Privacy Policy

• Meliyo runs on your own computer. Your scripts, voiceovers, videos and thumbnails, your API keys, and the access tokens of your channel connections are kept on your computer — not on our servers. The AI services you connect receive the content needed to produce them (section 6).
• We keep account, channel, community-profile and diagnostic records in the cloud so that the service can work and so that we can review accounts and provide support (section 2).
• We do not sell personal data, we do not show advertising, and we do not use your data to train AI models.
• The Site uses no cookies, no analytics and no tracking technologies.

When you use the App while signed in, the data below is sent to and stored in our cloud. On first launch the App shows a short summary of what is collected and asks for your consent; if you do not accept, no account is created and the App cannot be used. That in-app summary is not exhaustive — the complete description is the list below.

Account. Your name, email address, profile picture address and a unique account identifier, received from Google when you sign in (section 3). We also keep whether your account has been approved, and any details you give us when you ask for access.

Channel record. For each channel that you connect to YouTube in the App: your account email, the channel’s name, its YouTube channel ID and link, the template it was created from, its creation date, whether it is connected, whether a video was published in the last seven days, the date of the latest video, and a monetization status (active / not active / unknown — never amounts). The record is refreshed about once a week while the App is in use. When you delete a channel in the App, its record is marked as deleted.

Error reports. When something fails, the App sends a report containing an error code, a short technical message and trace in which API keys, tokens, email addresses and your Windows user-folder name are masked, a few short technical labels (for example which step failed), the App and engine versions, your Windows version, the template and interface language in use, and your account identifier. You can switch error reports off in the App under Settings → Preferences.

Usage measurements. For each production run: how much of your Claude plan’s usage limits the run consumed (percentages), token counts per AI model, your plan tier, the run type (long video or Short), the time and duration of the run, the App and engine versions, the template, the internal folder name of the video, the exit code of the run and — if it failed — the category of the failure, and your account identifier. No script text, no video content and no monetary amounts are included. These measurements follow the same switch as error reports.

Diagnostic package — only if you send it. If you choose to send diagnostics for a failed run, the App first shows you what will be sent. The package contains selected status and log files of that run with secrets masked. It never contains API keys, configuration files with credentials, script text, video descriptions or media files.

Feedback. If you send feedback from the App: your message, your account email and identifier, and the App version, engine version, template and interface language in use. Screenshots you attach are uploaded only where file storage is enabled for the service; it is not in use at present.

Community profile. When you connect a YouTube channel in the App — and again each time the App starts while a channel is connected — the App creates or refreshes a community profile for your account: your Google display name (or your email address, if your Google account has no display name), your profile picture address and the link to your YouTube channel. This happens whether or not you post in the community, and every signed-in Meliyo user can read these profiles.

Community posts. If you post in the in-app community: your posts, comments, reactions and reports. Posts and comments carry your display name (or your email address, as above), your profile picture and your channel link, and every signed-in Meliyo user can read them. Reports are visible only to us.

Your computers (moving channels between them). So that a channel can be moved directly from one of your computers to another, the App records each computer under your account when it starts — and about every 15 minutes while it runs, if the computer has channels. The record contains: an identifier of the App installation, the computer’s label (generated automatically until you change it), the App version, the time the computer was last seen, the number of channels not yet connected to YouTube and, for each channel connected to YouTube, its name, template, YouTube channel ID and approximate size. While the transfer switch in the App is on (it is on by default), the same details are recorded for all your channels, including those not yet connected. Only your own account can read these records. While a transfer is being set up, technical connection data (which includes network addresses) is stored temporarily and removed once the direct connection is established. The channel files themselves travel directly between your computers and do not pass through our servers. Setting up the direct connection uses public STUN servers operated by Cloudflare and Google, which see your IP address.

Service and security logs. Our hosting providers process technical data needed to deliver the Site, downloads, updates and the online services — such as your IP address, the date and time of a request and your browser or App version.

