Privacy Policy

Last Updated: February 7, 2026

FenoGent ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our YouTube analytics platform. This policy complies with the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK, Law No. 6698).

Data Controller

FenoGent operates as the data controller for personal data processed through this platform. For all data protection inquiries, you may contact us using the email address below.

Information We Collect

Google Account information (email, name, profile picture) when you sign in via OAuth 2.0
YouTube channel data (videos, analytics, comments, subscriber counts) via the YouTube Data API and YouTube Analytics API
Usage data and preferences within our platform (pages visited, features used, settings)
Payment information processed securely through Paddle — we do not store credit card numbers
Technical data: IP address, browser type, device information, and access timestamps

Legal Basis for Processing

Contractual necessity: To provide the services you have subscribed to (KVKK Art. 5/2-c, GDPR Art. 6(1)(b))
Legitimate interest: To improve our services and ensure platform security (KVKK Art. 5/2-f, GDPR Art. 6(1)(f))
Consent: For optional features such as AI-powered recommendations and marketing communications (KVKK Art. 5/1, GDPR Art. 6(1)(a))
Legal obligation: To comply with tax, accounting, and regulatory requirements (KVKK Art. 5/2-ç, GDPR Art. 6(1)(c))

How We Use Your Information

To provide YouTube analytics, trend tracking, and performance insights
To generate AI-powered content recommendations and SEO suggestions
To process payments and manage your subscription
To improve our services, fix bugs, and enhance user experience
To communicate important updates about your account and service changes
To comply with legal obligations and resolve disputes

Data Storage & Security

Your data is stored on encrypted servers located in Europe. We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest for sensitive data (OAuth tokens, payment references), regular security audits, and access controls. YouTube API data is fetched in real-time and cached temporarily to reduce API quota usage. We do not sell, rent, or share your personal data with third parties for their marketing purposes.

Cookies & Tracking

We use essential cookies for authentication (session management) and preferences (language, theme). We do not use third-party advertising or tracking cookies. You can manage cookie preferences through your browser settings.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Upon account deletion, personal data is permanently removed within 30 days, except where retention is required by law (e.g., financial records retained for 5 years per Turkish tax law). Cached YouTube API data is automatically purged after 24 hours.

International Data Transfers

Your data may be processed in countries outside of Turkey and the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place in accordance with KVKK Art. 9 and GDPR Art. 46, including standard contractual clauses and adequacy decisions.

YouTube API Services

FenoGent uses YouTube API Services. By using our platform, you also agree to be bound by the Google Privacy Policy (https://policies.google.com/privacy). You can revoke our access to your YouTube data at any time through Google Security Settings (https://myaccount.google.com/permissions).

Your Rights

Under KVKK and GDPR, you have the following rights:

Right of access: Request a copy of your personal data at any time
Right to rectification: Correct inaccurate or incomplete personal data
Right to erasure: Request deletion of your account and all associated data
Right to restriction: Restrict processing of your data in certain circumstances
Right to data portability: Export your data in a machine-readable format
Right to object: Object to processing based on legitimate interests
Right to withdraw consent: Withdraw consent at any time without affecting prior processing
Right to lodge a complaint: File a complaint with the Turkish Personal Data Protection Authority (KVKK Kurulu) or your local supervisory authority

Contact Us

For privacy-related questions, data subject requests, or to exercise your rights, contact us at:

···