Content Corpus

Privacy policy

Content Corpus · last updated 16 October 2026

Content Corpus (content-corpus.strophic.in) is an AI short-video studio built and run by Strophic. It finds video ideas, makes short vertical videos, and publishes them to the YouTube channel and Instagram account its owner connects. It is a private tool: only the owner can sign in, and sign-ups are closed. This policy explains what data the app collects, how it uses, stores and shares that data, how long it keeps it, and how to have it deleted. “We” means Strophic, the operator of Content Corpus; “you” means the person signed in.

1. Data we collect

Your account

  • Your email address and name, and your profile picture if you sign in with Google.
  • If you sign in with email and password: a salted hash of your password, never the password itself.
  • If you sign in with Google, the sign-in tokens Google returns. They are kept with your account record and not used for anything else.
  • For each signed-in session: when it started and expires, your IP address and your browser's user agent.

Google user data, when you connect a YouTube channel

Content Corpus uses YouTube API Services. When you connect a channel, you grant the youtube.upload and youtube.readonly permissions, and we store:

  • a refresh token, which lets the app upload videos to the channel later;
  • the permissions you granted;
  • your channel's ID, name, handle and picture URL, read once from the YouTube Data API when you connect, so the app can show which channel it will publish to.

We do not read, collect or store your existing videos, comments, playlists, subscribers, analytics or any other YouTube or Google data.

Instagram data, when you connect an Instagram account

  • a long-lived access token (it expires after about 60 days) and the permissions you granted;
  • your professional account's ID, username, name and profile picture URL, read once when you connect.

Content you create

Channels and their descriptions, prompts, ideas, scripts, schedules, and the narration, video and caption files the app generates for them.

Cookies and logs

  • A session cookie that keeps you signed in, and a short-lived security cookie (15 minutes) used while you connect an account. No advertising or analytics cookies, and no tracking.
  • Our web server logs each request (IP address, time, page and browser) for security and troubleshooting, and deletes those logs after 14 days.

2. How we use it

  • Your account data: to sign you in and keep your account secure.
  • Google user data: only to show which YouTube channel is connected, and to upload the videos you created and scheduled in Content Corpus to that channel, at the time you chose. We never publish anything you did not schedule, and never change or delete anything already on your channel.
  • Instagram data: only to show which account is connected and to publish the Reels you scheduled to it.
  • Your content: to make and publish your videos.

Content Corpus's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use Google user data for advertising; we do not sell it; we do not use it to develop, improve or train AI or machine-learning models; and no person reads it unless you ask us to (for example, to help with a problem), it is necessary for security, or the law requires it.

3. Who we share it with

We do not sell, rent or trade any data, and we do not share Google or Instagram account data with anyone. The services below run parts of the app for us, and receive only what that part needs:

  • Oracle Cloud hosts the server, the database and the narration model.
  • Cloudflare serves the website and stores the generated video files in private storage (R2).
  • OpenAI writes ideas and scripts. It receives topics, prompts and your channel's description, never your Google or Instagram data.
  • A GPU rental service renders video shots from their text descriptions. It receives no account data.
  • YouTube (Google) and Instagram (Meta) receive the videos you publish, together with their titles and captions.

We may disclose data if the law requires it. Google's use of data is described in the Google Privacy Policy, and Instagram's in the Instagram Privacy Policy.

4. How we protect it

  • All traffic uses HTTPS.
  • YouTube and Instagram tokens are encrypted with AES-256-GCM before they are stored. The website cannot read them back; only the background worker that publishes decrypts them, at the moment it publishes.
  • The database limits every row to the account that owns it (row-level security).
  • Video files sit in private storage that is not publicly reachable.

5. How long we keep it

  • YouTube and Instagram tokens and channel details: until you disconnect the account, or delete the channel it belongs to.
  • Sessions: they expire after 7 days.
  • Web server logs: 14 days.
  • The idea agent's memory of past topics: 30 days per topic, unless you kept the idea.
  • Your account and content: until you delete them, or ask us to.

6. Your choices, and deleting your data

  • Disconnect an account: on the channel's page in Content Corpus, choose Disconnect. Its token and details are deleted from our database at once.
  • Revoke access at the source: remove Content Corpus in your Google Account permissions, or in Instagram under Settings → Apps and websites. The app can then no longer use the token.
  • Delete everything: email [email protected] from the address you sign in with. We delete your account, content, files and tokens within 30 days and confirm by email.
  • You can also email us to get a copy of your data or to correct it.

7. Children

Content Corpus is not meant for anyone under 16, and we do not knowingly collect their data.

8. Changes

If this policy changes, we update it on this page and change the date at the top. We will not use data already collected in a new way without asking for your consent first.

9. Contact

Questions or requests about privacy: [email protected].

Terms of service