Privacy Policy

Account. From Google sign-in: your name, email address, and profile photo.

YouTube. From the OAuth flow you complete on the Channels page: per-channel metadata (channel ID, title, handle), an encrypted refresh token, and — where you grant the analytics scope — view, watch-time, and subscriber statistics for your own channel.

Billing. From Stripe: customer and subscription identifiers, plan, and payment status. We never see or store your card number.

Content and pipeline output. Video metadata for uploads on connected channels (title, description, duration), the audio and video we download in order to process it, transcripts, and everything the AI produces from it — SEO copy, thumbnails, clips, captions, blog drafts, social posts, story videos, and audit logs. Edits and render settings you create in the editors are stored too.

Your own API keys. If you connect keys for Gemini, ElevenLabs, fal.ai, Sonauto, or Apify, we store them encrypted at rest and use them only to perform work you request on your own provider accounts.

Usage and marketing attribution. Standard server logs (IP address, user agent, pages requested), and — when you first arrive — the campaign tag, advertising click identifier, or referring website that brought you, which we keep against your account so we can tell which marketing works. See the cookie table below.

We set the following. “Essential” cookies are required for sign-in and for the service to function; the rest are used for measurement and advertising.

You can clear or block cookies in your browser. Blocking essential cookies will prevent sign-in from working.

We advertise our own service and we measure whether those adverts work. To do that we send Meta a one-way SHA-256 hash of your email address, together with your IP address, browser user agent, and Meta's own click and browser identifiers, when you create an account. Meta uses this to match your signup to an advert you may have clicked. We also run Google Analytics and TinyVisits for aggregate website measurement.

We do not sell your personal information, and we do not share the content of your videos, your transcripts, your generated assets, or any data we receive from Google APIs with advertising networks. The sharing described in this section is limited to the signup and website-measurement signals named above.

To opt out, email daniel@blokstreams.com and we will exclude your account from advertising measurement.

Jony Studios's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We access your YouTube account through the YouTube Data API using the youtube.force-ssl scope solely to (a) detect new uploads on the channels you connect and (b) update the SEO metadata, thumbnails, captions, and derived clips of your own videos at your direction. Where you grant it, the YouTube Analytics scope is used only to show you your own channel's statistics inside the dashboard. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to third parties except as needed to provide the service or as required by law. Humans do not read your Google user data except where necessary for security, to comply with the law, or with your explicit consent.

Some features publish on your behalf. Each is off unless you turn it on, or is an explicit action you take:

• Updating your YouTube video's title, description, tags, chapters, thumbnail, and captions.
• Publishing clips to YouTube, or to TikTok, Instagram Reels, X, or LinkedIn through Blotato.
• An automatically written blog derived from your videos, published on a public website that may carry third-party advertising.
• A public podcast RSS feed, and episodes sent to Buzzsprout.
• A continuous public video stream assembled from your videos.

Anything published this way is public and may be copied, cached, or indexed by others. Turning a feature off stops future publishing; it does not retract what was already published elsewhere.

We use the following providers to deliver the features you use. Where you connect your own key for one of them, that provider receives your content under your own account and terms.

• Google (Sign-In, YouTube Data API, YouTube Analytics) — authentication, detecting new uploads, updating your videos, and reading your channel's analytics.
• Google Cloud Platform — hosting, database, and file storage.
• Google Gemini — transcription, SEO copy, thumbnail generation, clip selection, and blog drafting.
• Stripe — payments, subscriptions, and partner payouts.
• OpenAI — text generation in parts of the editing and assistant features.
• ElevenLabs — narration and music generation.
• fal.ai — AI video generation.
• Sonauto — AI music generation.
• HeyGen — presenter-style explainer video generation.
• Apify — source-video download (fallback; yt-dlp on our own servers is the primary path).
• Blotato — publishing clips to TikTok, Instagram Reels, X, or LinkedIn when you choose to.
• Buzzsprout — podcast episode publishing, if you enable it.
• Meta (Facebook/Instagram) — advertising measurement — see the advertising section.
• Google Analytics — website usage measurement.
• TinyVisits — lightweight website visit measurement.

We may also disclose information where required by law, to enforce our terms, or as part of a merger or acquisition.

If your account was created for you by an agency or partner reselling this service, staff at that organisation can see your account, connected channels, jobs, and generated assets in order to manage them on your behalf. They are bound by their agreement with us. Your account is managed by Jony Studios.

Separately from our customers, we maintain a business-contact list used to send introductory emails about our services — for example publicly listed business email addresses and professional-licence records. We hold the name, business contact details, and public professional information of those contacts, and we rely on our legitimate interest in direct business-to-business marketing.

Every such email includes an unsubscribe link. To be removed and have your details deleted, use that link or email daniel@blokstreams.com. We do not sell this list.

Account, channel, and job records are held in Postgres on Google Cloud. Generated assets — thumbnails, clips, transcripts, rendered videos — are held in a private Google Cloud Storage bucket and served through short-lived signed links. OAuth refresh tokens and any API keys you supply are encrypted at rest with AES-256-GCM before being written to the database.

We keep your account data and generated assets for as long as your account is open. We do not currently apply an automatic expiry to stored assets, so assume anything generated for you remains stored until you delete it or close your account. You can delete individual jobs, clips, and story videos from the dashboard at any time.

When you close your account, account data and pipeline outputs are removed within 30 days. Billing records are retained for as long as tax and accounting law requires. Disconnecting a YouTube channel revokes its stored refresh token immediately.

We operate from the United States and our providers are largely US-based, so if you are outside the United States your information will be transferred there. Where we transfer personal data out of the UK or European Economic Area we rely on the European Commission's Standard Contractual Clauses, or an adequacy decision where one applies.

Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, or stop using it for marketing. If you are in the UK or European Economic Area you also have the right to object to or restrict processing, the right to data portability, and the right to complain to your local supervisory authority. If you are in California you have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights — and, as stated above, we do not sell personal information.

Our legal bases are: performing our contract with you (running the service you signed up for), your consent (optional publishing features and any advertising cookies where consent is required), legitimate interests (security, debugging, measuring our own marketing, business-to-business outreach), and legal obligation (tax and accounting records).

To exercise any of these, email daniel@blokstreams.com. We respond within 30 days.

The service is not intended for anyone under 16, and we do not knowingly collect their information. If you believe a child has given us personal data, contact us and we will delete it.

We update this policy as the service changes. The date at the top reflects the current version, and we will tell you by email before a change that materially reduces your rights takes effect.

Privacy questions, data requests, and deletion requests: daniel@blokstreams.com. General support for Jony Studios: jonathan@jonystudios.com.

Daft Planet Media LLC.