Privacy Policy

Roocast (“we”, “us”) runs roocast.com, a service that turns topics, spreadsheets and product photos into narrated videos and can post them to your social media accounts. We are the data controller for the personal data described in this policy.

You can reach us about anything in this policy at [email protected].

Account details. Your email address, and your name and profile picture if you sign in with Google. We don't use passwords; we email you a one-time sign-in link.

What you put into Roocast. Topics, spreadsheets, scripts and edits, product descriptions, prices and contact details for ads, uploaded photos and logos, brand colours, and style presets.

What we make for you. The scripts, voiceovers, images, captions and finished videos we generate, plus titles, descriptions and hashtags.

Connected accounts. When you connect YouTube, TikTok, Instagram or Facebook, we receive an access token from that platform and basic profile information: the account or channel ID, name, handle and avatar. We store tokens encrypted (AES-256-GCM) and use them only to post the videos you ask us to post.

Billing. Your plan, minutes balance, usage history and Paystack customer and subscription references. Card and bank details are entered on Paystack's checkout and never reach our servers.

Technical data. Session cookies that keep you signed in, your IP address and browser details in server logs, error reports, and your time zone for scheduling posts.

We don't use advertising cookies or third-party analytics trackers, and we don't buy data about you from anyone.

• To provide the service: sign you in, generate and render your videos, store them in your library, and post or schedule them when you ask.
• To bill you: track minutes, process subscriptions and top-ups through Paystack, and refund minutes for failed videos.
• To email you about your account: sign-in links, “your batch is ready” notices, warnings before videos are deleted, and when a connected account needs reconnecting.
• To keep the service safe and working: prevent abuse, fix errors, and enforce our Terms.

Our legal bases are performing our contract with you, our legitimate interest in running and securing the service, your consent where we ask for it (for example when you connect a social account), and complying with the law.

We don't sell your personal data, and we don't use your content or connected-account data to train AI models.

Roocast uses YouTube API Services. When you connect a YouTube channel, we ask Google for permission to upload videos (youtube.upload) and to read your channel's basic details (youtube.readonly) so we can show which channel is connected and check its upload limits. We use this access only to upload the videos you choose, with the title, description and privacy setting you choose.

By connecting YouTube you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

Roocast's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, we don't sell it, and people at Roocast don't read it except with your permission, for security, or where the law requires.

You can disconnect a channel at any time in Settings → Connections, which deletes the stored tokens. You can also revoke Roocast's access from your Google account permissions page.

When you connect TikTok, Instagram or Facebook, we receive only the permissions needed to read your basic profile and publish videos to the account or page you choose. Each platform's own terms and privacy policy apply to content you post there. You can disconnect an account in Settings → Connections, or remove Roocast from that platform's app settings.

We share data only with service providers that help us run Roocast, and only what each needs:

• Hosting and storage: Railway (web app and database), Cloudflare (CDN, DNS and R2 file storage), Modal (video rendering).
• AI and media providers: Groq and Anthropic (writing scripts), Cloudflare Workers AI and Runware (generating images), ElevenLabs (premium voices), Pixabay (stock footage searches). They receive the topic, script or prompt text needed for each step, not your account details.
• Email: Brevo, to send account emails.
• Payments: Paystack, to take payments and manage subscriptions.
• Error monitoring: Sentry, to diagnose crashes.
• Platforms you connect: YouTube, TikTok, Instagram or Facebook, when you ask us to post.

We may also disclose data if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business, in which case this policy would continue to apply.

We're based in Nigeria, and some of our providers process data in other countries, including the United States and the European Union. Where we transfer data abroad, we rely on providers with appropriate safeguards, such as contractual data-protection commitments, as required by the Nigeria Data Protection Act 2023 and other applicable laws.

• Finished videos stay in your library for 30 days on the Free plan and 90 days on paid plans. We email you a week before they're deleted.
• Intermediate render files are deleted after 14 days, and ZIP downloads we build for you after 2 days.
• Connected-account tokens are deleted as soon as you disconnect the account.
• Account details, settings and usage history are kept while your account is open, and deleted within 30 days after you ask us to close it.
• Payment records are kept for as long as tax and accounting law requires.

Data is encrypted in transit (HTTPS). Social media tokens are encrypted at rest. Files are stored privately and shared only through download links that expire. Access to production systems is limited to people who need it. No system is perfectly secure, so if we learn of a breach that affects you, we'll tell you and the relevant regulator as the law requires.

You can ask to see, correct, download or delete your personal data, to object to or restrict how we use it, or to withdraw consent. Email [email protected] from the address on your account and we'll reply within 30 days.

You can delete individual videos from your library and disconnect accounts yourself at any time. If you're not happy with our answer, you can complain to the Nigeria Data Protection Commission or the data protection authority where you live.

We use one essential cookie to keep you signed in, and your browser's local storage to remember whether you chose light or dark mode. We don't use cookies for advertising or cross-site tracking, so there's nothing to opt out of.

Roocast isn't for anyone under 18, and we don't knowingly collect data from children. If you think a child has given us data, email us and we'll delete it.

If we make significant changes, we'll email you and update the date at the top of this page before they take effect.