Legal

Privacy Policy

Last updated: October 4, 2026 · Effective for Void Studio (voidaep.dev)

1. What we collect

• Account data — when you log in with Discord or Telegram, we receive and store your user ID, username and avatar. We do not receive your password (OAuth only).
• Uploaded video files — when you use the Patcher, your file is uploaded to our servers for processing (patching and, if needed, re-encoding).
• TikTok account data — only if you choose to connect a TikTok account to publish from Void Studio (see section 5): your open_id, display name, avatar, and a posting token. This is optional and separate from logging in.
• Usage data — daily patch counts, tier, and basic request logs (IP address, user agent) used to enforce limits and prevent abuse.
• Cookies — a session cookie keeps you logged in. No advertising cookies are set by us directly (see section 4).

2. How we use it

Account data for authentication and tier management. Uploaded files are processed and returned to you; we do not sell, train on, or publish your content. Usage data is used to enforce daily limits, rate-limit abuse, and keep the service stable.

3. Retention

• Uploaded files are deleted automatically shortly after processing (~30 minutes). The patched output is available for download for the same period.
• Published output — if you publish a patched video to TikTok from Void Studio, the copy we serve to TikTok is kept for a minimum of one hour so TikTok's download can complete, then deleted.
• TikTok tokens — kept only while your TikTok account is connected (see section 5).
• Account + usage data are kept while your account is active. You can request deletion at any time (see section 7).
• Request logs are retained briefly for security/abuse investigation.

4. Advertising & third parties

We do not run advertising networks or third-party ad tags on this site. The only third parties that receive data are the ones required to run the service: the payment processor at checkout and the authentication provider you choose to sign in with.

Our infrastructure runs on Vercel (hosting) and our own servers. Login is provided by Discord and Telegram; they receive the information needed to complete the OAuth handshake per their own policies. Connecting TikTok is separate, optional, and used only for publishing your own videos (see section 5).

5. TikTok account access

Connecting a TikTok account is optional and only needed if you want to publish a video to TikTok from Void Studio. If you connect one, TikTok sends us a limited set of account data through the OAuth handshake.

• What we receive — your TikTok open_id, display name and avatar, and an access token that lets us publish on your behalf. We never receive your TikTok password, and we have no ability to read your messages, followers or analytics.
• What we do with it — publish the specific video you selected using the privacy level and disclosure settings you chose in the publish dialog, and show your connected account name back to you. Nothing is posted on a schedule, in bulk, or without you starting each post.
• Where it's stored — access and refresh tokens are stored server-side on our own infrastructure. They are never exposed to the browser and never shared with third parties.
• Retention — tokens are kept only while the account is connected. We do not sell this data or use it to train anything.
• Revoking access — disconnect at any time from your profile page. Disconnecting revokes the token immediately. You can also remove Void Studio from the connected apps in your TikTok settings.

6. Children

Void Studio is not directed to children under 13 and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

7. GDPR / CCPA

If you are in the EU/UK (GDPR) or California (CCPA/CPRA), you may request access to, correction of, or deletion of your personal data, and you may object to or restrict processing. We will honor verified requests within the timeframes required by law.

8. Contact & deletion requests

Contact us at /contact or email [email protected] to request account deletion or ask privacy questions. We respond within 30 days.

9. Changes

We may update this policy. Material changes will be announced on the site. Continued use after changes means you accept the updated policy.