Privacy Policy

The short version

Multiply holds your email address, the videos you ask us to distribute, the products and links you add, and the permission you grant to the platforms you connect. We use it to do the one job you signed up for.

We do not sell it, and we do not use your content to advertise to anyone else.

What we collect

Only what the service needs to work:

• Your email address, and the name and handle of your workspace.
• The permission a platform gives us when you connect it, plus the display name, username and account identifier that platform returns.
• Details of videos you have published that we detect: the title, description, length, cover image, link, and whether the platform told us the video was AI-generated.
• The video files themselves, and the reformatted versions we make for each destination.
• The products and affiliate links you add.
• Clicks on your tracked links: the time, the country, the referring site, whether it looked automated, and any campaign tags on the link.
• Records of sign-in attempts, which include the IP address they came from.
• Counts of how much of your plan you have used.

What we do not store

We do not keep the IP address of someone who clicks your link. It is combined with their browser description and turned into a one-way code using a value that changes every day, which lets us tell two clicks apart without knowing who either person is, and stops even us reversing it later.

We do keep the IP address of sign-in attempts, because limiting those is how we stop someone hammering the sign-in form for other people's accounts.

We never see or store a password. There isn't one.

What we do with it

Each of these is the service doing what you asked:

• Signing you in.
• Noticing when you publish something new, and collecting a copy of it.
• Reformatting that video and sending it to the destinations you chose.
• Attaching your affiliate link and counting the clicks it gets.
• Showing you what happened, and counting it against your plan.
• Keeping the service secure, and diagnosing it when something breaks.

What we get from TikTok, and why

When you connect TikTok you approve a specific list of permissions. Two of them let us see your basic profile and the list of videos you have posted, which is what lets us notice a new one without you telling us. A third, if you approve it, lets us send a finished draft back into your TikTok inbox for you to post.

We do not ask for permission to post publicly to TikTok on your behalf, and we cannot do it.

You can disconnect TikTok whenever you like, from the Platforms page. When you do, we delete our copy of the access you gave us and stop checking for new posts.

Getting a copy of your video

TikTok does not offer a way for an app to download your video file, even with your permission. To reformat a video for other platforms we need the file, so we use a specialist third-party service to fetch a copy of the video you have already published publicly.

We are telling you this plainly because you should know how your content reaches us, rather than discovering it later.

Who else handles it

These companies process data on our behalf so the service can run. They are not allowed to use it for anything else.

• Vercel — Runs the website and its servers.
• Neon — Hosts the database where your account and settings live.
• Cloudflare R2 — Stores your video files.
• Railway — Runs the background service that processes and sends your videos.
• ScrapeCreators — Fetches a copy of a video you have published, so we can prepare it for other platforms.
• Apify — A backup for the same job, used only when the first one fails.

How long we keep it

The original video we collect is kept while your account is open, because everything else is rebuilt from it.

The reformatted copies made for each destination are deleted about a week after they are made, and download packages after two days. Both can be rebuilt from the original, so keeping them costs storage for no benefit.

Your account, products and analytics stay until you ask us to delete them.

How it is protected

The permission a platform gives us is encrypted before it is written to the database, using AES-256-GCM, and it is never written to a log. Traffic to the site is encrypted in transit.

We are not going to claim a certification we do not hold. If you need to know something specific about our security before trusting us with your account, ask.

Your choices

You can disconnect any platform at any time, edit or remove your products, and hide your storefront.

Email vaughnbrooks2025@gmail.com to ask for a copy of what we hold about you, to correct it, or to have your account and its content deleted.

Children

Multiply is for people running a creator business and is not intended for children. We do not knowingly collect information from anyone under 13, and we will delete it if we find we have.

Changes and contact

When this policy changes we will update the date at the top. If a change materially affects how we handle your information, we will tell you rather than quietly editing the page.

Questions, requests, or anything that looks wrong: vaughnbrooks2025@gmail.com.