Privacy Policy

Last Updated: 14 September 2026

Japper (japper.video) is operated by Louwr. This Privacy Policy constitute a legally binding agreement between you and Louwr.

This Privacy Policy describes how Japper ("we," "our," or "us") collects, uses, and shares your personal information when you use our website, the Japper web application (app.japper.video) and our services.

1. Information We Collect

1.1 Information You Provide to Us

  • Account Information: When you create an account, we collect your email address, and your name, language and any other information you choose to provide. Japper has no passwords: you sign in with a link we email to you.
  • Content: We collect the content you upload and create through our service, including reaction clips, screen recordings and other footage of your product, device frames, the videos Japper composes from them, topics, on-screen lines and post captions.
  • Brand Book: The description of your product you give us (your one-liner) and the brand book sections written from it, such as your audience, tone of voice and what sets you apart, together with the market research Japper carries out for it.
  • Planning and Posting Settings: Your posting schedule, time zone, the days and times posts are planned for, and the settings you choose per post.
  • People You Invite: If you invite someone to film reactions for you, we collect the name and (optionally) email address you enter for them, and the takes they upload through the invite link.
  • Billing Information: Payments are handled by Paddle. We receive your subscription and transaction details from Paddle, but not your full payment card details.
  • Communications: If you contact us directly, we may receive additional information about you.

1.2 Information from Social Login

When you choose to sign up or log in using Google, Apple or Facebook, we collect the following information from that account:

  • Basic Profile Information: Your name and email address
  • User ID: A unique identifier for your account with that provider

Important: We only request access to basic profile information necessary to create and maintain your account. We do not access your posts, friends list, or other private information through social login.

1.3 Information from Connected Social Media Accounts

Japper can post your videos to TikTok, Instagram and Facebook. This only happens for accounts you connect yourself, in the Socials settings of the app, by signing in with that platform and granting Japper permission. When you connect an account, we receive and store the following:

  • TikTok: Through TikTok Login Kit and the Content Posting API, with the permissions user.info.basic and video.publish: your TikTok open ID, display name, username and avatar URL, and an access token and refresh token with their expiry times. Before a post is set up and published, we also retrieve your creator information from TikTok (such as the privacy levels available to your account and whether comments, duets and stitches can be turned on), so that we can show you the options TikTok allows.
  • Instagram: With the permissions instagram_business_basic and instagram_business_content_publish: your Instagram user ID, username, name and profile picture URL, and an access token with its expiry time.
  • Facebook Pages: With the permissions pages_show_list, pages_manage_posts and pages_read_engagement: the ID, name, username and picture of the Page you post to, the Page access token, and the user access token used to list the Pages you granted and to withdraw those permissions when you disconnect.
  • Post Results: After a post is published, the status of the post and its ID or link on the platform, so we can show you whether and where it went out.

What we send to these platforms is the video you scheduled, the caption for that post and, for TikTok, the post settings you chose (who can view the post, whether comments, duets and stitches are allowed, and the branded content or promotional content disclosure). Japper does not use these connections to read your messages, followers or other content on those platforms.

TikTok Data: Data we receive through TikTok's APIs is used only to show you which account is connected and to publish the content you have scheduled and confirmed. We do not sell it, share it with advertisers, use it for advertising or profiling, or send it to AI providers.

1.4 Automatically Collected Information

  • Usage Data: Information about how you use our service, including pages visited and features used
  • Device Information: Information about your device, browser, and operating system
  • Log Data: Server logs that may include IP addresses, access times, and pages viewed
  • Cookies: We use cookies and similar technologies to enhance your experience

2. How We Use Your Information

We use your personal information for the following purposes:

  • Service Provision: To provide, maintain, and improve our services
  • Account Management: To create and manage your account, including authentication
  • Writing and Planning: To write your brand book, suggest topics, hooks and captions, and plan your posting calendar
  • Composing Videos: To compose videos from the footage you upload
  • Publishing: To publish the videos you scheduled to the social media accounts you connected, at the time you planned them
  • Communication: To send you service-related communications, such as sign-in links, and respond to your inquiries
  • Security: To protect our service and users from fraud, abuse, and security threats
  • Analytics: To understand how our service is used and improve user experience
  • Legal Compliance: To comply with applicable laws and regulations

2.1 Legal Basis for Processing (GDPR)

Our legal basis for processing your personal information includes:

  • Consent: When you provide explicit consent (e.g., for marketing communications, or when you connect a social media account)
  • Contract Performance: To provide our services as outlined in our Terms of Service
  • Legitimate Interest: To improve our services and ensure security
  • Legal Obligation: To comply with applicable laws

2.2 AI Processing

Japper uses OpenAI as a sub-processor to write text for you. To do so, we send OpenAI's API the text needed for the task:

  • Your one-liner and brand book, to write or rewrite your brand book
  • Your brand book, market research and the topics you already made or were offered, to suggest topics and hooks and plan your calendar
  • A video's topic and on-screen lines, and the platforms it is posted to, to write captions per platform
  • Your brand book, to research your market with OpenAI's web search, which reads public web pages

We do not send your video files, clips, recordings, social media tokens or data received from TikTok, Instagram or Facebook to OpenAI. Everything Japper writes is a suggestion that you can review and edit before it is used. According to OpenAI's API data usage policies, data sent through the API is not used to train OpenAI's models by default.

