Hazedeck — Privacy Policy

Last updated: [DRAFT — set the effective date on publication]

Hazedeck ("Hazedeck", "we", "us") is a service operated by FancyFin LLC ([mailing address], [state] USA) that helps operators generate and publish audio/visual content to their own YouTube channels. This policy explains what information we collect, how we use it, and the choices you have. It applies to the Hazedeck application and website at hazedeck.com.

If you do not agree with this policy, do not use Hazedeck.

1. Information we collect

a. Google account and YouTube data (via OAuth). When you connect a YouTube channel, Google asks you to authorize Hazedeck. With your consent we receive an OAuth refresh token and, using the YouTube Data API, we read your channel's identifying information (channel ID and title) to confirm the connection, and we upload and manage videos on the channel on your behalf, according to the permissions you grant:

We do not request access to your Gmail, Drive, contacts, or other Google data.

b. Content you create. Prompts you enter and the media Hazedeck generates or renders for you (audio, images, video, and their provenance/cost metadata).

c. Operational data. Basic technical and usage information needed to run and secure the service (e.g., timestamps, error logs).

2. How we use your information

We do not sell your personal information, and we do not use your Google user data for advertising.

3. YouTube API Services

Hazedeck uses YouTube API Services. By connecting a channel you also agree to the YouTube Terms of Service. Google's use of information it receives is described in the Google Privacy Policy.

Limited Use. Hazedeck's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use YouTube data to provide the user-facing features described above; we do not transfer or sell it, and we do not use it for advertising.

You can revoke Hazedeck's access at any time at https://myaccount.google.com/permissions, or by choosing Disconnect in the Hazedeck console.

4. How we store and protect your data

Your OAuth refresh token is stored server-side and is never exposed to the browser. Generated content and metadata are stored on infrastructure we control. We apply reasonable technical and organizational measures to protect this data; no method of storage or transmission is 100% secure.

5. Third parties (sub-processors)

To generate content, prompts and related inputs are sent to the AI providers Hazedeck uses: ElevenLabs (music), Google (image/video generation via the Gemini and Veo APIs), and Anthropic (prompt assistance). We share your data only with these providers as needed to deliver the service, and with Google/YouTube to publish your content. We do not otherwise sell or rent your data.

6. Data retention and deletion

We retain your refresh token only while your channel is connected. When you Disconnect in the console (or revoke access via Google), we delete the stored token. You may request deletion of the content and data we hold about you by contacting us (Section 9). We do not store user data indefinitely.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data. Contact us to exercise them (Section 9).

8. Children

Hazedeck is not directed to children and is intended for use by the channel operator. We do not knowingly collect personal information from children.

9. Contact

Questions or requests: [privacy@hazedeck.com] (FancyFin LLC, [mailing address]).

10. Changes

We may update this policy; we will revise the "Last updated" date and, for material changes, provide notice through the service.