GoVidify

GDPR overview

There is no GDPR implementation to describe. A full-text search of every page of the site, archived HTML included, returns no occurrence of the GDPR, of a data processing agreement, of subprocessors or of a retention period. No data protection officer is named, no Article 27 representative is designated, and no legal basis for processing is stated. The privacy policy carries neither an effective date nor a last-updated date. What it does offer is narrower: you may grant or withhold consent for processing, and you may unsubscribe from promotional email. It lists security measures, namely TLS encryption in transit and at rest, regular audits and penetration tests, strict access controls and monitoring, and DKIM, SPF and DMARC. Governing law is Delaware, with no European jurisdiction clause.

Who owns the data?

GoVidify's terms are silent on ownership. They contain no intellectual property clause, no licence granted to the publisher and no explicit assignment of the generated videos to the user. What the documents do cover is personal data. The privacy policy states that GoVidify collects your name, phone number and billing address, along with log data such as IP address, browser version and pages visited, plus Google account data when you sign in with Google or connect a YouTube channel. It undertakes not to use or share that information except as described, and states that it shares no personal data with third-party AI applications. Third parties processing Google user data are bound by confidentiality agreements. Delaware law governs.

Reuse rights

Outputs are built to be published. The FAQ states that generated videos use royalty-free stock footage and AI voiceovers rather than copyrighted material, the library being drawn from Pexels and Pixabay, and the whole flow ends with one-click posting to YouTube or TikTok, so in practice you export in HD and distribute what you make. Two caveats sit on top. The Hobby plan stamps a GoVidify watermark on every export; it disappears on Growth and becomes customizable on Pro. And the terms never state, in either direction, whether commercial reuse of the videos is permitted. They only forbid unlawful, defamatory, obscene or infringing content, and prohibit automated access to the service.

Data retention & training

Hosting summary

The hosting jurisdiction is not published. GoVidify's privacy policy names no country, no region and no infrastructure provider, and mentions neither international transfers nor standard contractual clauses. The only sentence that touches location at all concerns children's data, which the publisher says it deletes from its servers on discovery. Governing law is Delaware, in the United States. Network lookups place the domain's A record at 76.76.21.21, geolocated to the United States and announced by Amazon's AS16509, but the collection tooling flags that address as anycast, which makes it an edge node rather than evidence of where data is stored. Static assets are served from a dedicated subdomain. On security the policy is more forthcoming: TLS encryption in transit and at rest, regular security audits and penetration tests, strict access controls and monitoring. None of that answers the jurisdiction question, which a buyer with data residency requirements would have to raise with the publisher directly.