vidIQ

The privacy policy does not explicitly state whether user content is used to train AI models. However, vidIQ collects extensive user data and grants itself broad rights to use, modify, and create derivative works from user content. The terms grant vidIQ a 'non-exclusive, transferable, sublicensable, worldwide, royalty-free license' to user content, which could potentially include AI training purposes, though this is not explicitly stated.

“By making any User Content available through the Sites or Services You hereby grant to vidIQ a non-exclusive, transferable, sublicensable, worldwide, royalty-free license to use, copy, modify, create derivative works”

The license granted by users to vidIQ is extremely broad. Users grant vidIQ a 'non-exclusive, transferable, sublicensable, worldwide, royalty-free license' to use, copy, modify, create derivative works, publicly display, publicly perform and distribute user content. The sublicensable and transferable nature means vidIQ can share these rights with third parties without additional user consent.

“non-exclusive, transferable, sublicensable, worldwide, royalty-free license to use, copy, modify, create derivative works based upon, publicly display, publicly perform and distribute your User Content”

vidIQ shares user data extensively with third parties including service providers (Google, TikTok, Facebook, Twitter, Iterable, Sendgrid, Intercom), affiliates, partners, and in business transfers. Data is also shared for legal compliance and to protect rights. The policy explicitly states data may be shared with multiple categories of third parties without granular user control.

“We may disclose the information we collect from you to third party vendors, service providers, contractors or agents who perform functions on our behalf, including but not limited to, Google, TikTok, Facebook Advertising, Twitter, Iterable, Sendgrid and Intercom.”

The privacy policy does not specify data retention periods or provide clear deletion rights. While users can disable connections to third-party accounts, there is no explicit statement about how long vidIQ retains personal data or how users can request deletion. This creates moderate risk regarding data retention practices.

“You have the ability to disable the connection between your Account and your Third Party Accounts, at any time, through the Sites and/or Services.”

vidIQ claims ownership of all service-related intellectual property and explicitly states it does not claim ownership of user content. However, the broad license granted by users (transferable, sublicensable, worldwide, royalty-free) to use, modify, and create derivative works effectively gives vidIQ extensive control over user-generated content outputs, creating significant IP risk.

“vidIQ does not claim any ownership rights in any User Content and nothing in this Agreement will be deemed to restrict any rights that You may have to use and exploit your User Content.”

The documents do not mention any SOC2, GDPR, HIPAA, or ISO certifications. While there is a section for EU individuals mentioning GDPR compliance, no specific certifications or compliance standards are documented. This represents a significant gap in demonstrating security and compliance posture.

“No explicit mention of SOC2, GDPR compliance certifications, HIPAA, or ISO certifications found in the provided text.”