Privacy Policy
How Mostly collects, uses, stores and protects your information, and the choices you have.
Last updated January 5, 2026Mostly Pte. Ltd.Singapore
- Secure Storage
- Files stored on Cloudflare R2 with encryption
- No Card Storage
- Payments securely processed by Stripe
- Your Control
- Export or delete your data anytime
01Introduction
This Privacy Policy applies to mostly.so (also referred to as "Mostly", the "App", or the "Service"), an AI-powered video creation and social media publishing application available at https://mostly.so.
mostly.so is owned and operated by Mostly Pte. Ltd. ("we," "our," or "us"), a company registered in Singapore. We are committed to protecting your personal information and your right to privacy. We comply with the Personal Data Protection Act 2012 (PDPA) of Singapore and other applicable global data protection laws.
This Privacy Policy explains how mostly.so collects, uses, discloses, stores, and safeguards your information when you use our application and website. By using mostly.so, you agree to the collection and use of information in accordance with this policy.
02Information We Collect
We collect information that you provide directly to us, as well as information that is collected automatically when you use our Service.
Information You Provide
- Account Information: Email address, username, and password when you register
- Profile Information: Any additional information you choose to add to your profile
- Payment Information: Payment details processed securely through Stripe (we do not store your full credit card number)
- User Content: Videos, audio files, and other content you upload to the Service
- Communications: Information you provide when contacting our support team
Automatically Collected Information
- Device Information: Device type, operating system, browser type, and unique device identifiers
- Usage Data: Features used, pages visited, time spent on pages, and interaction patterns
- Log Data: IP address, access times, referring URLs, and error logs
- Analytics Data: Aggregated usage patterns collected through Google Analytics
03How We Use Your Information
We use the information we collect for various purposes, including:
Service Operations
- To provide, maintain, and improve the Service
- To process your transactions and manage your account
- To process your videos and generate AI-powered content
- To respond to your comments, questions, and support requests
Service Improvement
- To analyze usage patterns and optimize user experience
- To train and improve our AI models using anonymized or aggregated data
- To develop new features and functionality
- To conduct research and analytics
Communications
- To send you technical notices and support messages
- To send promotional communications (with your consent)
- To notify you of changes to our Service or Terms
Security & Legal
- To detect, prevent, and address technical issues and security threats
- To enforce our Terms of Service
- To comply with legal obligations
04Data Storage & Security
Your data is stored securely using industry-leading infrastructure and security practices.
Storage Infrastructure
- Your files and content are stored on Cloudflare R2, a secure and globally distributed storage service
- Account data is stored on secure servers with encryption at rest
- All data transmission is encrypted using TLS/SSL
Security Measures
- Encryption of data at rest and in transit
- Regular security audits and vulnerability assessments
- Access controls and authentication measures
- Secure development practices
Data Retention
- Your content is stored while your account is active and in good standing
- User storage will be permanently deleted 30 days after a payment failure
- Upon account deletion request, your data will be retained for up to 90 days before permanent deletion
- You may export or download your data at any time before deletion
While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
05Data Sharing & Third Parties
We may share your information with third parties only in the following circumstances:
Service Providers
We work with third-party service providers who assist us in operating our Service. These providers have access to your information only to perform specific tasks on our behalf:
- Cloudflare: Cloud storage and content delivery
- Stripe: Payment processing
- Google (Analytics): Usage analytics and service improvement
- AI Model Providers: OpenAI, Google, Fal, ElevenLabs, Modal, and AWS for AI processing
These service providers are contractually obligated to protect your data and use it only for the specific services they provide to us.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
With Your Consent
We may share your information with third parties when you give us explicit consent to do so.
We do not sell your personal information to third parties.
06Third-Party Platform Access (TikTok, YouTube & Social Integrations)
mostly.so allows you to connect your accounts from third-party platforms such as TikTok, YouTube, and other social media services. This section explains how we handle data from these connected accounts.
TikTok API Integration & Data Protection
mostly.so integrates with TikTok APIs (such as TikTok Login Kit and TikTok Content Posting API) to enable seamless account connection and video publishing.
- Data Accessed: When you authorize mostly.so with TikTok, we only access permissions explicitly authorized by you (such as your basic profile info or video upload permissions).
- Data Usage: We use TikTok API access solely to enable direct publishing, captioning, and status checking requested by you.
- No Selling or Sharing: We never sell, rent, monetize, or transfer your TikTok user data or video content to third-party data brokers or advertisers.
- AI Isolation: Data obtained through TikTok APIs is NEVER used to train generalized artificial intelligence models.
- Revoking Access: You can disconnect your TikTok account at any time through your mostly.so settings or via TikTok (Settings & Privacy → Security & Permissions → Apps & Services).
- TikTok Privacy Policy: Review TikTok's privacy practices at https://www.tiktok.com/legal/privacy-policy.
YouTube API Services & Google Limited Use
This application uses YouTube API Services. By using the YouTube features of our Service, you are subject to the YouTube Terms of Service (https://www.youtube.com/t/terms) and Google Privacy Policy (https://policies.google.com/privacy).
