Privacy Policy

Last updated: September 29, 2026

What this policy covers

NovidenWorks Studio ("Studio", studio.novidenworks.com) is a service that turns a topic you enter into a short AI-generated video and, if you choose, uploads that video to your YouTube channel. This policy explains what information we collect when you use Studio, how we use it, who we share it with and how we delete it. You must agree to this policy to use Studio.

YouTube API Services

Studio uses YouTube API Services. When you connect your YouTube channel to Studio, the YouTube Terms of Service also apply. How Google processes your data is described in the Google Privacy Policy (http://www.google.com/policies/privacy).

Information we collect

Account information

Your email address, name, plan, credit balance and credit history. You sign in with your email address and password. If a Google or Apple sign-in option is available and you use it, that provider sends us your email address and basic profile information (name, profile photo link).

Creation information

The topics and prompts you enter, the settings you choose, the images and audio you upload, the videos, images and audio we generate, and generation records.

YouTube information (only if you connect your YouTube channel)

When you connect, Google asks you for two permissions:

• youtube.upload: to upload the videos you approve to your channel.
• youtube.readonly: to show which channel is connected. With this permission we request only your channel's basic details (channels.list, part=snippet). YouTube also returns other fields in that response, such as the channel description and country; we keep only the channel ID, the channel name (title) and the link to the default profile image (thumbnail), and do not store the rest.

The information we receive from YouTube and store:

• your channel ID, channel name and the link to your channel profile image;
• the access and refresh tokens issued by Google and the list of permissions you granted. Tokens are stored encrypted (AES-256-GCM) in our database;
• the YouTube ID and link of videos uploaded from Studio, and the visibility (public, unlisted or private) that YouTube reports for them at upload.

We also store the label and language preference you give the channel in Studio, and the version and time of the notice you accepted before connecting. We do not read your videos, view or subscriber counts, comments or playlists. We never see your Google password; the consent screen opens on Google's own page.

Telegram (only if you connect it)

Your Telegram chat ID and username, used only for generation notifications and approval buttons.

Error logs and security reports

When an error happens in Studio, the error log records your user ID, the action where the error happened, the error message and technical details. When your browser reports a security policy violation (a CSP report), we record the page address, the blocked resource and your browser information (user agent); no user ID is added to these reports. We use these records only to find and fix problems.

How we use information

• To create your account, recognize your sign-in and calculate your credits.
• To generate the videos you request.
• We use YouTube information only to show which channel is connected (in Studio and in Telegram messages), to choose which channel a video goes to, to upload the video you approved, with its title, description and tags, to your channel, to show you the link of an uploaded video, and to check that the connection is still valid. Uploads happen only with your approval.
• We do not use your YouTube information for advertising, profiling, sale or training AI models.

NovidenWorks Studio's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share information with

We do not sell your information. To run the service we share only what is needed with these providers:

• Google / YouTube: the video, title, description, tags and visibility you chose, when the video is uploaded to your channel.
• AI providers: fal.ai (and the image, video and audio models that run through fal.ai), DeepSeek, ElevenLabs and OpenAI. They receive only the text, images and audio needed for generation. Your YouTube information is not sent to them.
• Infrastructure: Supabase (database, sign-in and file storage; Frankfurt region) and Hetzner (servers).
• Telegram: if you connected it, the approval message with the video, title, description, target channel name and visibility is sent to your own Telegram chat. When the upload finishes, the channel name and the video's YouTube link are sent to the same chat. These messages stay in your Telegram chat; you can delete them in Telegram.
• Legal requirements: competent authorities, when required by law.

Generated videos and files you upload are stored behind long, hard-to-guess links so that AI providers and the YouTube upload can reach them. Anyone who has a link can open the file; we give these links only to you and to the services above.

Studio shows no ads. We do not allow third parties to serve content or ads in Studio.

Cookies and browser storage

• Session cookies: when you sign in, Supabase session cookies (names starting with sb-) are set in your browser. They are required to recognize your sign-in and are removed when you sign out.
• Browser storage: your interface preferences (language, menu and canvas layout, last selected model), prompt history and form drafts are kept in your browser's local storage (localStorage, sessionStorage). This information is not sent to us.
• We do not use analytics, advertising or tracking cookies, and Studio contains no third-party tracking code.
• The Google page that opens when you connect YouTube uses Google's own cookies, which are governed by the Google Privacy Policy.

Retention, refresh and deletion

• Account and creation information: kept while your account is open. You can delete your stories inside the app.
• Error logs and security reports: deleted automatically after 30 days.
• YouTube channel information: kept while the connection is active. We check every day that the connection is still valid, and refresh your channel name and profile image from YouTube at least every 28 days. If we cannot refresh them, we delete them.
• YouTube IDs and links of uploaded videos: together with the visibility YouTube reported at upload, these are deleted automatically 29 days after upload (within 30 days at the latest). Until then we use them to show you the video's link. After that, Studio keeps only its own upload record (that the video was uploaded, and when). Your video on YouTube is not affected.
• Disconnecting in Studio: Stories (Hikâyeler) → My stories (Hikayelerim) → any finished story → "Upload to YouTube" (YouTube'a yükle) → select the channel → "Remove connection" (Bağlantıyı kaldır). On plans with the Automation tab, Stories (Hikâyeler) → Automation (Otomasyon) → Connected accounts (Bağlı hesaplar) → "Remove" (Kaldır) does the same. When you disconnect, we also revoke the access token with Google and immediately delete that channel's YouTube information (access tokens, channel ID, name and profile image, the YouTube IDs and links of uploaded videos, and the visibility YouTube reported). Your stories, video files and the titles and descriptions you wrote stay in Studio. If revoking with Google fails, Studio tells you, and you can also remove the permission on the Google page below.
• Revoking from your Google Account: in addition to Studio's own deletion process, you can revoke Studio's access to your data from the Google security settings page: https://security.google.com/settings/security/permissions. Our daily check detects a connection revoked this way: we immediately delete the channel name, profile image, access tokens and the IDs and links of that channel's videos, and let you know on Telegram if you connected it. We keep the channel ID for at most 25 days so that your label and language settings are kept if you reconnect the channel, and then delete it. Deletion is completed within 30 days of the revocation at the latest.
• Deletion requests and account deletion: you can ask us to delete your account or specific data by writing to novidenworks@gmail.com. There is no in-app account deletion button yet; we handle these requests manually and complete them within 7 days. When your account is deleted, connected YouTube channels, upload records and the Telegram connection are deleted with it.
• Content on YouTube: deleting data stored by Studio does not affect your videos or channel on YouTube. To delete a video on YouTube, use YouTube Studio or another authorized application that supports deleting it.

Security

The connection between your browser and Studio is encrypted with HTTPS. YouTube tokens are stored encrypted in our database. No system is perfect; if you notice a security issue, please write to us.

Changes

When we change this policy we update the date at the top. We announce important changes in the app or by email.

Contact

For questions or complaints about our privacy practices: novidenworks@gmail.com. For the rules of use, see the Terms of Service.