Privacy Policy

1. Data we collect

Account and profile: email address, name, language, time zone, and optional country code. Users may sign in with email/password, Google, or secure email links. CreatorQueue does not store passwords in plain text; Supabase Auth handles them securely.

User content: workspace name, ideas, videos, production details, calendar, learnings, equipment records, and metadata for files you upload.

YouTube: connected channel identifiers, published video lists, public metrics, and YouTube Analytics reports when authorized. OAuth tokens are encrypted with AES-256-GCM.

Billing: Paddle customer and subscription IDs, plan, status, and billing periods. Card details never reach or remain on CreatorQueue servers.

Security and operations: error events, limited performance metrics, request identifiers, and abuse-prevention records.

2. Purposes and legal bases

We process data to create your account, perform our agreement, provide the production workflow, manage subscriptions, secure the service, and meet legal obligations.

YouTube connection is optional and runs at your request/consent. You can disconnect it, export your data, or request deletion.

We do not send marketing email unless a separate marketing preference is obtained.

3. YouTube API Services

CreatorQueue uses YouTube API Services. Your use is also subject to the YouTube Terms of Service: https://www.youtube.com/t/terms

Scopes are read-only (youtube.readonly and yt-analytics.readonly). CreatorQueue cannot upload, edit, or delete videos on your channel.

Disconnecting in Settings programmatically revokes the Google token and removes connection records. You can also revoke access at https://myaccount.google.com/permissions.

Google Privacy Policy: https://policies.google.com/privacy. Authorized YouTube data associated with a disconnect or account deletion request is deleted within 7 calendar days; this does not delete data held by YouTube itself.

4. Providers and international transfers

Database and authentication are provided by Supabase (West EU (Ireland) · eu-west-1); hosting by Vercel; transactional email by Resend; billing by Paddle as Merchant of Record; and channel access by Google/YouTube.

These providers may process data outside Türkiye. Transfers use contractual and technical safeguards where applicable. Paddle may act as an independent controller for buyer payment processing under its own privacy notice.

We do not sell personal data, share it for behavioral advertising, or use it to train third-party models unrelated to providing the service.

5. Retention and deletion

Account data and user content are retained while the account is open. A closure request starts a 7-day recovery period, after which workspace, connection, and account data are permanently deleted.

Invoices and transaction records required by law may be retained by Paddle and/or the controller for the applicable statutory period. Security and operational records are removed after the limited period needed for their purpose.

6. Your rights and contact

Settings lets you correct your profile, download a portable JSON copy, disconnect YouTube, and start account deletion.

For access, correction, deletion, objection, portability, or other applicable privacy requests, contact privacy@creatorqueue.app. We may need to verify your identity and account relationship.

You may complain to a competent data protection authority where this right applies.