Privacy Policy
Last updated September 6, 2026
eyoxo ("eyoxo", "we", "us") turns a topic into a narrated, AI-generated video and publishes it to connected platforms like YouTube and TikTok on a schedule you set. This policy explains what data we collect to do that, why, and what control you have over it.
Who operates eyoxo
eyoxo is operated by G3 GOLDEN TECHNOLOGY SRL, a company registered in Romania under registration number 37598443, with its registered office at Strada Nerva Traian, Nr. 7, Bloc M66, Scara 1, Etaj 5, Ap. 19, București, Sectorul 3, Romania.
G3 GOLDEN TECHNOLOGY SRL is the data controller for the personal data described in this policy. You can reach us at privacy@eyoxo.com.
1. Information we collect
Account information. When you sign up, we collect your email address and password (handled by our authentication provider, Supabase — we never see or store your raw password).
Content you create. Topics, briefs, and any other input you give the app, along with everything generated from it — research, scripts, images, narration audio, and rendered videos.
Connected social accounts. When you connect a YouTube or TikTok channel, we receive and store an access token and (where the platform provides one) a refresh token, plus basic profile information the platform shares during that authorization — your channel/account ID, display name, handle, and avatar. We request only the scopes needed to identify your channel and upload video on your behalf (for YouTube: youtube.upload and youtube.readonly; for TikTok: user.info.basic and video.publish). We do not request or use access to your private messages, contacts, or any data unrelated to publishing the videos you schedule.
Usage and log data. Standard technical data our hosting and database providers generate to operate the service — request logs, error logs, and timestamps of jobs the system runs on your behalf.
2. How we use your information
We use the information above only to:
- Generate the video content you request (research, script, visuals, narration).
- Publish that content to the social accounts you explicitly connect.
- Authenticate you and keep your account and generated content secure.
- Diagnose and fix problems with the pipeline.
We do not sell your data, and we do not use it to serve ads.
3. Who we share it with
We share data only with the third-party services that make the pipeline work, and only the minimum needed for each step:
- Supabase — hosts our database, authentication, and file storage.
- OpenRouter — processes your topic and script text to generate research, scripts, and images.
- ElevenLabs — processes script text to synthesize narration audio.
- Google (YouTube Data API) / TikTok — receive the finished video, title, description, and tags at the moment you publish, on the channel you connected.
- Vercel — hosts the application itself.
Each of these processes data under its own privacy policy and only for the purpose of performing its part of the pipeline. We do not otherwise sell, rent, or share your data with third parties.
4. Cookies
We use a small number of strictly functional cookies: one to keep you signed in, one to remember which organization you have active, and one short-lived cookie used only during the few seconds of a YouTube/TikTok connection flow to prevent cross-site request forgery. We do not use advertising or cross-site tracking cookies.
5. Data retention and deletion
We keep your account and content for as long as your account is active. Disconnecting a social account immediately deletes its stored tokens. You can request deletion of your account and all associated data at any time by contacting us at the address below; we will delete it within a reasonable time, except where we are required to retain something by law.
6. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent for a connected account at any time by disconnecting it inside the app. Contact us to exercise any of these rights.
7. Security
We use industry-standard measures — encrypted connections, access-controlled storage of connected-account tokens — to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Children's privacy
eyoxo is not directed at, and we do not knowingly collect information from, anyone under 16 years old.
9. Changes to this policy
We may update this policy as the service changes. We will update the date at the top of this page whenever we do.
10. Contact
Questions about this policy, or a request about your data: contact us at privacy@eyoxo.com.
G3 GOLDEN TECHNOLOGY SRL
Strada Nerva Traian, Nr. 7, Bloc M66, Scara 1, Etaj 5, Ap. 19
București, Sectorul 3, Romania
Registration number 37598443