Legal
Privacy Policy
Effective October 9, 2026
This Policy explains how SCNZ handles personal information when you use the application, create media, connect providers, or contact us. It should be read together with the Terms of Service.
1.SCNZ and this policy
SCNZ is operated by Xvelopers and helps users create and edit educational videos. Its tools support topic research, script writing, storyboarding, scene editing, visual assets, voiceover, captions, video export, and optional YouTube publishing. Users can choose AI assistance for writing and media creation and review and edit the results. This policy applies to scnz.app and its Google sign-in and YouTube API Services integrations.
Google Privacy Policy2.Google sign-in and YouTube data we access
- When you choose Google sign-in, SCNZ receives your Google account identifier, name, email address, and profile image to create or identify your SCNZ account. Google sign-in does not itself connect your YouTube channel for publishing.
- If you separately connect YouTube, SCNZ requests youtube.readonly to identify the channel you authorize. The connection retrieves channel information from YouTube and stores the channel ID with your SCNZ channel settings.
- SCNZ requests youtube.upload to upload the video and publishing details you select, such as title, description, tags, category, visibility, audience settings, and thumbnail when used. We store publishing results, such as the uploaded video ID or URL, with your project. If you request Trend Scout research, SCNZ also retrieves public video and channel information, such as titles, publication dates, view counts, and channel statistics, using a configured API key or your authorized YouTube connection.
- Google supplies OAuth access and refresh tokens so SCNZ can perform the authorized requests without collecting your Google password. SCNZ stores the refresh token on the server to maintain the channel connection. Connecting a channel alone does not publish content.
3.How Google and YouTube connection data is used and shared
Google sign-in data is used for account access and account security. Connected-channel data and OAuth tokens are used to identify your publishing destination, carry out uploads you request, and maintain that connection. Your chosen video and publishing details are transmitted to YouTube when you initiate an upload.
Our hosting and database providers process this information to operate SCNZ. Authorized personnel may access it when needed for support, security, or legal obligations. We do not sell Google sign-in or connected-channel data, use it for advertising, or send OAuth tokens to media-generation providers. We do not use this connection data to train generalized AI or machine-learning models. Scripts, prompts, and media that you submit for generation are handled separately as described below.
SCNZ's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Google API Services User Data Policy4.Connection security, retention, and deletion
We protect connection data using HTTPS, server-side token handling, access controls, and encryption for selected secrets. New YouTube refresh tokens are encrypted before storage. Tokens are not exposed as ordinary channel profile fields. Google sign-in information is retained for your account; the YouTube data limits below apply separately to your channel connection and API results.
Use Disconnect in Channel settings > YouTube publishing to revoke SCNZ's Google authorization. A successful disconnect removes the channel's stored OAuth credentials, YouTube channel ID, and saved publishing records immediately. If Google cannot complete revocation, we show an error so you can retry or revoke access using Google's account permissions page. Your authored projects and videos already on YouTube remain. Google revocation can affect other SCNZ connections using the same Google account, and Google sign-in may ask for consent again.
You can also revoke SCNZ's Google authorization using the Google account permissions page below. Our background maintenance checks connected channels daily, refreshes the channel ID, and removes connection data when Google reports a revoked or expired grant. A connection that cannot be verified for 29 days is cleared. Upload-result IDs and URLs are removed after 29 days; the date of your own publishing action can remain. Manage or delete published videos using YouTube's controls.
Stored Trend Scout API reports expire after 29 days. Disconnect also removes those report cards from this channel's Writer conversations; your own text and scripts remain. To request deletion of Google account information, retained YouTube data, or your SCNZ account, contact [email protected] from your account email. We may ask you to confirm account ownership before carrying out the request. YouTube API data deletion requests are handled within seven days.
Revoke SCNZ access in your Google accountRequest data deletion or ask a privacy question5.Information we collect
- Account information such as name, email address, profile image, authentication method, verification status, and security settings.
- Production content such as prompts, scripts, uploads, generated images, audio, video, project metadata, and channel settings.
- Operational information such as sessions, IP address, browser or device information, job logs, usage, cost records, errors, and security events.
- Provider information needed for integrations you choose to enable. Secret credentials are handled separately from public profile data.
6.How we use information
- Provide, secure, troubleshoot, and improve the SCNZ service.
