Privacy Policy | Channel Creating Studio

1. Overview

Channel Creating Studio ("we", "us", "our") is a SaaS tool for YouTube music creators. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and the VideoForge desktop application at studio.buddybooking.me and dev.studio.buddybooking.me.

We comply with GDPR (EU), CCPA (California), and Google API Services User Data Policy.

2. Data We Collect

Data Type	Source	Purpose	Retention
Email address	Google OAuth / Registration	Authentication, account recovery	Until account deletion
YouTube Channel ID	User input (optional)	Public analytics retrieval (views, subscribers)	Until channel unlinking
YouTube public statistics	YouTube Data API	Analytics dashboard for user	90 days
API keys (Groq, Gemini, Kimi)	User input (BYOK, optional)	AI content generation on user's behalf	Until key deletion
Channel settings (genre, mood, etc.)	User input / AI suggestions	Content generation parameters	Until channel deletion
Usage logs (generation count, date)	System	Quota enforcement, billing	1 year
IP address, user agent	HTTP headers	Security, abuse prevention	30 days
Device fingerprint	VideoForge application	Subscription device limits, anti-piracy	Until account deletion
Application version & platform	VideoForge application	Update checks, minimum-version enforcement	30 days
Executable checksum	VideoForge application	Integrity verification	30 days
Download consent flags	Browser localStorage	Record of Terms/Privacy acceptance	Until browser data cleared

3. How We Use Your Data

Authentication: To identify you and secure your account.
Analytics: To retrieve and display your YouTube channel's public statistics (views, subscribers, video count) via the official YouTube Data API.
AI Generation: To send your prompts and channel settings to third-party AI providers (Groq, Google Gemini, Moonshot Kimi) for generating music prompts, titles, descriptions, and tags.
Service Improvement: Aggregated, anonymized usage statistics to improve the platform.

We do NOT: Sell your data, use it for advertising, train AI models on your private data, or access your YouTube content beyond public statistics.

4. Desktop Application Data (VideoForge)

When you sign in to VideoForge, the application communicates with our servers to:

Verify your subscription and available device slots.
Request a signed authorization token before each render.
Check for application updates.

VideoForge stores your project history, presets, sessions, and settings locally on your computer (not on our servers). We cannot access your source files or rendered videos unless you explicitly upload them.

5. Third-Party Services

Google OAuth & YouTube Data API: For authentication and public channel statistics. Subject to Google API Services User Data Policy.
Groq, Google Gemini, Moonshot Kimi: AI providers that process your prompts. They do not retain your data for model training.
Hetzner Cloud (Germany): Our hosting provider. Data stored on EU servers.

6. Data Security

All traffic is encrypted via TLS 1.3 (HTTPS).
API keys are encrypted at rest using AES-256 (Fernet).
Database backups are encrypted (gzip) and retained for 7 days.
Server access is restricted to SSH key authentication.
We conduct daily automated backups.

7. Your Rights (GDPR / CCPA)

Access: Request a copy of all your data.
Correction: Update inaccurate information in your profile.
Deletion: Delete your account and all associated data. Email edanilchik@gmail.com.
Portability: Export your channels and analytics in JSON format from the app.
Revocation: Unlink your YouTube channel or revoke Google OAuth access at any time.

8. Data Retention & Deletion

Data	Retention Period	Deletion Method
Account + channels	Until user deletion	Immediate upon request
YouTube analytics	90 days	Automatic purge
Usage logs	1 year	Automatic purge
Backups	7 days	Automatic rotation

9. Children's Privacy

Our service is not intended for users under 16. We do not knowingly collect data from children.

10. Cookies & Tracking

We use only essential cookies for authentication (JWT session). No third-party tracking cookies, no analytics pixels.

Our website stores a small consent record in your browser's localStorage when you accept the Terms of Service, EULA, and Privacy Policy before downloading VideoForge. This record contains only boolean flags and does not identify you personally.

11. Changes to This Policy

We will notify users of material changes via email and an in-app banner 30 days before they take effect.

12. Contact & Data Protection Officer

Evgenii Danilchik
Email: edanilchik@gmail.com
Location: Georgia
Response time: Within 72 hours