Privacy Policy

Data controller

Esteve Martín Mauri, holder of Spanish tax identification number (NIF) 47962153T and with registered address at Carrer de Folgueroles 17-25 Esc. 3 2º 2ª, 08022, Barcelona (Spain), is the controller of your personal data. You can contact us by email at contact@bydeo.com.

Personal data we collect

We collect only our users' email addresses, in order to enable registration and use of the service. If you sign up through Google, Facebook, GitHub or Microsoft, we only collect the email address associated with that account.

Purposes of the processing

We use your email address to manage your user account, to give you access to the platform, to send you account activation and password recovery emails and, if you authorize it, to inform you about news and improvements to the service.

Legal basis

We process your data on the legal basis of consent, the performance of a contract and, where applicable, our legitimate interest in improving the platform and preventing fraud.

Data retention

We keep your data for as long as your account remains active. If you request the closure of your account, we will delete your information, unless we are under a legal obligation to retain it.

Recipients and disclosures

We do not disclose your data to third parties, except in the following cases: Stripe, to process payments, and Google Analytics, for anonymous statistics if you consent to cookies. We do not sell your data.

International transfers

The use of Stripe and Google Analytics may involve international transfers of data. Appropriate safeguards are applied by means of standard contractual clauses approved by the European Commission.

Connecting your Google account and your YouTube channel

BYDEO allows you to connect your YouTube channel in order to publish on it the videos you generate, without having to download them and upload them again manually. This is an optional feature: if you do not use it, nothing in this section affects you.

When you connect it, Google shows you a consent screen on which you grant BYDEO two permissions, and only those two:

• View your YouTube account (https://www.googleapis.com/auth/youtube.readonly). We use it solely to read the name, the identifier and the image of your channel, so that we can show them to you when you choose where to publish. We do not read the videos you already have on your channel, nor your statistics, your comments or your playlists.

• Manage your YouTube videos (https://www.googleapis.com/auth/youtube.upload). We use it solely to upload to your channel the video you have generated in BYDEO and its thumbnail, with the title, description and visibility you have specified, and only when you give the order to publish or schedule the publication. This permission does not allow us to modify or delete videos that were already on your channel.

We do not request any other Google permission. In particular, we do not request content management or Content ID permissions.

Google data we store, and for how long

From the YouTube connection we store in our database: your channel's identifier, its public name, its description, its custom URL and its image, the identifier of your Google account, the list of permissions granted, and the dates of connection and of last verification. We also store a refresh token issued by Google, which is what allows us to upload videos on your behalf without asking you to sign in again every time.

The refresh token is stored encrypted at rest with AES-256-GCM, using a key that is not stored together with the data. It is never displayed in the application nor sent to your browser.

We keep this data for as long as the channel remains connected. If you disconnect the channel or delete your BYDEO account, we delete it at that very moment, as described below.

What we do NOT do with Google and YouTube data

We do not sell the data obtained from your Google or YouTube account, nor do we transfer, rent or share it with third parties, except where required by law.

We do not use it for advertising or ad targeting, whether our own or third parties'.

We do not use it to train artificial intelligence models, whether our own or our providers'.

We do not use it to determine your creditworthiness, or for any purpose other than publishing on your channel the videos you generate in BYDEO.

Human access to this data is limited to what is strictly necessary to resolve an issue you report to us, to comply with the law or to ensure the security of the service.

How to disconnect your channel and how to revoke access

You can disconnect your channel at any time from within the application, in the channels section, using the “Disconnect” button. When you do so, BYDEO revokes the token on Google's servers, deletes the refresh token from our database and unlinks the channel, so that it can no longer publish on your behalf.

If you delete your BYDEO account, we do exactly the same with all your YouTube connections before closing the account: revocation with Google and deletion of the tokens and of the channel data. This deletion is permanent and is not undone even if you later recover your account; in that case, you would have to connect the channel again.

You can also withdraw the permission directly from your Google account, without going through BYDEO, at https://myaccount.google.com/permissions

YouTube API Services and Google's policy

BYDEO uses YouTube API Services. By connecting your channel, you agree to the YouTube API Services Terms of Service, available at https://www.youtube.com/t/terms

Google's processing of your data is governed by the Google Privacy Policy, available at https://policies.google.com/privacy

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to contact@bydeo.com and attaching a copy of your identity document.

Security measures

We have adopted appropriate technical and organizational measures to protect your data and to guarantee its confidentiality, integrity and availability.

Complaints

If you believe that your data is not being processed in accordance with the applicable regulations, you can lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency, www.aepd.es).

Changes to this policy

We reserve the right to amend this policy to adapt it to legislative changes or to improvements of the service. We will inform you if the changes are significant.