Connected Account Data
When you connect a third-party account, we may access certain information including:
- Video content and metadata (titles, descriptions, thumbnails)
- Channel or profile information
- Analytics and performance data (if authorized)
- Other content you explicitly authorize us to access
How We Use Connected Account Data
- We only access your connected accounts to perform actions that you specifically request (e.g., uploading and publishing videos)
- We do not share or sell your video data or connected account information to any third parties
- Your video data is processed solely to provide the services you have requested
- We do not monitor, store, or analyze your content for purposes beyond your explicit requests
Google/YouTube Data - Limited Use Disclosure
Our use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only use Google user data to provide and improve the features you explicitly request
- We do NOT use Google user data for AI model training purposes
- We do NOT use Google user data for marketing or advertising purposes
- We do NOT transfer Google user data to third parties except as strictly necessary to provide the features you request
- We do NOT transfer Google user data to third parties for their independent use
- Human access to Google user data is limited to cases where it is necessary to address security issues, comply with applicable law, or respond to your support requests (with your consent)
CRITICAL: Complete Data Segregation from AI Services
Our YouTube and TikTok integrations are exclusively for PUBLISHING and reading basic authorized profile information. There is complete architectural separation between:
- Social Platform API data flows (TikTok API, YouTube upload, channel info)
- AI processing pipelines (OpenAI, ElevenLabs, Fal, Modal, AWS)
These systems never share connected social account data with AI providers for training purposes.
Data Protection for Connected Accounts
- Video data from connected accounts is processed securely and in accordance with this Privacy Policy
- We adhere to the API terms of service of each platform we integrate with
- You can revoke access to connected accounts at any time through your account settings or directly through the third-party platform (such as Google security settings: https://myaccount.google.com/permissions or TikTok app settings)
Revoking Access
- You can disconnect any third-party account from our Service at any time through your account settings
- Upon disconnection, we will cease accessing your data from that platform
- Previously processed content will be handled according to our data retention policies
For more information about how specific platforms handle your data, please refer to their respective privacy policies:
- TikTok Privacy Policy: https://www.tiktok.com/legal/privacy-policy
- YouTube/Google Privacy Policy: https://policies.google.com/privacy
- Google API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy
07AI Model Training & Data Segregation
To improve our Service and develop better AI capabilities, we may use certain data in the following ways:
AI Training
- We may use anonymized or aggregated data from your usage of our Service to train and improve our AI models
- This helps us provide better clip detection, transcription accuracy, and content suggestions
- Individual user content is processed in aggregate and is not identifiable
IMPORTANT DATA SEGREGATION - GOOGLE/YOUTUBE DATA
Our platform maintains complete architectural separation between Google API integrations and AI processing services. This means:
- Google User Data is NEVER sent to AI service providers (such as OpenAI, ElevenLabs, Fal, Modal, or AWS AI services)
- The YouTube integration is used ONLY for one-directional publishing (uploading videos from our platform TO YouTube) and reading basic channel information
- We do NOT download, process, or analyze any content from your YouTube account using AI services
- AI processing only occurs on content that users directly upload to our platform, which is completely separate from any Google API data flows
- These systems are architecturally isolated - there is no data pipeline that connects Google API data to our AI processing services
Our AI service providers (OpenAI, Google AI, ElevenLabs, Fal, Modal, AWS) are used exclusively for processing user-uploaded content that has no connection to Google APIs.
Marketing
- We may use anonymized examples of content created with our Service for marketing purposes (with appropriate permissions)
- We may feature success stories or use cases (with explicit user consent)
- User statistics and aggregated metrics may be used in promotional materials
IMPORTANT: Data obtained from Google APIs (including YouTube) is NEVER used for marketing purposes. We do not use Google user data in promotional materials, success stories, or any marketing content.
If you do not wish for your non-Google content to be used in these ways, please contact us at [email protected].
08Your Rights
Depending on your location, you may have certain rights regarding your personal information:
Access & Portability
- You can access your personal information through your account settings
- You can export your data at any time using our export features
- You can request a copy of all data we hold about you
Correction
- You can update your account information at any time through your settings
- You can request correction of any inaccurate information
Deletion
- You can delete your account at any time
- Upon deletion request, your data will be permanently removed within 90 days
- Certain data may be retained for legal or legitimate business purposes
Objection & Restriction
- You can object to certain processing of your data
- You can request restriction of processing in certain circumstances
Withdrawal of Consent
- Where we rely on consent, you can withdraw it at any time
- Withdrawal does not affect the lawfulness of processing before withdrawal
To exercise any of these rights, please contact us at [email protected].
10Children's Privacy
Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.
If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us at [email protected]. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to remove that information from our servers.
11International Data Transfers
Your information may be transferred to and maintained on computers located outside of your country, where data protection laws may differ from those of your jurisdiction.
If you are located outside Singapore and choose to provide information to us, please note that we transfer the data to Singapore and process it there.
Our service providers may also be located in different countries. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
By using our Service, you consent to the transfer of your information to Singapore and other countries where our service providers are located.
12Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
For material changes, we will provide notice through the Service or via email before the change becomes effective.
You are advised to review this Privacy Policy periodically for any changes. Your continued use of the Service after any modifications to the Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide by the modified Privacy Policy.
13Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Mostly Pte. Ltd.
Email: [email protected]
General Inquiries: [email protected]
Data Protection Officer
For data protection inquiries, please contact: [email protected]
Registered Address
[Address to be updated]
Singapore
Questions about your data or this policy?
[email protected]