Privacy policy
Last updated: September 18, 2026
This policy explains what data Vyxel collects when you use vyxelapp.com and the Vyxel mobile apps (iOS and Android), why, who it is shared with and how to exercise your rights.
Who is responsible for your data
Vyxel is run by the sole trader named below, who is the controller of the data described here. For any question about your data, write to the contact address.
- Operator
- Yanis Cherifi, entrepreneur individuel (EI)
- Registered office
- 8 rue Guynemer, 94300 Vincennes, France
- Registration
- SIREN 849 558 168
- Publication director
- Yanis Cherifi
- Host
- Railway Corporation, San Francisco, Californie, États-Unis (railway.com)
- Contact
- vyxel.app@outlook.com
The data we collect
- Account: your email address, your password (stored encrypted, we never see it), your language and your account settings.
- Content: the videos and images you send, your texts (hooks, descriptions, captions), your folders, templates and publishing profiles. If you link a Google Doc, we read its text to get your hooks.
- Connected social accounts: the ID, name and avatar of the accounts you connect, and the post statistics the platforms send back. The access tokens to these accounts are kept by our provider bundle.social (see below), not by Vyxel.
- Subscription: your plan, your quota and your billing history. Payment is handled by Stripe: we never see your card number.
- Mobile app: your phone's notification token, to send you upload and scheduling notifications. The app only accesses the videos you choose to send, and contains no audience measurement or advertising tools.
- Website usage: browsing statistics (pages viewed, actions, device type, IP address) measured with PostHog (with your account ID and email when you are signed in), and our servers' technical logs.
- Referrals: if you arrive through an affiliate link, that link's code, to credit your sign-up.
Why we use it
- To provide the service: edit your videos, schedule them and publish them to the accounts you connected (performance of the contract).
- To manage your account, subscription and billing (performance of the contract, accounting obligations).
- To send you emails and notifications about your uploads, posts and account (performance of the contract). You can turn alerts off in Account › Notifications, and app notifications in your phone's settings.
- To improve the website and fix errors using usage statistics (legitimate interest).
- To keep the service secure and prevent abuse (legitimate interest).
We do not sell your data and do not use it for advertising.
Our other providers
We only share your data with the providers the service needs, who process it on our behalf:
- Supabase: database and authentication.
- Cloudflare (R2): video and image storage.
- Railway: server hosting.
- Stripe: payment and billing (Stripe's policy).
- Resend: sending emails.
- PostHog (hosted in the EU): website usage statistics.
- Groq: automatic translation of your hooks, when you ask for it (only the hooks' text is sent).
- Expo: delivering notifications to your phone, with Apple and Google.
- bundle.social: publishing to social media (see above).
Some of these providers may process data outside the European Union, in particular in the United States. These transfers are covered by the European Commission's standard contractual clauses or by the EU–US Data Privacy Framework.
How long we keep it
- As long as your account exists, we keep the data the service needs. You can delete your videos, folders and profiles at any time.
- When you delete your account, your data is erased within 30 days, backups included. Posts already online stay on the platforms: delete them there if you wish.
- Invoices are kept for 10 years, as accounting law requires.
- Usage statistics and technical logs are kept for 12 months at most.
Your rights
You can access your data, correct it, delete it, get a copy in a reusable format, object to some processing or ask for it to be restricted. You can delete your account yourself in Account › Delete my account on vyxelapp.com, or write to us.
To exercise these rights: vyxel.app@outlook.com. We answer within one month. If you believe your rights are not respected, you can complain to the CNIL (cnil.fr) or to the data protection authority of your country.
Minimum age
Vyxel is meant for professional content creators and is not intended for people under 18. We do not knowingly collect data about minors.
Security
Traffic with Vyxel is encrypted (HTTPS), passwords are stored encrypted and access to data is limited to the people and services that need it.
Changes
If this policy changes, we update the date at the top of the page and, for a significant change, we let you know by email.
Publishing to social media and bundle.social
Vyxel publishes to TikTok, Instagram, Facebook and YouTube through bundle.social (BUNDLE sp. z o.o., Poland), a provider that connects to these platforms' official APIs. When you connect an account, you grant access directly to the platform, through bundle.social, which keeps the access tokens and processes your content on our behalf, as a processor.
Published content and your accounts' data are also subject to the rules of bundle.social and of each platform: bundle.social terms and bundle.social privacy policy, YouTube Terms of Service, Google Privacy Policy, TikTok terms and TikTok privacy policy, Meta terms, Instagram terms and Meta privacy policy.
Vyxel uses YouTube API Services. By connecting a YouTube channel, you agree to the YouTube Terms of Service and the Google Privacy Policy listed above.
You can revoke access at any time: by disconnecting the account in Vyxel (Profiles page), or on the platform itself, for example in your Google account permissions for YouTube, or in the connected apps settings of TikTok, Instagram and Facebook.