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

  • Service Providers: With trusted third-party vendors who help us operate our service, including OpenAI (AI text generation), Google Cloud (storage of uploaded footage and rendered videos in production), Paddle (payments) and our hosting and email providers
  • Platforms You Publish To: With TikTok, Instagram or Facebook, but only the videos, captions and post settings you scheduled for the accounts you connected
  • Your Organization: With the other members of the organization you work in, who can see its brand book, footage, plans and connected accounts
  • Legal Requirements: When required by law or to protect our rights and safety
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly authorize us to share information

Social Media Data: Information obtained from Google, Apple and Facebook login is used solely for account creation and authentication. Information obtained from connected TikTok, Instagram and Facebook accounts is used solely to show the connected account and to publish the content you scheduled. We do not share this data with other third parties beyond what is necessary for service operation, and we never sell it or use it for advertising.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

  • Encryption of data in transit (HTTPS)
  • Encryption at rest of the access and refresh tokens of connected social media accounts, which are only used to publish the content you scheduled
  • Regular security assessments and monitoring
  • Access controls and authentication requirements
  • Secure coding practices and regular updates

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Protect against fraudulent or abusive activity

Account information and content are retained while your account exists. When you delete your account, we delete your personal data. Videos, footage and brand books you made in an organization belong to that organization: they stay available to its other members, and are deleted when the organization is closed. We only keep what the law requires us to keep: payment and invoice records are kept for 7 years, as Dutch tax law requires. Copies in our backups are removed as those backups are replaced in the normal course of operations. In addition:

  • Connected Accounts: Tokens and account details are kept while the account is connected. When you disconnect it, we delete them, together with any posts to that account that had not been published yet.
  • Footage: Clips and recordings are kept until you delete them. Videos already made with a deleted clip keep their own file.
  • Videos: When you delete a video, its file is deleted. While your account exists, we keep its topic so that Japper does not suggest the same topic again.
  • Organizations: Closing an organization deletes it together with everything made in it.
  • Published Posts: Posts already published stay on TikTok, Instagram or Facebook until you delete them there. Deleting them in Japper does not remove them from the platform.

6. Your Rights and Choices

You have the following rights regarding your personal information:

6.1 Access and Portability

  • Request access to your personal information
  • Request a copy of your data in a portable format

6.2 Correction and Updates

  • Update your account information at any time
  • Request correction of inaccurate information

6.3 Deletion

  • Delete your account and associated data through your account settings
  • Request deletion of specific information by contacting us

6.4 Objection and Restriction

  • Object to processing of your information for certain purposes
  • Request restriction of processing under certain circumstances

6.5 Connected Account Controls

You can disconnect a TikTok, Instagram or Facebook account at any time in the Socials settings of the Japper app. When you disconnect:

  • For TikTok, we ask TikTok to revoke Japper's access token
  • For Facebook, we ask Facebook to remove the permissions you granted Japper
  • For Instagram, which offers no revocation for this, you can also remove Japper under the apps and websites in your Instagram settings
  • We delete the stored tokens and account details, and cancel posts to that account that have not been published yet
  • You can also revoke Japper's access at any time from the settings of TikTok, Instagram or Facebook itself, or contact us to delete data obtained from these platforms

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Remember your preferences and settings
  • Authenticate your account
  • Analyze usage patterns and improve our service
  • Provide social media features

This website stores a cookie to remember your language. The Japper app uses a session cookie to keep you signed in and a security cookie to protect your requests against cross-site request forgery.

You can control cookies through your browser settings, but disabling cookies may affect service functionality.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including:

  • Adequacy decisions by relevant authorities
  • Standard contractual clauses
  • Other legally recognized transfer mechanisms

9. Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

10. Third-Party Services

Our service may contain links to third-party websites or integrate with third-party services (including TikTok, Instagram, Facebook, Google, Apple, OpenAI and Paddle). This Privacy Policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services you use, including:

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

  • Update the "Last Updated" date
  • Notify you of material changes via email or service notification
  • Obtain consent where required by law

12. Contact Information

Data Controller: Japper

Email: info@japper.video

Contact Person: Tristan de Wit

For privacy-related inquiries, data subject requests, or concerns about our privacy practices, please contact us using the information above. We will respond to your request within 30 days.

13. Additional Rights for EU/UK Residents

If you are a resident of the European Union or United Kingdom, you have additional rights under GDPR/UK GDPR:

  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority
  • Right to object to automated decision-making

14. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of the sale of personal information
  • Right to non-discrimination for exercising CCPA rights

Note: We do not sell personal information as defined by the CCPA.

This Privacy Policy is designed to comply with global privacy regulations including GDPR and CCPA, and with the developer requirements of TikTok and Meta. If you have questions about our privacy practices, please don't hesitate to contact us.