Privacy Policy

Effective 1 September 2026 · Last updated 1 September 2026

This policy explains what data Producora ("we", "the service") collects, why, who it is shared with, how long it is kept and how you can have it deleted. It covers, in particular, data obtained from Google APIs.

1. Who we are

Producora is an AI assistant for YouTube creators, operated by the Producora team. Contact for any privacy question or deletion request: producora.app@gmail.com. We answer within 5 business days.

2. What data we collect

2.1 Google Account

When you connect a channel, you sign in with Google. We request the openid and email scopes solely to identify the Google Account performing the authorisation. We do not store your email address and we do not use it for marketing.

We receive and store OAuth tokens (an access token and a refresh token) that let the service read your channel's data on your behalf.

2.2 YouTube channel data — scope `youtube.readonly`

Channel profile: channel ID, title, handle, country, creation date, subscriber count, total view count, video count, YouTube topic categories.
Metadata of your uploaded videos (up to the most recent 1,000): video ID, title, publication date, duration, view / like / comment counts, the first 160 characters of the description, and up to 8 tags.

2.3 YouTube Analytics data — scope `yt-analytics.readonly`

Aggregated reports for your own channel only:

Per-video performance: views, estimated minutes watched, average view duration and percentage, subscribers gained, likes, comments.
Thumbnail impressions and impression click-through rate.
Audience geography (by country), age group and gender distribution — aggregated, never individual viewers.
Traffic sources and device types.
Audience-retention curves for your best-performing videos.

These reports are aggregated statistics produced by YouTube. They do not identify individual viewers, and we never receive personal data about your audience.

2.4 Telegram data

The service is delivered through a Telegram bot. We store your Telegram user ID and chat ID in order to send you results, plus the content of the messages you send to the bot (commands, choices in the idea funnel, your editing instructions and style preferences).

2.5 Data the service derives

From the above we generate and store: your channel profile ("channel DNA"), a curated circle of comparable public channels, detected trend signals, idea digests, the ideas and scripts produced for you, and a log of which of them you accepted or rejected.

3. How we use the data

All of it serves one purpose: producing content recommendations for your channel. Specifically, we use it to

build and periodically refresh your channel profile;
detect what is currently outperforming in your category;
generate content ideas and scripts adapted to your channel and audience;
deliver these to you in Telegram and remember your decisions so that future suggestions do not repeat.

We do not use your data for advertising, we do not sell or rent it, we do not share your analytics with other creators, and we do not use it to train machine-learning models.

The legal basis for processing is your consent, given when you connect the channel. You may withdraw it at any time (section 6).

4. Who the data is shared with

We use a small number of processors, each strictly to operate the service:

Processor	What it receives	Why
Supabase	All stored data, including encrypted OAuth tokens	Database and backend hosting
Anthropic (Claude)	Your channel profile, video metadata and aggregated analytics reports, as the input of the analysis prompts	The AI analysis that produces the profile, ideas and scripts
Telegram	The messages we send you and the messages you send the bot	Delivery of the service
vidIQ	Public YouTube identifiers and search keywords only	Market data about public channels and videos. Your private analytics are never sent to vidIQ.
Google (YouTube Data API, YouTube Analytics API)	Your OAuth token, to read your own data	Source of the channel and analytics data

We do not transfer your data to anyone else, except where required by law.

Google API Services User Data Policy Producora's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular: data obtained from Google APIs is used only to provide and improve the user-facing features described in this policy, is not sold, is not used for advertising, and is not used to train generalised AI or ML models. Human access to it occurs only with your explicit permission, for security purposes, to comply with the law, or on aggregated anonymised data for internal operations.

5. Security

OAuth tokens are held in an encrypted secrets store (Supabase Vault); the database keeps only references to them.
Row-level security is enabled on every table, with no public policies — only the service's own backend can read the data.
All traffic to Google, Supabase and Telegram runs over TLS.
Access to your channel is read-only: the service is technically unable to modify, upload or delete anything in your YouTube account.

6. Retention, deletion and withdrawing consent

Disconnect the channel: send /deletechannel to the bot. The channel is disconnected immediately, all scheduled processing stops, and its OAuth tokens are destroyed. Remaining records are archived and no longer used.
Permanent erasure: write to producora.app@gmail.com and we will erase all archived data for your channel within 30 days.
Revoke access from Google's side: at any moment, at myaccount.google.com/permissions. The service then loses all access to your data.
While your channel is connected, data is kept for as long as needed to provide the service. Measurement snapshots of public videos are pruned after 14 days.

7. Your rights

Under the GDPR and comparable laws you have the right to access, correct, erase, export and restrict the processing of your personal data, and to object to it. Send any such request to producora.app@gmail.com; we will comply within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. International transfers

Our processors may store or process data outside your country, including in the European Union and the United States. Where required, transfers rely on the European Commission's standard contractual clauses.

9. Children

Producora is intended for YouTube channel owners and is not directed at children under 16. We do not knowingly collect data from them.

10. Changes to this policy

If we change this policy materially, we will update the date at the top and notify connected users through the Telegram bot before the change takes effect.

11. Contact

producora.app@gmail.com