Privacy Policy

Last updated: 2026-08-30

1. Who We Are

This site (mtahaozturk.com) is operated by Taha Öztürk as part of a personal content production system. Contact: mugamta@gmail.com

This system operates only on our own accounts. It is not a service open to third parties; there is no sign-up, no account creation and no ability to access anyone else's account. Every YouTube, TikTok and Instagram account it touches belongs to the system operator.

2. Data We Collect

Our system processes the following data:

• YouTube account access: OAuth 2.0 access and refresh tokens used by the system operator to upload videos to their own YouTube channels, update titles and descriptions, and reply to comments.
• YouTube channel metrics: View counts, likes, comments, and subscriber counts for the operator's own channels (used for analytics).
• Bot interaction logs: Timestamps and user choices from Telegram bot commands and system logs (operator's own interactions).
• TikTok account access: OAuth 2.0 access/refresh tokens used to upload videos to the operator's own TikTok account, plus upload state records (publish_id, publication status).
• Instagram / Meta account access: the access token used to publish Reels to the operator's own Instagram accounts and to read and reply to comments; comment text and post insights.
• Content production data: Generated video titles, descriptions, scripts, and prompts (content produced by the operator).

This site uses no cookies: there are no visitor-tracking cookies, third-party analytics scripts or advertising cookies. However, because the site is served through Cloudflare, Cloudflare produces aggregate visit statistics on the server side (page views, unique visitors, country breakdown). These are read only in aggregate form as a weekly report; Cloudflare processes IP addresses to derive them. Nothing is written to your browser and no record that identifies you as an individual is kept.

3. How We Use Data

• Upload videos to the operator's own channels via YouTube API
• Daily channel performance tracking and operator notifications
• Automation of content production processes (AI-based image, audio, and text generation)

4. Data Storage and Security

OAuth tokens and content data are stored on a Hetzner server (Helsinki, EU) in an SQLite database and on the file system. Token files are protected with file system permissions and accessible only to the system operator.

Retention: OAuth tokens are kept until access is revoked. Production caches (images, audio, intermediate files) are deleted automatically after 90 days. Channel metrics and production records are kept indefinitely for analysis; these are the operator's own channel data and contain no third-party personal data. Copies of published content are cleared 90 days after publication.

5. Third-Party Services

The system uses the following third-party APIs (each has its own privacy policy):

• Google / YouTube API — video upload, channel management, metric collection
• Google Sheets / Drive API — backup and operational data storage
• Google Gemini API — text generation and image quality control
• xAI Grok API — image and video generation
• ElevenLabs API — voice synthesis
• Anthropic Claude API — text generation
• TikTok Content Posting API — uploading videos to the operator's own TikTok account
• Meta / Instagram Graph API — publishing Reels to the operator's own Instagram accounts, reading and replying to comments
• Telegram Bot API — operator notification and approval interface
• Cloudflare — site hosting and tunnel

6. Data Sharing

The operator's YouTube account data is NOT sold, shared, or made available to any party other than those listed above. Data requests will not be honored absent legal compulsion.

Google User Data — Limited Use: our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is not used for advertising, is not sold, and is not used to train artificial-intelligence models.

7. Data Subject Rights (GDPR)

As the system operator you can:

• Revoke OAuth access at any time via your Google account permissions.
• Request deletion of stored data via mugamta@gmail.com; deleted within 30 days.

8. Children's Content

The system is not designed for users under 13 and does not collect data from them. Videos uploaded to YouTube with the "Made for Kids" flag are subject to YouTube's own children's protection policies.

9. Policy Updates

When this policy is updated, the "Last updated" date will change. Significant changes will be announced on the site's home page.

10. Contact

For questions: mugamta@gmail.com