Privacy Policy

Effective 4 November 2026 · Last updated 4 November 2026. Vidchestra is operated by Boostlete LLC, a Wyoming limited liability company.

This policy explains what personal data Vidchestra collects, why, who processes it and what rights you have. The controller is Boostlete LLC, a Wyoming limited liability company, 1620 N Carpenter Rd, Suite D46, Modesto, CA 95351, United States. Contact for privacy questions and requests: support@vidchestra.com.

Your media stays on your device

The Windows app and Web Studio render photos, videos, audio and documents on your own device. Web Studio processes the files you pick inside your browser and saves the results back to your device; your media files are not uploaded to Vidchestra's servers by either. Files go to a third-party scheduling provider (such as Mixpost or Publer) only when you connect that provider in the desktop app and choose to publish; the app sends them directly from your computer to the provider. For Content360 and CSV export, files are only written to a folder on your computer. The provider's own privacy policy applies to anything you send it.

Access tokens for scheduling providers, and the app's own sign-in token, are stored in Windows Credential Manager on your computer, not on our servers.

Data we collect

Account: name, email address, password hash, email-verification status and two-factor settings. If you choose to sign in with Google or GitHub, we receive from that provider your name, email address, profile picture URL and your account id with that provider.
Sign-in sessions: for each signed-in browser, the session's start and expiry time, IP address and browser user agent, for security.
Billing: plan, subscription status and dates, invoices, amounts and refunds, and your Stripe customer id. Card details are entered on Stripe's pages and never reach our servers.
Licensing: for each computer you activate: the computer's name, platform, app version, a one-way hash of the computer's Windows installation id, and when it was activated and last checked in. When the app checks for updates it contacts our server, which sees the request like any web request.
Synced settings (optional): only if you turn on sync in the desktop app: your brand profiles and templates (names, colours, text, settings and file paths — not the files themselves), so they also appear on your other computers and in Web Studio.
Web Studio usage: for each browser batch, whether it is videos or photos, how many, and your plan at the time, to apply plan limits.
Support: messages you send us (including through the contact form) and our replies.
Website analytics: first-party page-view counts: the page path, the referring website's domain and campaign tags (utm_source, utm_medium, utm_campaign) or referral code in the link you followed. These are recorded without any cookie, visitor identifier, IP address or fingerprint, so page views cannot be linked to each other or to you. Nothing is recorded if your browser sends Do Not Track or Global Privacy Control. We also record milestones to understand how customers find and use Vidchestra: trial start, checkout started, subscribed, cancelled and installer downloads are linked to your account (downloads only if you are signed in); sign-ups are counted with the referral code used, if any, but without your identity.
Email: a record of the emails we send you (recipient, subject, text and delivery status; links in sign-in and password-reset emails are removed before storage), and whether you turned off tips emails.
Abuse prevention: to rate-limit requests we keep short-lived counters keyed by a one-way hash of your IP address.

The desktop app does not send usage analytics or crash reports to us.

Why we use it (legal bases)

To provide your account, licence, sync and support — performance of our contract with you.
To take payments, keep invoices and meet tax and accounting duties — contract and legal obligation.
To secure the service, prevent abuse and enforce plan limits — legitimate interests.
To send product tips to new customers (you can turn them off in Account → Settings & privacy or with the link in each email) and to understand which pages help people find Vidchestra — legitimate interests; where the law requires consent, we ask for it.

We do not sell personal data or share it for cross-context behavioural advertising, and we do not use it for automated decisions with legal or similarly significant effects.

Service providers

We use these providers, which process data on our behalf under their data processing terms:

Fly.io — hosting of the website and account service (servers in San Jose, California, USA).
Supabase — PostgreSQL database hosting (Amazon Web Services region us-west-2, Oregon, USA).
Stripe — payments, subscriptions, invoices and the billing portal. Stripe also processes payment data as an independent controller under its own privacy policy, for example for fraud prevention.
Hosting.com (formerly A2 Hosting) — sending our emails (from noreply@vidchestra.com, by SMTP) and hosting our support mailbox (support@vidchestra.com).
Google and GitHub — only if you choose to sign in with them; they act under their own privacy policies for your account with them.

International transfers

Boostlete LLC is based in the United States and our servers and database are in the United States, so if you live elsewhere your data is transferred to and stored in the United States. Our providers may also process data in other countries where they operate. Where the law of your country requires safeguards for such transfers, we rely on the standard contractual clauses or similar data-transfer terms included in our providers' data processing terms, where those apply.

Retention and deletion

Account, licensing, synced settings and support data are kept while your account exists.
When you delete your account (Account → Settings & privacy → “Delete my account permanently”) we cancel any active subscription immediately and delete your sign-in methods, sessions, activated computers, synced settings, Web Studio usage records, internal access grants, email preferences and support history (including contact-form messages sent from your email address); your name and email address are removed from the account record. We keep invoices, subscription and payment records for as long as tax and accounting law requires, and a record that the deletion was carried out.
The following are deleted automatically by a daily job: records of emails sent after 12 months; security events and the admin audit log after 12 months; copies of payment notifications received from Stripe after 12 months; analytics records (page views and account milestones) after 24 months; expired sessions, sign-in codes and rate-limit counters shortly after they expire.
Our database provider keeps backups for disaster recovery; deleted data disappears from them as they are replaced on their normal rotation.

Your rights

You can download a copy of your data (Account → Settings & privacy → “Download my data”, a JSON file with your profile, subscriptions, invoices, computers, support messages and sessions), correct your details, and delete your account at any time. Depending on where you live — for example in the EU/EEA, the UK, California or other US states, Canada, Brazil or Australia — you may also have the right to access, correct, delete or port your data, to object to or restrict processing, to withdraw consent, and to complain to your data-protection authority. We will not discriminate against you for using these rights. Send requests to support@vidchestra.com; we may need to confirm your identity, and we respond within the time the applicable law requires.

Security

Passwords are stored only as salted hashes, admin access requires two-factor authentication, connections to our website and between our servers and database are encrypted, desktop sign-in tokens are stored on our side only as hashes, and licences are cryptographically signed. No system is perfectly secure. If a security incident affects your personal data, we will notify you and the relevant authorities as and when the law requires.

Cookies and local storage

See Cookies & Local Storage for every cookie and storage key the website uses.

Children

Vidchestra is not intended for children under 16, and we do not knowingly collect their data.

Changes

We will post updates here with a new “last updated” date and notify account holders of material changes by email or in the app.

Contact

Boostlete LLC
1620 N Carpenter Rd, Suite D46
Modesto, CA 95351
United States
Email: support@vidchestra.com · support form