Privacy policy

Who runs Vidler

Vidler is an async video product made and operated by Refari (“Refari”). Refari is responsible for the personal data described in this policy, except where your workspace’s owner decides how a video is used; in that case Refari processes it on the workspace’s behalf.

Questions about privacy, or requests about your data, go to privacy@refari.co.

What Vidler stores

Your account

• Name, email address and profile picture.
• A password hash (never the password itself), or your Google account ID if you sign in with Google.
• Sessions: which devices are signed in, so you can sign them out.
• Preferences, such as theme and notification settings.

Your workspace

• Workspace name and logo, members, roles and pending invites.
• Folders, spaces and workspace defaults.

Your content

• Videos you record or upload, including the separate camera track and the audio.
• Thumbnails, preview images and processed versions of each video.
• Transcripts, captions and caption translations.
• Scripts you write in Script Studio, and AI outputs such as titles, summaries, chapters, answers and generated documents.
• Comments, replies and reactions, from you and from your viewers.

Viewing and usage data

• When someone watches a video, Vidler records a view: the viewer’s account if they are signed in, otherwise a random identifier kept in their browser, plus how far they watched, whether the video was embedded, the referring site and a hashed IP address used to remove duplicate views.
• Owners see these views as insights: views, unique viewers and completion.
• Server logs and error reports that help keep Vidler running and secure.

How the data is used

• To run Vidler: store and play your videos, keep you signed in and show your library.
• To process videos: transcode them, make thumbnails, transcribe speech and create captions.
• To provide AI features you use or that are on by default, described in the next section.
• To send emails you need, such as sign-in links, password resets, invites and the notifications you keep on.
• To keep Vidler secure: rate limits, abuse prevention and investigating problems.
• To improve Vidler using aggregated usage numbers. Refari does not sell personal data or use it for advertising.

AI processing

Some features send parts of your content to third-party AI providers. In production, transcription runs through Groq, and text features (titles, summaries, chapters, scripts, “Ask the video” answers and translations) run through OpenRouter, which passes each request to a model provider that serves it.

• What is sent: the audio track for transcription; the transcript, the video title and your prompt for text features.
• What comes back is stored with the video and labelled “Generated by Vidler AI”. You can edit or remove it.
• Providers process the data to return a result under their own terms. Refari chooses providers and settings that limit retention where they offer it.
• AI output can be wrong. Check important details before you rely on them.

Who can see your content

You decide who can watch each video: only you, your workspace, anyone with the link, or anyone with the link and a password. You can also set the link to expire and limit where it can be embedded. Comments and reactions on a video are visible to the people who can watch it.

Outside your choices, Refari shares data only with the providers below, or when the law requires it.

Subprocessors

These companies process data for Vidler. The list will change as Vidler grows, and this page will be updated when it does.

How long data is kept

• Videos and everything attached to them stay until you delete them.
• Deleting a video removes it permanently, straight away. There is no Trash to restore it from, so Vidler asks first.
• Database backups are kept for 14 days, so deleted data can remain in a backup for up to 14 more days before it is gone.
• View records stay while the video exists, so the owner’s insights stay accurate.
• If you close your account, your account data and the content only you own are deleted within 30 days.

Cookies and browser storage

Vidler uses a small number of cookies and browser storage entries, all needed for the product to work. There are no advertising cookies.

• vidler_session: keeps you signed in.
• Password unlock cookies: remember that you entered a video’s password, for up to 7 days.
• vd-theme: your light or dark theme choice.
• vd-viewer (browser storage): a random identifier that counts unique viewers without an account.
• Local settings such as playback speed and library layout.

Security

• Connections use HTTPS. Passwords are hashed with Argon2.
• Video files are private in storage and played through short-lived signed links.
• Sessions can be revoked, and you can sign out of every device from settings.

Your choices and rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict some processing. Many of these you can do yourself in Vidler: edit your profile, delete videos, remove AI output or close your account. For anything else, email privacy@refari.co, and Refari will reply within 30 days.

If you watched a video someone else owns and want your view, comment or reaction removed, contact the owner or email privacy@refari.co.

Children

Vidler is not meant for children under 16, and Refari does not knowingly collect their data.

Changes to this policy

When this policy changes, the date at the top changes too. For significant changes, account holders will be told by email or in the app before the change applies. The terms of service explain the rules for using Vidler.