis.com/auth/youtube.force-ssl — reads the status of the videos you published through Vantage and updates their details when you edit them here.

Vantage uses YouTube API Services. By connecting YouTube you also agree to the YouTube Terms of Service (see our Terms of Service), and Google’s own handling of your data is described in the Google Privacy Policy at https://policies.google.com/privacy. You can remove Vantage’s access to your Google account at any time at https://myaccount.google.com/permissions.

Vantage’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

TikTok

• user.info.basic — reads your TikTok name and picture, to identify your account.
• user.info.profile — reads your TikTok username, to link to your account’s public profile.
• video.upload — sends the videos you publish to TikTok.
• video.publish — publishes them to your TikTok account.
• video.list — reads the status of the videos you published through Vantage.

Facebook

• email — reads your email address, to identify your account.
• pages_manage_posts — publishes videos to the Facebook Pages you choose.
• pages_read_engagement — lists your Pages and reads the posts you published through Vantage.

Instagram

You connect Instagram on its own, by signing in to Instagram. You can also sign in to Vantage with Instagram. An Instagram you connected to a Vantage account that signs in another way can only sign you in once you turn that on in Connected accounts. Vantage asks for:

• instagram_business_basic — reads your Instagram account’s name and picture, and the Reels you published through Vantage.
• instagram_business_content_publish — publishes Reels to your Instagram account.

You can disconnect a platform at any time from Connected accounts in the account menu, or remove Vantage’s access in that platform’s own settings.

• The platforms you publish to receive the posts you send them, with their titles and descriptions.
• Transcription runs on our own server.
• Amazon Web Services runs our servers and database. Cloudflare stores your files and carries traffic to the site. When you publish, the platform fetches your clip through a signed link that expires.
• Stripe handles payments for paid plans. It receives your email address, and the card details you give it never reach us.
• Google receives page views through Google Analytics, only if you agree to it. See Analytics.

We share nothing else, except where the law requires it, to prevent or investigate fraud, or if Vantage is sold or merged, in which case this policy continues to protect your data.

Vantage keeps these in your browser:

• sign-in cookies that keep you signed in and keep signing in secure;
• terms-accepted, for a few minutes while you sign in, to record that you agreed to these terms;
• merge-intent, for a few minutes, only while you merge two of your accounts;
• sc-nav-collapsed, which remembers whether you collapsed the side menu;
• in local storage, sc-theme (light or dark), sc-analytics-consent (your analytics choice), and uploads.owner (the account that last used this browser, so one person’s unfinished uploads are never resumed for another);
• in your browser’s database, your unfinished uploads, so they can resume.

Google Analytics sets its own cookies only if you agree to it, as described below.

We use Google Analytics to count visits to pages. It runs only after you press Accept in the “Cookie consent” notice. If you press Decline, nothing is loaded from Google.

Only page views are sent. Any id in a page’s address is replaced with a placeholder before it is sent, a page that does not exist is sent as /404, the page title is sent, and the site you came from is sent only when you arrived from another site. Google Analytics sets _ga cookies in your browser.

To change your choice when signed in, use Cookie settings in the account menu. When signed out, clear this site’s data in your browser. Withdrawing does not delete _ga cookies already set; your browser’s settings remove them.

How Google uses information from sites that use its services is explained at https://policies.google.com/technologies/partner-sites.

We protect your data, including the access tokens your connected platforms give us, like this:

• Encrypted in transit: everything between your browser and Vantage, and between Vantage and the platforms you connect, travels over HTTPS (TLS). Our servers also use encrypted connections to our database and cache.
• Encrypted at rest: our database, its backups, our cache and our file storage are all encrypted on disk.
• Not reachable from the internet: the database and cache accept connections only from our own servers. File storage blocks public access; files are reached only through signed links that expire.
• Tokens stay on our servers: platform access tokens are used only by our servers, to do what you ask, such as publishing a post. They are never sent to your browser. We never see your platform passwords.
• Secrets kept apart: the passwords and keys our servers use are kept in a secrets manager, not in our code.
• Limited access: access to your data inside Vantage is limited by role, and changes are recorded in an audit log that cannot be changed.

No server or network is completely secure, though, and we cannot promise that your data will never be exposed.

• Your account and what you made are kept while your account exists.
• The record of the days you used Vantage is kept while your account exists.
• Depending on your plan, the video files of sources you have not used for a while may be removed, unless you keep them. The records of those videos and their clips stay.
• The files of what you move to Trash are deleted once its time in Trash runs out.
• A connected platform’s tokens are deleted when you disconnect it.
• When you delete your account, everything is removed as described in the next section.
• The audit record is kept after an account is deleted. The next section says what it holds.

You can delete your account yourself from the Delete account section of Connected accounts. Your account is deleted 30 days later. Until then, signing in lets you restore it.

The deletion runs in our nightly clean-up, on the first night after those days are up. If a post is still publishing then, or a file could not be deleted, it tries again each night until it is done. It destroys:

• your uploads, clips, renders and drafts;
• your feedback and its attachments;
• your connected-account grants and their tokens;
• your sessions, the record of the days you used Vantage, the log entries about you that Vantage keeps, and your account itself.

We ask Google, Facebook and TikTok to remove Vantage’s access to your accounts there. We do not ask any other platform. Either way, the tokens for all your connected accounts are deleted with your account.

Deleting your account cancels a paid plan at once, with no refund. The deletion also deletes your customer record at Stripe; Stripe keeps only the payment records the law requires it to keep.

Some copies last a little longer. Our database backups are kept for up to about a week after the deletion. Our server logs are kept for up to a month.

We keep the audit record. It cannot be changed or deleted. It records what was done in your account, so it can include the titles and descriptions of your clips and posts, caption text, video links, the names of files you uploaded, the names and handles of your connected accounts, and the feedback you sent.

Posts already live on the platforms stay there. Remove those on each platform.

You cannot delete your account while a post is publishing, while a post is waiting to go out, or while an upload is in progress. Wait for it to finish, or cancel it, then try again. When you delete your account, your scheduled posts are cancelled, and restoring your account does not bring them back.

If you remove Vantage in your Facebook or Instagram settings, Vantage disconnects that account and deletes its tokens, name, picture and Page list. If it is your only way to sign in, we keep only its ID, so you can still sign in. Meta gives you a link that shows the status. This does not delete your Vantage account, your videos or your other platforms; to delete those, use Delete account.

If you cannot sign in, ask us to delete your data at https://support.h.ki/. We then schedule your account for deletion in the same way, and it is deleted 30 days later.

Under the Personal Data (Privacy) Ordinance you may ask for a copy of the personal data we hold about you, and ask us to correct it if it is wrong. Ask at https://support.h.ki/.

If we change this policy in a way that matters, we update the date at the top and ask you to accept it again the next time you use Vantage.

Questions about this policy or your data: https://support.h.ki/. Freedom! Family Limited, Hong Kong.