Privacy Policy
Last updated: 31 July 2026
DyrDyr (“DyrDyr”, the “Service”, “we”, “us”), operated at dyrdyr.com, is an autonomous content-marketing engine that researches trends, generates short-form videos, publishes them to the social channels you connect, and reports analytics back to you. This Privacy Policy explains what data we process, why, the third parties involved, and your choices. By accessing or using the Service you agree to this Policy. If you do not agree, do not use the Service.
1. Who is responsible for your data
For data you submit about your account and projects, DyrDyr acts as the controller. For actions performed on the third-party channels you connect (for example, uploading a video to your YouTube channel), DyrDyr acts as a tool that operates on your instruction and at your direction; you remain responsible for that activity and for the content published.
2. Data we collect
- Account & project data you provide — app name, description, target audience, brand details, uploaded assets and settings.
- Connected-channel data via Google/YouTube OAuth — your channel identity (channel ID and title) and, after you upload, the resulting video IDs and their public statistics (views, likes, comments, retention).
- Content created with DyrDyr — generated scripts, voiceovers, rendered videos and related metadata.
- Operational data — job logs, cost estimates and rate-limit/budget records used to run and safeguard the Service.
- Billing data (if and when paid plans are offered) — handled by our payment processor; we do not store full card numbers.
3. Google user data & OAuth scopes
When you connect a YouTube channel you grant DyrDyr the following scopes, used only as described:
youtube.upload— to upload videos you create with DyrDyr to your channel, on your behalf and at your direction.youtube.readonly— to read your channel identity and the public statistics of the videos DyrDyr uploaded, so we can show you performance.yt-analytics.readonly— to retrieve aggregate analytics for those videos.
DyrDyr’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the user-facing features described above. We do not use it for advertising, we do not sell it, we do not transfer it to others except as needed to provide the Service or as required by law, and we do not allow humans to read it except where you explicitly consent, where required for security or to comply with applicable law.
4. How we use data
Strictly to operate the Service: to generate and render content, to publish it to channels you connect, to fetch and display analytics, and to maintain budgets, rate-limits and safety controls. We do not use your data or content to train third-party foundation models.
5. Sharing & sub-processors
We share data only with infrastructure providers strictly to power the Service:
- Google / YouTube API Services — to publish and read your channel data (YouTube Terms of Service, Google Privacy Policy).
- AI providers (Google Gemini, OpenAI) — to generate scripts, keywords and voiceovers from the inputs you provide.
- Media generation (fal.ai) — when you enable AI b-roll or avatar video, to render those clips.
- Hosting & database (Supabase, Railway) — to store and serve your projects, content and credentials.
Audio transcription for captions runs locally on our own infrastructure; that audio is not sent to a third party. We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
6. Storage, retention & security
Data is stored on managed cloud infrastructure with access restricted to the Service. OAuth credentials are kept encrypted (in a managed secret store) and used only to operate your connected channels. We retain your data for as long as your account and projects exist, plus a short period for backups, logs and legal/accounting obligations, after which it is deleted or anonymised. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.
7. International transfers
We and our sub-processors may process your data in countries other than your own. Where required, we rely on appropriate safeguards for such transfers. By using the Service you acknowledge this processing.
8. Your choices & deletion
- Disconnect a channel at any time in the app (Project → Disconnect). We revoke the access token with the platform, delete it from our encrypted store, and delete the platform data we had saved for that project — including view, like and comment counts retrieved from the platform’s API and the insights derived from them.
- Delete a project to remove its content and associated data.
- Revoke DyrDyr’s access to your Google account at myaccount.google.com/permissions.
- Request full deletion of your account and all associated data by emailing support@dyrdyr.com; we will action verified requests within a reasonable period.
9. Children
The Service is intended for business use by adults (18+). It is not directed to children, and we do not knowingly collect data from them.
10. Changes
We may update this Policy; material changes will be reflected by the “Last updated” date above and, where appropriate, by a notice in the app. Continued use after changes take effect constitutes acceptance.
11. Contact
Questions or data requests: support@dyrdyr.com.