- Authenticate users, recover accounts, deliver transactional email, and prevent abuse.
- Queue generation work, call providers selected by you, store media, render projects, and show production history.
- Measure reliability, capacity, usage, and cost and comply with legal obligations.
7.Legal bases for processing
- Providing the service you request: account access, storing and editing your projects, processing payments, and carrying out generation or publishing instructions are necessary to perform our agreement with you.
- Legitimate interests: securing the service, preventing fraud and abuse, diagnosing failures, and responding to support requests, balanced against your privacy rights.
- Consent: optional analytics and the Google permissions you choose to grant. You can withdraw analytics consent using Cookie preferences and revoke Google access using the controls described above. Withdrawal does not affect processing already lawfully performed.
- Legal obligations: records or disclosures required by applicable tax, accounting, consumer-protection, or other laws.
8.AI and production providers
When you request generation, the relevant script, prompt, reference image, voice sample, audio, or video is sent to the provider serving the selected model. Available integrations include Google Gemini, OpenAI, fal.ai, and ElevenLabs; availability depends on SCNZ's configuration and the feature you select. Rendering infrastructure processes the media needed to export your video. YouTube receives content only when you request publishing.
Provider retention and model-training practices depend on the service and account terms. Do not upload another person's voice, likeness, or private material without the necessary permission. Contact us before submitting sensitive personal information if you need a particular processing restriction.
9.Service providers and disclosures
- Cloud hosting and PostgreSQL database services store account and project records; Cloudflare R2 stores uploaded and generated media. AWS infrastructure can process rendering jobs.
- Google provides sign-in and YouTube API Services. Resend delivers account and transactional email. Stripe processes purchases and subscriptions; SCNZ stores billing identifiers, subscription status, invoices or payment references, and credit transactions rather than full payment-card details.
- With analytics consent, Google Analytics receives site-usage events and device/browser information. We do not intentionally send scripts, media, OAuth credentials, email addresses, or private project URLs to analytics.
- We may disclose information when required by law, to protect users and the service, or in a business transfer subject to applicable privacy protections. Contact us for information about the providers involved in your use of SCNZ.
10.Cookies, analytics, and preferences
Necessary cookies and browser storage support sign-in, security, interface settings, and your consent choice. Google Analytics is optional: its script loads only after you choose Accept analytics. Rejecting analytics does not prevent you from using SCNZ.
Use Cookie preferences at the bottom of the page to accept or reject analytics later. Withdrawing consent disables analytics and removes accessible Google Analytics cookies from this site. It does not erase events Google already received. We remember your choice in this browser for up to 180 days; clearing browser storage or using another browser may prompt you again. Google Analytics cookies can identify repeat visits. We do not enable advertising personalization through this integration.
How Google uses information from sites that use its services11.Retention
Account and project information is kept while your account is active and as needed to provide the service. Security, billing, audit, and backup records may be retained longer where necessary for fraud prevention, dispute resolution, legal obligations, and reliable restoration. Provider-side retention is governed by the provider you use.
12.Security
We use access controls, password hashing, session protections, encryption for selected secrets, private object storage, and operational monitoring. No system is completely secure, so use a unique password, enable two-factor authentication, and keep provider credentials private.
13.Your choices and rights
Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of personal information, including processing based on legitimate interests. You may withdraw consent and complain to your local data-protection authority. SCNZ does not use automated decisions to make legal or similarly significant decisions about you.
You can update profile and security settings in the application. Send other privacy requests to [email protected] from your account email, identifying the account and information concerned. We may verify identity before sharing or deleting data. We respond within the period required by applicable law and explain any permitted extension or refusal. YouTube API data deletion requests are handled within seven days. Removing a SCNZ account does not delete videos already on YouTube.
14.International processing
Our service providers may process information outside your country, including in the United States. Applicable protections depend on the provider, service, and location. Contact [email protected] for the destinations and transfer safeguards relevant to your data or to request information about applicable contractual safeguards. This policy does not represent that all data stays in one country.
15.Children
SCNZ is not directed to children who cannot legally consent to the processing of their data. Do not create an account for a child unless you have the authority and lawful basis to do so.
16.Policy updates
We may update this Policy to reflect product, provider, legal, or security changes. Material changes will be communicated through the application or another reasonable channel.
17.Contact
Privacy questions and rights requests can be sent to [email protected].