How we handle your data

Last updated: 24 May 2026 · Effective immediately for all users

1. Who we are

faceless247 (the "Service") is a SaaS product operated from Mumbai, India that helps creators auto-publish YouTube and Instagram Shorts. This Privacy Policy explains what data we collect, why, and what you can do about it.

2. What we collect

Account data: email address, hashed password (or Google account ID / phone number if you sign in via Google or OTP).
Channel data: the niche description and channel name you provide.
YouTube OAuth tokens: if you connect a YouTube channel, we receive an access token and refresh token from Google with scopes youtube.upload and youtube.readonly. These tokens are encrypted at rest using Fernet symmetric encryption.
Generated content: the scripts, audio, and videos we produce on your behalf.
Payment metadata: Razorpay subscription IDs and status (we do not store your card numbers — Razorpay handles all payment data).
Operational logs: IP address, user agent, and timestamps of your sessions for security and abuse prevention.

3. How we use your YouTube data

When you connect your YouTube channel:

We use youtube.readonly to fetch your channel name and ID for display in your dashboard.
We use youtube.upload to publish videos we generate to your channel, with titles, descriptions, and tags you control.
We do not read your existing videos, comments, watch history, subscribers, analytics, or any other channel data beyond the bare minimum needed to upload.
We do not share your YouTube data with third parties or use it for advertising, profiling, or AI training.

faceless247's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Third-party services we use

Firebase Authentication (Google) — for Google sign-in and phone OTP delivery.
Razorpay — for processing INR subscription payments.
Groq — to generate scripts using Llama 3.3. Scripts are processed but not retained by Groq.
Pexels — to fetch stock visuals for your videos.
Hostinger — our VPS hosting provider in Mumbai, India.

5. Where your data lives

All your data is stored on a single PostgreSQL database running on a Hostinger VPS in Mumbai, India. We do not export your data to any other server or jurisdiction without your consent.

6. Your rights

Access: email us to receive a copy of all data we hold on you.
Deletion: email us to permanently delete your account and all associated data (channels, generated videos, OAuth tokens) within 30 days.
Revoke YouTube access: at any time, visit myaccount.google.com/permissions, find faceless247, and revoke. We will be unable to upload further videos to your channel.
Cancel subscription: from your dashboard at any time. No questions, no calls.

7. Data retention

We retain your account data for as long as your account is active. After deletion, we hard-delete within 30 days from our primary database and within 90 days from rolling backups.

8. Cookies

We use a single first-party session cookie to keep you logged in. We do not use third-party tracking cookies, advertising pixels, or analytics services that personally identify you.

9. Children

faceless247 is intended for users aged 18 and above. We do not knowingly collect data from minors.

10. Changes to this policy

We will email you at least 7 days before any material change. The latest version is always at faceless247.in/privacy.

11. Contact

Privacy questions, data requests, or complaints: ankit11708059@gmail.com

Postal: faceless247, Mumbai, India