You sign in to the App with your Google account. Sign-in happens in your own web browser on Google’s pages; we never see your Google password. We request only the basic sign-in permissions (openid, email, profile) and receive your name, email address, profile picture and a unique identifier.

We use this information only to create and identify your Meliyo account, to review and approve new accounts, to show your name and picture in the App and in your community profile (section 2), and to contact you about your account or a support request.

Sign-in does not give us access to your Gmail, Google Drive, contacts or any other Google service. The sign-in session is stored on your computer, encrypted with Windows data protection.

Meliyo uses YouTube API Services to publish videos to the YouTube channel you connect and to show you that channel’s statistics. By connecting a YouTube channel to Meliyo you agree to be bound by the YouTube Terms of Service: https://www.youtube.com/t/terms. The Google Privacy Policy is available at http://www.google.com/policies/privacy.

How the connection works. Following the guide in the App, you create your own OAuth client in your own Google Cloud project and authorize it for your channel. The authorization asks for permission to upload videos and manage your YouTube account (needed to publish and schedule videos and to set titles, descriptions and thumbnails), to view YouTube Analytics reports for your channel, including monetary reports, and to see the email address of the Google account you authorized.

What happens with the data.

• Requests to YouTube are made directly from your computer to Google.
• The OAuth client credentials and the access and refresh tokens are stored only on your computer.
• The channel and video statistics the App retrieves (including revenue reports, if your channel is monetized) are stored only on your computer and shown only to you.
• From this information, only the items listed under “Channel record” in section 2 reach our cloud: the channel’s name, ID and link, the activity dates, and the monetization status without any amounts.
• To produce scripts and analysis for you, the App on your computer may include information obtained through YouTube API Services — for example your channel’s performance statistics or public information about videos — in requests to the AI services you have configured, under your own accounts with those providers. We do not receive this data.

Revoking access. You can revoke Meliyo’s access to your Google account data at any time on the Google security settings page: https://security.google.com/settings/security/permissions. Because the YouTube connection uses the OAuth client you created in your own Google Cloud project, it is listed on that page under the app name you chose for that project — it may not be called “Meliyo”. You can also disconnect the channel in the App. After you revoke access, the App can no longer publish to that channel or read its data.

Limited Use. Meliyo’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve or train generalized AI or machine-learning models. People at Az Smart Studios LLC do not read Google user data except with your consent (for example when you send us a diagnostic package or ask for support), for security purposes, or to comply with the law.

Publishing to Facebook and Instagram is not generally available yet; this section describes how it works once the feature is enabled in the App. Connecting Facebook or Instagram is optional. If you connect a Facebook Page — and the Instagram professional account linked to that Page — Meliyo asks for these permissions:

• pages_show_list — to list your Pages so that you can choose the one to connect;
• pages_read_engagement — to show the name of the connected Page;
• pages_manage_posts — to publish your videos and Reels to the Page;
• instagram_basic — to identify the Instagram account linked to the Page;
• instagram_content_publish — to publish Reels to that Instagram account.

What happens with the data.

• You log in on Facebook’s own pages; we never see your Facebook or Instagram password.
• To complete the connection, the one-time authorization code issued by Meta is sent to our server (api.meliyo.com), which exchanges it with Meta for an access token and returns the token to the App. Our server does not store the code or the token.
• The access token of your Page and the identifiers of the Page and the Instagram account are stored only on your computer. Publishing requests go directly from your computer to Meta.
• We use this data only to publish the videos you produce to the Page and Instagram account you selected. We do not read your messages, your friends list or your personal posts, and we do not use Meta data for advertising.

Removing access. You can disconnect Facebook and Instagram in the channel’s settings in the App. You can also remove Meliyo in your Facebook settings under “Apps and websites” or “Business integrations”, and in your Instagram settings under “Apps and websites”. How to ask us to delete data is described on the Data Deletion page. Meta’s Privacy Policy: https://www.facebook.com/privacy/policy/.

