Privacy Policy
Last updated 26 October 2026
This policy explains how Wall & Fifth Ltd ("Wall & Fifth", "we", "us") collects and uses personal data in connection with Videngine at videngine.io and app.videngine.io (the "Service"). It applies to visitors to our website, people who joined our launch list before launch, account holders, and people whose data appears in content our customers process through the Service.
1. Who we are
Wall & Fifth Ltd is a company registered in England and Wales, company number 16573579, registered office 20 Wenlock Road, London, N1 7GU. For most data described in this policy we are the data controller. Privacy questions: hello@videngine.io.
2. Controller or processor
- Website, launch list, account and billing data (sections 3.1–3.4 and 3.6): we are the controller.
- Customer Content (section 3.5): our customer is the controller and we act as its processor. We process Customer Content only on the customer's instructions under our Terms of Service. If your data appears in a video or listing created by one of our customers, contact that customer first; we will help them respond.
3. What we collect
3.1 Launch list. If you joined our launch list before Videngine opened: the email address you submitted, the date you joined, the source of the signup, a record of your consent to receive a launch notification, and whether that notification has been sent. Joining did not create an account or start a subscription.
3.2 Account data. Name, work email, organisation, role, password (hashed) and account settings.
3.3 Usage and technical data. IP address, browser and device type, pages and features used, render activity, timestamps, error logs and approximate location derived from IP.
3.4 Communications. Emails, support messages and enquiries you send us, and our replies.
3.5 Customer Content. Listings, product data, images, footage, audio, logos, text, feeds and the videos rendered from them. This may contain personal data such as contact names, phone numbers, addresses, or people visible in footage. What it contains is determined by the customer.
3.6 Billing data. Billing contact, billing address, plan, subscription status, invoices and payment records. Card payments are processed by Stripe; card details are entered with and held by Stripe and never stored by us.
We do not knowingly collect special category data and ask customers not to upload it.
4. Why we use it and our lawful bases
| Purpose | Data | Lawful basis |
|---|---|---|
| Sending the launch notification you asked for | Launch list | Consent (withdraw at any time) |
| Providing the Service, rendering and storing videos | Account, usage, Customer Content | Contract (Terms of Service); customer's instructions for Customer Content |
| Account security, fraud and abuse prevention | Account, usage | Legitimate interests (keeping the Service secure) |
| Support and communications | Account, communications | Contract; legitimate interests |
| Taking payment, managing subscriptions, billing and accounting | Account, billing | Contract; legal obligation |
| Improving the Service and measuring performance | Usage (aggregated where possible) | Legitimate interests |
| Product updates to business contacts | Account | Legitimate interests; opt out at any time |
| Complying with law and enforcing our Terms | Any | Legal obligation; legitimate interests |
We do not sell personal data, and we do not use Customer Content to train machine-learning models.
5. Google and YouTube data
A workspace owner or admin can connect Google Drive or a YouTube channel to Videngine using Google sign-in. Each connection asks only for what it needs:
- YouTube (permission to upload videos and to view the channel, plus the Google account's email address). We use it to upload the videos your workspace approves to the channel you chose, with their titles, descriptions, tags, chapters, thumbnails and visibility, and to read the channel's name, handle and picture so the app can show which channel is connected. The email address is used only to tell you which Google account you signed in with if a connection fails; we don't store it.
- Google Drive (access only to files Videngine creates, plus the email address). We use it to create a folder and a sheet and deliver rendered videos into them, and show which account is connected. Videngine can't see any other files in your Drive.
We keep the access token Google issues, the connected channel's ID, name, handle and picture (or the Drive folder and sheet), the connected account's email for Drive, and the IDs of the videos and files we create. These are kept in the workspace's own server-side data and are never sent to the browser. We don't read your other videos, comments, analytics or Drive files.
Videngine's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't sell Google user data, use it for advertising, or use it to develop or train AI or machine-learning models, and no person reads it except with your permission, for security, or where the law requires.
Videngine uses YouTube API Services. By connecting a channel you agree to the YouTube Terms of Service; Google's handling of your data is covered by the Google Privacy Policy.
You can disconnect at any time in Studio settings, which revokes Videngine's access and deletes the stored token, or remove Videngine from your Google account at myaccount.google.com/permissions. Other stored details follow the retention periods in section 9, or are deleted sooner on request to hello@videngine.io.
6. Who we share it with
- Service providers that host and run the Service on our behalf (section 8);
- Professional advisers such as accountants, lawyers and insurers where needed;
- Authorities where required by law or to protect rights, safety or the integrity of the Service;
- A successor if we sell or reorganise the business, on terms that respect this policy.
Customer Content is shared only with the customer that provided it and its authorised users, and with the providers needed to render and store it.
7. International transfers
We are based in the UK and host the Service primarily in the European Economic Area. Some providers may process data in the United States or elsewhere. Where personal data leaves the UK or EEA, we rely on the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or an adequacy decision, as applicable.
8. Sub-processors
We will update this list before adding a provider that processes Customer Content.
| Provider | Purpose | Location |
|---|---|---|
| Railway | Application hosting and rendering; object storage for rendered videos | EU (Amsterdam) |
| Vercel | Website hosting and edge delivery | Global edge network; US-headquartered |
| Stripe | Payments, subscriptions and invoices; card details are handled by Stripe and never stored by us | US-headquartered; data processed globally |
| PostHog | Cookieless product analytics on videngine.io | EU |
9. How long we keep it
| Data | Retention |
|---|---|
| Launch list entries collected before launch | Until the launch notification has been sent or you ask us to delete it, then removed |
| Account data | For the life of the account, then up to 90 days |
| Customer Content and rendered videos | While the account is active; deleted within 30 days of termination unless the customer deletes earlier (Terms §10.2) |
| Usage and error logs | Up to 12 months |
| Communications | Up to 3 years after the last exchange |
| Billing records (invoices, payments and subscription history) | As long as UK tax law requires, typically 6 years after the end of the financial year they relate to |
10. Security
We use access controls, encryption in transit, hashed passwords, private repositories and infrastructure, and least-privilege access to systems. No system is completely secure; if we become aware of a personal data breach affecting you, we will notify you and, where required, the ICO without undue delay.
11. Your rights
Under UK GDPR and, where it applies, EU GDPR, you can ask us to: access the personal data we hold about you; correct it; delete it; restrict or object to how we use it; provide it in a portable format; and withdraw consent where consent is the basis. You can opt out of emails using the link in any message or by contacting us.
To exercise a right, email hello@videngine.io. We will respond within one month and may ask you to verify your identity. If your data is in Customer Content, we will pass your request to the relevant customer as controller.
You can complain to the Information Commissioner's Office at ico.org.uk, or to your local supervisory authority if you are in the EEA. We would appreciate the chance to resolve any concern first.
12. Cookies
videngine.io sets no cookies. Our analytics run in memory only, without cookies or cross-site tracking, and are hosted in the EU. app.videngine.io uses session cookies needed to keep you signed in; it will not work without them. We do not use advertising cookies.
13. Children
The Service is for business users aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
14. Changes to this policy
We may update this policy. We will post the new version with a new "last updated" date and notify account holders of material changes by email or in the Service.
15. Contact
Wall & Fifth Ltd, 20 Wenlock Road, London, N1 7GU, England. Email: hello@videngine.io