Privacy Policy

Effective 1 September 2026 · Last updated 1 September 2026

This policy explains what data Producora ("we", "the service") collects, why, who it is shared with, how long it is kept and how you can have it deleted. It covers, in particular, data obtained from Google APIs.

1. Who we are

Producora is an AI assistant for YouTube creators, operated by the Producora team. Contact for any privacy question or deletion request: producora@gmail.com. We answer within 5 business days.

2. What data we collect

2.1 Google Account

When you connect a channel, you sign in with Google. We request the openid and email scopes solely to identify the Google Account performing the authorisation. We do not store your email address and we do not use it for marketing.

We receive and store OAuth tokens (an access token and a refresh token) that let the service read your channel's data on your behalf.

2.2 YouTube channel data — scope youtube.readonly

• Channel profile: channel ID, title, handle, country, creation date, subscriber count, total view count, video count, YouTube topic categories.
• Metadata of your uploaded videos (up to the most recent 1,000): video ID, title, publication date, duration, view / like / comment counts, the first 160 characters of the description, and up to 8 tags.

2.3 YouTube Analytics data — scope yt-analytics.readonly

Aggregated reports for your own channel only:

• Per-video performance: views, estimated minutes watched, average view duration and percentage, subscribers gained, likes, comments.
• Thumbnail impressions and impression click-through rate.
• Audience geography (by country), age group and gender distribution — aggregated, never individual viewers.
• Traffic sources and device types.
• Audience-retention curves for your best-performing videos.

These reports are aggregated statistics produced by YouTube. They do not identify individual viewers, and we never receive personal data about your audience.

2.4 Telegram data

The service is delivered through a Telegram bot. We store your Telegram user ID and chat ID in order to send you results, plus the content of the messages you send to the bot (commands, choices in the idea funnel, your editing instructions and style preferences).

2.5 Data the service derives

From the above we generate and store: your channel profile ("channel DNA"), a curated circle of comparable public channels, detected trend signals, idea digests, the ideas and scripts produced for you, and a log of which of them you accepted or rejected.

3. How we use the data

All of it serves one purpose: producing content recommendations for your channel. Specifically, we use it to

• build and periodically refresh your channel profile;
• detect what is currently outperforming in your category;
• generate content ideas and scripts adapted to your channel and audience;
• deliver these to you in Telegram and remember your decisions so that future suggestions do not repeat.

We do not use your data for advertising, we do not sell or rent it, we do not share your analytics with other creators, and we do not use it to train machine-learning models.

The legal basis for processing is your consent, given when you connect the channel. You may withdraw it at any time (section 6).

4. Who the data is shared with

We use a small number of processors, each strictly to operate the service:

We do not transfer your data to anyone else, except where required by law.

5. Security

• OAuth tokens are held in an encrypted secrets store (Supabase Vault); the database keeps only references to them.
• Row-level security is enabled on every table, with no public policies — only the service's own backend can read the data.
• All traffic to Google, Supabase and Telegram runs over TLS.
• Access to your channel is read-only: the service is technically unable to modify, upload or delete anything in your YouTube account.

6. Retention, deletion and withdrawing consent

• Disconnect the channel: send /deletechannel to the bot. The channel is disconnected immediately, all scheduled processing stops, and its OAuth tokens are destroyed. Remaining records are archived and no longer used.
• Permanent erasure: write to producora@gmail.com and we will erase all archived data for your channel within 30 days.
• Revoke access from Google's side: at any moment, at myaccount.google.com/permissions. The service then loses all access to your data.
• While your channel is connected, data is kept for as long as needed to provide the service. Measurement snapshots of public videos are pruned after 14 days.

7. Your rights

Under the GDPR and comparable laws you have the right to access, correct, erase, export and restrict the processing of your personal data, and to object to it. Send any such request to producora@gmail.com; we will comply within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. International transfers

Our processors may store or process data outside your country, including in the European Union and the United States. Where required, transfers rely on the European Commission's standard contractual clauses.

9. Children

Producora is intended for YouTube channel owners and is not directed at children under 16. We do not knowingly collect data from them.

10. Changes to this policy

If we change this policy materially, we will update the date at the top and notify connected users through the Telegram bot before the change takes effect.

11. Contact

producora@gmail.com