Meliyo works with your own accounts at third-party providers — for example Anthropic (Claude), Google (Gemini), ElevenLabs and Pexels. When the App produces a video, it sends the necessary content (such as prompts, script text and search terms) from your computer directly to those providers, using your own subscription or API keys. Their handling of that data is governed by their own terms and privacy policies. We do not receive your prompts, scripts, voiceovers, images or videos.

The following is stored on your computer and is not sent to us:

• The API keys you enter. They are kept in an encrypted key store protected by Windows data protection. So that scheduled production can run while the App window is closed, the production engine also keeps them in a local configuration file on the same computer.
• The credentials and tokens of your YouTube, Facebook and Instagram connections, in the local configuration of the channel.
• Your topics, scripts, voiceovers, images, videos, thumbnails and publishing schedule.
• The statistics retrieved for your channels.

Anyone who can use your Windows account can reach these files, so protect your computer and your Windows account. You can remove this data by deleting the channel in the App, or by uninstalling the App and deleting its data folders.

• to provide the service and your account (performance of our agreement with you);
• to review and approve new accounts, to prevent abuse and to keep the service secure (our legitimate interests);
• to answer support requests and feedback (our agreement with you and our legitimate interests);
• to find and fix errors and to plan capacity (our legitimate interests — you can switch error reports off);
• to comply with legal obligations.

Where processing is based on your consent, you can withdraw it at any time by writing to us; this does not affect processing that has already taken place.

We use the following service providers:

• Google (Firebase and Google Cloud) — sign-in and the cloud database. The database (Cloud Firestore) is located in Google’s European multi-region (eur3). Sign-in data (Firebase Authentication) is processed by Google on its own infrastructure, which may include the United States.
• Cloudflare — hosting of the Site, downloads and updates, the api.meliyo.com service, and routing of email sent to our @meliyo.com addresses.
• Google (Gmail) — the mailbox in which we read the email you send us.

These providers may process data in the European Union, the United States and other countries where they operate. We share personal data with others only if the law requires it, to protect our rights or the safety of users, or as part of a merger or sale of the business — in which case this policy continues to apply to your data.

• Account and channel records: for as long as your account exists. Records of channels you deleted remain marked as deleted until your account is deleted.
• Error reports, usage measurements, diagnostic packages and feedback: for as long as your account exists, unless you ask us to delete them earlier.
• Community profile, posts and comments: until your account is deleted or you ask us to delete them. A post you remove in the App is hidden from other users.
• Records of your computers: for as long as your account exists. Connection data for a transfer: removed when the direct connection is established or the transfer ends.
• Email you send us: for as long as needed to handle your request and to keep a record of it.
• Data on your computer: until you delete it.

When you ask us to delete your data, our team deletes it manually on the basis of your request, as described on the Data Deletion page.

• Ask for a copy of, a correction to, or the deletion of your personal data: write to privacy@meliyo.com from the email address of your account. Details are on the Data Deletion page.
• Switch error reports and usage measurements off in the App (Settings → Preferences).
• Revoke Google and YouTube access, and remove Facebook and Instagram access, as described in sections 4 and 5.
• Stop using Meliyo at any time by uninstalling the App.

Depending on where you live, you may have additional rights under local law — for example to object to or restrict processing, to data portability, or to complain to your data protection authority. We answer requests within 30 days.

Data in transit is encrypted (HTTPS). Access rules in our database limit each signed-in user to their own account, channel, diagnostic, feedback and computer records. Community content is different: every signed-in user can read community profiles, posts and comments, and the comment and reaction counters shown on a post can be changed by any signed-in user. Error reports are masked on your computer before they are sent. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Meliyo is not intended for children. You must be at least 18 years old to use it. We do not knowingly collect personal data from children; if you believe a child has given us personal data, write to privacy@meliyo.com and we will delete it.

We may update this policy. When we do, we change the “Last updated” date at the top of this page; if the changes are significant, we also tell you in the App or on the Site.

Privacy questions and requests: privacy@meliyo.com. General support: support@meliyo.com. Legal notices: legal@meliyo.com.

The data controller is Az Smart Studios LLC, United States.