Privacy Policy
This Privacy Policy explains what personal data Ycreato ("we", "us") collects and how we use it.
1. Data we collect
- Account data: your email; if you sign in with Google, the email and basic profile from your Google account.
- YouTube channel data: we request your channel's data and statistics only if you explicitly connect your channel for advanced features. We do not access it otherwise.
- Payment data: payments are processed by NowPayments. We store the payment status/fact, the plan, and the period. We never receive or store your wallet credentials or private keys.
- Usage data: the niches and links you enter, the analyses you create, and technical logs (IP address, device/browser, timestamps).
- Cookies: essential cookies needed to keep you signed in and run the Service, and (if enabled) limited analytics cookies. See "Cookies" below.
2. How we use your data, and legal bases
We process your data to:
- provide the Service — run analyses, produce briefs — performance of a contract;
- manage your subscription and payments — contract / legal obligation;
- send service emails (verification code, payment status, "analysis ready") — contract / legitimate interest;
- secure, maintain, and improve the platform — legitimate interest;
- where required, on the basis of your consent (e.g., connecting your YouTube channel, optional analytics).
3. YouTube API Services
The Service uses YouTube API Services. By connecting your channel, you agree to the YouTube Terms of Service, and your data is also handled under the Google Privacy Policy. We use YouTube data only to provide the features you request, do not use it for advertising, and do not share it except as described in this Policy. You can revoke our access at any time via Google's security settings or by disconnecting your channel in your dashboard.
4. Who we share data with (subprocessors)
- Google — sign-in and, if you connect, YouTube data.
- NowPayments — cryptocurrency payment processing.
- Anthropic / OpenAI — AI content generation. We send the niche and public competitor data, not your account personal data.
- Resend — transactional email delivery.
We do not sell your personal data.
5. International data transfers
Some subprocessors are located outside your country, including in the United States. Where data is transferred internationally, we rely on appropriate safeguards (such as the providers' standard contractual clauses) to protect it.
6. Retention and security
We keep your data while your account is active and as required by law, then delete or anonymize it. Access is restricted, and connections are encrypted in transit (HTTPS). No system is completely secure, but we take reasonable technical and organizational measures.
7. Your rights
Depending on your location (including the EU/UK under GDPR), you may have the right to: access your data; correct it; delete it; restrict or object to processing; receive a portable copy; and withdraw consent at any time. To exercise these rights, email support@ycreato.com. You also have the right to lodge a complaint with your local data-protection authority. You can disconnect a connected YouTube channel from your dashboard settings at any time.
8. Children
The Service is not intended for anyone under 16, and we do not knowingly collect data from them.
9. Cookies
We use cookies that are strictly necessary for authentication and core functionality. Any analytics cookies are used only with your consent where the law requires it. You can control cookies through your browser settings.
10. Changes and contact
We will post updates here with a new "Last updated" date. Questions or requests: support@ycreato.com.