Privacy Policy

Last updated: August 26, 2026

Zavixoo is an online software service operating from Türkiye. Privacy enquiries: privacy@zavixoo.com.

Data controller and contact

Zavixoo is an independently operated SaaS based in Türkiye and determines how account, website and product data is processed. Customers remain responsible for business data they connect. Privacy and legal correspondence: privacy@zavixoo.com.

Information and purposes

We process account and business-profile details, authorized social-account identifiers, messages and webhook events, imported business data, publishing content, payment-provider subscription and transaction records, and usage, diagnostic, device and security data. We process it to perform our contract, provide requested features, secure and support the service, prevent fraud, meet legal and tax duties and, where required, with consent.

AI and service providers

The minimum relevant prompt, business context and customer message may be sent to an authorized AI provider to generate a draft or result. Other provider categories include cloud hosting and storage, database and monitoring, email and support, social-platform APIs, and payment, tax and fraud prevention. Meta Platform Data is not sold or used for unrelated advertising.

Google and YouTube data we access

Zavixoo uses YouTube API Services with the youtube.readonly and youtube.upload scopes. After you choose Connect YouTube and grant permission, we access your selected channel ID, channel title and basic channel metadata; OAuth access and refresh tokens; and the video file, title, description, tags, schedule and visibility you expressly choose to upload. We do not request your Google password, browsing history, emails, contacts, comments or subscriptions.

How Google user data is used

Channel data is used only to identify and display the selected channel. OAuth tokens are used only to maintain that authorized connection. User-approved media and metadata are sent to YouTube to upload or schedule the video and show its publishing result. Google user data is not used for advertising, credit decisions, surveillance or training a general-purpose AI model.

Google data sharing and disclosure

We transmit the selected upload and authorization data to Google/YouTube to perform the action you requested. Necessary infrastructure processors may host encrypted application records under confidentiality and security obligations. We do not sell Google user data or disclose it to data brokers, advertising platforms, other customers or unrelated third parties. Disclosure is limited to your consent, the visible feature, security or legal requirements. See the Google Privacy Policy.

Protection of Google data

OAuth access and refresh tokens are encrypted at rest using ASP.NET Data Protection and available only to server-side components assigned to your isolated workspace. Data is transmitted over HTTPS/TLS. We apply tenant access controls, least-privilege authorization, restricted secret access and security logging that does not record token contents.

Google data retention, deletion and revocation

Tokens and selected-channel metadata are retained only while the connection is active and needed. Disconnecting YouTube deletes the stored connection and tokens; account deletion or a verified request deletes Google user data as soon as possible and no later than seven calendar days, except non-user transaction/security records required by law. Revoking access does not delete content already stored by YouTube. You can also revoke Zavixoo in Google security settings and request deletion at privacy@zavixoo.com.

Google Limited Use

Zavixoo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

International transfers and retention

Some providers may process data outside Türkiye or the EEA using applicable transfer, contractual and security safeguards. Account data is normally deleted or anonymized within 30 days after a verified request; security logs are normally kept up to 12 months; billing and tax records follow legal retention requirements; backups expire on normal rotation.

GDPR and KVKK rights

Subject to applicable law, request information, access, correction, deletion, restriction, objection, portability or withdrawal of consent at privacy@zavixoo.com. You may complain to Türkiye’s Personal Data Protection Authority (KVKK) or your local EEA supervisory authority.

Cookies and deletion

We use necessary cookies or local storage for authentication, security, language and theme, and currently no third-party advertising cookies. See Data Deletion Instructions.