Privacy Policy

About Us

ittybit is operated by Ittybit Ltd, a company registered in England and Wales (Company No. 13198590), 107 Cheapside, London, EC2V 6DN. We provide video hosting, delivery, and processing services. This Privacy Policy explains what personal data we collect, why, and what you can do about it. It covers ittybit.com, the ittybit dashboard and API, and our embedded video players.

Two Roles

For your account, billing, and support data, we are the data controller. For the videos and files you upload, and any personal data they contain, you are the controller and we are your processor: we process that content only on your instructions to provide the Services. A data processing agreement is available on request from support@ittybit.com.

Anonymous Access

You can browse ittybit.com without providing any personal information. We do not require registration to view public pages, and the website sets no cookies.

What We Collect

  • Account data: your name, email address, and password hash, or the name, email address, and profile picture your identity provider shares when you sign in with Google or another provider.
  • Billing data: your plan, invoices, and billing address. Card details go directly to our payment processor and never touch our servers.
  • Usage data: IP addresses, browser and device information, API request logs, and the actions you take in the dashboard, linked to your account.
  • Support data: the messages you send us and the details you include in them.
  • Subscriber Content: the videos, audio, images, captions, and metadata you upload or import, and the transcripts, descriptions, and other outputs our processing features generate from them.

We do not buy personal data from external sources. If we intend to use your data for a new purpose, we will tell you first and, where the law requires it, ask for your consent.

Signing In With Google

If you sign in with Google, Google shares your name, email address, and profile picture with us. We use them only to create your account, sign you in, and show who you are inside the dashboard. We do not request access to your Google Drive, Gmail, Calendar, or any other Google data at sign-in. We do not use Google user data for advertising, do not sell it, and do not share it with anyone except the service providers listed below that are needed to run your account. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Why We Use It

We use personal data to:

  • Provide, secure, and support the Services (performance of our contract with you).
  • Bill you and keep the records tax law requires (legal obligation).
  • Send you service emails: usage notices, billing notices, and security alerts (contract).
  • Prevent abuse, debug problems, and improve the Services (legitimate interests).
  • Send you product news, only if you opt in, and you can opt out from any email (consent).

Cookies

The dashboard sets a session cookie to keep you signed in and a preference cookie to remember your selected team. Both are first-party and essential; we set no advertising or third-party cookies anywhere. Our embedded players set no cookies. A player may store playback preferences, such as volume and caption choice, in your browser's local storage; that data stays on your device.

Analytics and Embed Tracking

The ittybit service collects analytics server-side at our delivery edge: for each request, the time, the video, the viewer's country, the referring page, and the browser. To count unique viewers we hash the viewer's IP address and browser together with the day's date; the hash changes every day and cannot be turned back into an IP address. We do not store viewer IP addresses in analytics. Our embedded video players do not inject third-party tracking scripts or perform client-side tracking of any kind. No cookie banner is required for ittybit embeds.

Analytics derived from Subscriber Content (such as view counts and playback metrics) belong to the Subscriber and are available via the dashboard and API. A viewer's IP address and country are also read at request time to apply the access rules a Subscriber sets on a video, such as a country or IP allow list; they are checked and not kept.

Automated Processing of Content

When you enable features such as transcription, descriptions, chapters, moderation, or search, we and our AI providers process your content to produce those outputs. The outputs belong to you. Neither we nor our providers use your content to train machine learning models. Moderation labels are suggestions for you to act on; we do not make automated decisions about you or your account from them.

Who We Share It With

We share personal data only with the service providers we need to run the Services, each bound by a data processing agreement:

  • Infrastructure and CDN: storage, processing, and global delivery of content.
  • Media processing: encoding and the compute that runs our processing features.
  • AI providers: transcription, description, and content analysis.
  • Authentication: sign-in, including sign-in with Google.
  • Payments: subscription billing and invoicing.
  • Email: delivery of service emails.

A current list of these providers is available on request. We may also disclose personal data where the law requires it, to protect our legal rights, or to a buyer if ittybit is sold, in which case this policy continues to apply. We do not sell, trade, or rent personal information, and we never share it with advertisers or data brokers.

Where Your Data Lives

Ittybit Ltd is based in the United Kingdom. Subscriber Content is stored in our primary data centres and cached at edge locations worldwide so it plays quickly for your viewers; cached copies are transient and governed by automated cache policies. Some of our providers process data in the United States and other countries outside the UK and EEA. Where they do, the transfer is covered by the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, or by a recognised adequacy decision.

How Long We Keep It

  • Account data: for the life of your account, then deleted within 30 days of closure.
  • Subscriber Content: until you delete it. A deleted video can be restored for 24 hours, after which its files are permanently removed. When a plan ends, content is deleted 7 days later on the same basis (see the Terms).
  • Billing records: six years after the transaction, as UK tax law requires.
  • Request logs: our infrastructure provider keeps worker request logs, which can include IP addresses, for 7 days for debugging and abuse protection.
  • Support messages: three years after the conversation closes.

Children's Privacy

The Services are for people aged 16 and over. We do not knowingly collect personal data from anyone younger. If we learn that we have, we delete it promptly.

Security

We protect personal data with security policies, access rules, and technical measures against unauthorised access, misuse, modification, and loss. All data in transit to and from the Services is encrypted with TLS, and stored content is encrypted at rest. Access to personal data is restricted to authorised personnel on a need-to-know basis. If a breach puts your rights at risk, we will tell you and the regulator as the law requires.

Your Rights

You have the right to:

  • Request a copy of the personal data we hold about you.
  • Request correction or completion of inaccurate records.
  • Request erasure of your personal data.
  • Receive your data in a machine-readable format (data portability).
  • Object to, or ask us to restrict, processing based on our legitimate interests.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact support@ittybit.com. We will respond within 30 days and may require identity verification. The same address closes your account and deletes its content on request. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local data protection authority.

Changes to This Policy

We will post any changes on this page and update the date at the top. If a change reduces your rights or materially changes how we use your data, we will email registered users before it takes effect.

Contact

For questions or concerns about this Privacy Policy, contact support@ittybit.com.

Ittybit Ltd, 107 Cheapside, London, EC2V 6DN, United Kingdom.

Last updated: 1 October 2026.

Resources

ittybit

107 Cheapside

London

EC2V 6DN

Tomorrow Building

MediaCityUK

M50 2AB

Ittybit Ltd

Company No. 13198590 (England and Wales)

VAT Reg. GB448438268

© 2026