{{PRODUCT_NAME}} — Privacy Policy

Effective date: {{EFFECTIVE_DATE}}

This Privacy Policy explains how {{COMPANY_LEGAL_NAME}} ("we", "us"), as data controller, collects, uses, and shares personal data when you use {{PRODUCT_NAME}} at {{WEBSITE_URL}} (the "Service"). It is designed to meet the transparency requirements of the EU/UK GDPR, the Turkish KVKK (Law No. 6698), and the California CCPA/CPRA, and to satisfy the disclosure requirements for our use of YouTube API Services.

Data-protection contact: {{PRIVACY_EMAIL}} {{DPO_CONTACT}} {{EU_REPRESENTATIVE}}

1. Data we collect

a. Account & identity — name, email, and profile info from your identity provider (e.g. Google) when you sign in.

b. Channel & content data — the public channel links you submit and the public metadata we retrieve about them (titles, tags, statistics, topics); the prompts, scripts, edits, voice selections, and other inputs you provide; and the outputs we generate for you.

c. Billing data — plan, credit balance, and transaction history. Card details are collected and stored by our payment provider, not by us.

d. Technical & usage data — IP address, device/browser type, log data, and in-product actions, collected to operate and secure the Service.

e. Cookies — see our Cookie Policy.

We do not intentionally collect special-category data and ask that you not submit it.

2. YouTube API Services (important)

Some features use YouTube API Services. When you use them:

• We access only public channel/video metadata via the official API to provide channel analysis and title/SEO suggestions. We do not access other people's private data or download others' video transcripts.
• Our use of information received from YouTube APIs is governed by, and we comply with, the YouTube Terms of Service and the Google Privacy Policy (https://policies.google.com/privacy).
• You can revoke {{PRODUCT_NAME}}'s access to your Google/YouTube data at any time via Google's security settings: https://myaccount.google.com/permissions.
• We do not use YouTube API data for advertising, and we retain it only as long as needed to provide the feature or as required by law.

3. How we use data & legal bases (GDPR/KVKK)

Under KVKK, processing relies on the corresponding lawful grounds in Art. 5, including performance of a contract, our legitimate interests, and — where required — your explicit consent (açık rıza).

We do not use your content to train our own AI models. See §4 for how third-party AI providers handle it.

4. Sharing & subprocessors

We share personal data only with service providers that process it on our behalf and under contract, and only as needed to run the Service. These include AI model and voice providers, the YouTube Data API, and payment, hosting, and infrastructure providers. A current list is in Subprocessors. We do not sell your personal data, and we do not "share" it for cross-context behavioral advertising as defined by the CCPA/CPRA.

We may also disclose data to comply with law, enforce our Terms, or protect rights and safety, and in a merger or asset sale (with notice where required).

5. International transfers

Some providers are located outside your country (including outside the EEA/UK/ Türkiye). Where we transfer personal data internationally, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses, UK equivalents, and, under KVKK, the applicable transfer conditions (your explicit consent or other lawful mechanisms). Contact {{PRIVACY_EMAIL}} for details.

6. Retention

We keep personal data only as long as necessary for the purposes above: for the life of your account plus a reasonable period, and longer where required for legal, tax, accounting, or dispute-resolution purposes. When no longer needed, data is deleted or anonymized.

7. Your rights

Depending on where you live, you may have the right to access, rectify, erase, restrict, or object to processing, to data portability, and to withdraw consent at any time.

• EEA/UK (GDPR): the rights above, plus the right to complain to a supervisory authority.
• Türkiye (KVKK Art. 11): to learn whether your data is processed, request information and correction/erasure, object to adverse automated outcomes, and claim compensation for unlawful processing. You may also apply to the KVKK Board (Kişisel Verileri Koruma Kurumu).
• California (CCPA/CPRA): rights to know, delete, correct, and to opt out of sale/sharing (we do not sell/share), plus non-discrimination for exercising rights.

To exercise any right, contact {{PRIVACY_EMAIL}}. We will respond within the time required by applicable law. We may need to verify your identity.

8. Automated processing

The Service uses automated systems to generate suggestions and content. These do not produce legal or similarly significant effects about you; you always decide whether to use any output.

9. Security

We use reasonable technical and organizational measures (access controls, encryption in transit, rate limiting, least-privilege secrets) to protect personal data. No method is 100% secure. We will notify affected users and authorities of a personal-data breach where required by law.

10. Children

The Service is not directed to children under 16 (or the higher local minimum), and we do not knowingly collect their data. If you believe a child has provided us data, contact {{PRIVACY_EMAIL}} and we will delete it.

11. Changes

We may update this Policy; material changes will be notified and take effect on the stated date.

12. Contact

{{COMPANY_LEGAL_NAME}}, {{COMPANY_ADDRESS}} — {{PRIVACY_EMAIL}}.