Skip to main content
AI Social Video Publisher

Privacy Policy

Last updated: August 11, 2026

Kroza (“Kroza,” “we,” “us,” or “our”) operates AI Social Video Publisher (the “Service”), available at kroza.hushstackcambodia.site. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the practices described here.

1. Information we collect

Account information

When you register, we collect your email address and a securely hashed password. We never store your password in plain text.

Connected platform accounts

If you connect a YouTube or Facebook account so you can publish content, we receive and store, in encrypted form, the access and refresh tokens Google or Meta issue for that connection, along with the connected channel/page ID and name and the scopes you granted. We use these tokens only to perform the actions you request (such as uploading a video you approve) and never to access your account outside of what you’ve authorized.

Video and content you provide

Videos you upload, or authorize us to fetch from a URL you confirm you own or have permission to use, are stored in private cloud storage (Cloudflare R2) that is never publicly accessible. Access to a stored video is only possible via a short-lived, signed link generated for you. Uploaded/imported videos are automatically deleted after a limited retention window (24 hours by default) unless you’ve published or otherwise saved the result.

AI-generated content

When you request AI-generated titles, scripts, captions, hashtags, or translations, relevant video content and metadata are sent to Google’s Gemini API for processing. Generated content is stored in your account so you can review and edit it before publishing.

Usage and log data

We keep structured server logs (timestamps, request identifiers, error details) to operate and secure the Service. These logs are designed to exclude OAuth tokens, passwords, and other provider credentials.

2. How we use your information

  • To provide, operate, and maintain the Service, including AI content generation and publishing.
  • To authenticate you and keep your account secure.
  • To publish content to YouTube or Facebook only when you explicitly initiate a publish action.
  • To enforce free-tier usage limits.
  • To diagnose and fix technical problems.
  • To comply with legal obligations.

We do not sell your personal information, and we do not use your videos or connected account data to train third-party AI models beyond the single request needed to generate the content you asked for.

3. Third-party services

The Service integrates with the following third parties, each governed by their own privacy policy:

  • Google (YouTube Data API, Gemini API): used to publish videos to your connected YouTube channel and to generate AI content. See Google’s Privacy Policy.
  • Meta (Facebook Graph API): used to publish videos to Facebook Pages you connect and manage. See Meta’s Privacy Policy.
  • Cloudflare: provides private object storage and content delivery for uploaded video files.

Your use of Google or Meta login and publishing features is also subject to those providers’ own terms and policies.

4. Data retention

Uploaded and imported video files are retained for a limited window (24 hours by default) and then automatically deleted from storage. Account information and connected-account tokens are retained until you delete your account or revoke the connection, whichever comes first. You can revoke a YouTube or Facebook connection at any time from your account settings, which deletes the stored tokens for that connection immediately.

5. Data security

OAuth tokens are encrypted at rest. Passwords are hashed using industry-standard algorithms and never stored in plain text. Video storage is private by default, with access only through short-lived signed URLs. We use HTTPS for all traffic between your browser and our servers.

6. Your rights and choices

  • You can review and edit AI-generated content before it is published anywhere.
  • You can disconnect a YouTube or Facebook account at any time.
  • You can request deletion of your account and associated data by contacting us at the email below.
  • You can request a copy of the personal information we hold about you.

7. Cookies

We use essential, HTTP-only cookies to keep you signed in and to protect against cross-site request forgery. We do not use third-party advertising or tracking cookies.

8. Children’s privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above when we do. Continued use of the Service after a change constitutes acceptance of the updated policy.

10. Contact us

Questions about this Privacy Policy or your data can be sent to penmenghong7@gmail.com.