Politique de confidentialité
Ce document est disponible en anglais et en turc ; la version anglaise fait foi.
1. Who we are
ByNiche ("ByNiche", "we", "us") is a software-as-a-service product available at https://byniche.app. It is operated by By Code Software (Atıf Doğan Özcan) ("By Code Software"), which is the data controller for the personal data described in this policy.
- Address: Atatürk Mah. Turgut Reis Cad. No: 32 İç Kapı No: 6, Karesi / Balıkesir, Türkiye
- Tax office and number: Karesi Vergi Dairesi, 6690456710
- Email: hello@byniche.app
- Phone: [Telefon]
This policy explains what personal data we process when you visit our website or use the ByNiche app, why we process it, who we share it with and what rights you have. If you are in Turkey, our KVKK information notice also applies. Cookies are covered in detail in our cookie policy.
2. The data we process
2.1 Account data
When you create an account, we receive your email address and, if you provide it, your name and profile picture. If you sign in with Google, Google shares your name, email address and profile picture with our authentication provider (Clerk). We never receive your Google password.
2.2 Data you create while using ByNiche
To provide the app we store:
- your plan (Free or Pro), subscription status and invite codes you redeemed;
- usage counters used to apply plan limits (for example, how many channel analyses you ran today);
- collections, notes and notebook entries you save;
- your watchlist and Radar channels;
- the channels you have viewed, so that the "hide channels I've seen" option works;
- your language preference.
2.3 Billing data
When you buy a paid plan, payment is handled by our payment provider, currently Paddle, which acts as the merchant of record for the transaction. Paddle collects and processes your payment details, billing address and tax information under its own privacy policy. We never see or store your full card number. We receive from the provider only what we need to manage your subscription: a customer and subscription identifier, your plan, the amount, currency, country, the status of payments and invoices, and the last digits and type of your card where the provider shares them.
2.4 Technical and usage data
- Server logs: when you use our service, our servers record technical data such as IP address, browser type, the page requested, date and time and error messages. We use these logs for security, abuse prevention and troubleshooting and keep them for a short period (normally no longer than 30 days) unless needed to investigate an incident.
- Analytics: we use a privacy-friendly, cookieless analytics tool (such as Umami or Plausible) to count page views, referrers, device type and country in aggregate. It does not use cookies, does not build a profile of you and does not track you across other websites.
2.5 Messages you send us
If you email us, we process your email address, the content of your message and our reply in order to help you.
2.6 Data about YouTube channels
ByNiche analyzes publicly available information about YouTube channels and videos (see section 6). Some channel names or descriptions may identify an individual creator. We process this public information to provide niche research to our users. Creators who would like their channel removed from ByNiche can write to hello@byniche.app.
We do not collect special categories of personal data (such as health data or political opinions), and ByNiche is not directed at children under 16.
3. Why we use your data and our legal bases
| Purpose | Data | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Creating and running your account, providing the app and its features | Account data, data you create | Performance of a contract (Art. 6(1)(b)) |
| Applying plan limits and preventing abuse | Usage counters, logs | Performance of a contract; legitimate interests in a secure and fair service (Art. 6(1)(f)) |
| Billing, invoicing and tax | Billing data | Performance of a contract; legal obligation (Art. 6(1)(c)) |
| Customer support | Messages, account data | Performance of a contract; legitimate interests |
| Understanding how the site is used, in aggregate | Cookieless analytics | Legitimate interests in improving the service |
| Service and security emails (e.g. sign-in, receipts, important changes) | Email address | Performance of a contract; legitimate interests |
| Product news and offers, if you opt in | Email address | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Niche research on public YouTube data | Public channel and video data | Legitimate interests in providing a research tool based on public information |
| Complying with law and defending legal claims | As needed | Legal obligation; legitimate interests |
We do not use your personal data for automated decisions that have legal or similarly significant effects on you, and we do not sell your personal data.
4. Who we share data with
We share personal data only with service providers that help us run ByNiche (sub-processors), under contracts that require them to protect it and use it only on our instructions, or where the law requires it.
| Provider | What they do | Location |
|---|---|---|
| Clerk, Inc. | Authentication and account management | United States |
| Anthropic, PBC | AI labeling of public YouTube channel data (no user personal data is sent) | United States |
| Google LLC (YouTube API Services) | Source of public YouTube data | United States |
| Payment provider, currently Paddle | Payments, invoicing and tax, as merchant of record | United Kingdom / United States |
| Email delivery provider | Sending service emails | Disclosed on request |
| EU-based infrastructure providers | Hosting, database and backups | European Union |
| Cookieless analytics provider | Aggregate website statistics | European Union or self-hosted |
We may also disclose data to public authorities when legally required, or to a buyer or successor if ByNiche is sold or reorganized, in which case this policy will continue to protect your data. An up-to-date list of named sub-processors is available on request.
5. International transfers
Our main infrastructure is in the European Union. Some providers listed above are in the United States or the United Kingdom. Where personal data is transferred outside the EU/EEA, the UK or Turkey, we rely on adequacy decisions where they exist (for example the EU–US Data Privacy Framework for certified providers) or on Standard Contractual Clauses approved by the European Commission and equivalent safeguards (the UK addendum, and for Turkey the standard contracts under Article 9 of Law No. 6698). You can ask us for a copy of the relevant safeguards.
6. YouTube API Services
ByNiche uses YouTube API Services to show information about YouTube channels and videos.
- By using ByNiche you agree to be bound by the YouTube Terms of Service: https://www.youtube.com/t/terms.
- Google's handling of data is described in the Google Privacy Policy: http://www.google.com/policies/privacy.
What we access. Through the YouTube Data API we access only public channel and video metadata and statistics, such as channel titles, descriptions, thumbnails, country, subscriber, view and video counts, video titles, publish dates, durations and view counts.
What we do not access. We do not connect to your YouTube or Google account, we do not use OAuth for YouTube, and we cannot see your private videos, subscriptions, watch history or any non-public YouTube data. Signing in to ByNiche with Google only shares your basic profile (name, email, picture) for authentication.
How we use it. We use this public data to calculate estimates such as outlier scores, revenue ranges and monetization signals, to group channels into niches and to show channel and video information in the app.
Storage and retention. YouTube data is stored on our EU-based infrastructure. Statistics obtained from the YouTube API are kept for no longer than 30 days. Channel and video metadata is refreshed or deleted within 30 days. We get this data only through the official YouTube Data API. Channels and videos that YouTube no longer returns (for example because they were deleted or made private) are deleted from our database the same night. Database backups are deleted after 7 days.
Deleting data and revoking access. You can ask us to delete your data at any time by emailing hello@byniche.app. Because we do not use YouTube OAuth, there is no YouTube access to revoke. If you signed in with Google, you can remove ByNiche's sign-in access at any time from your Google account's security settings at https://myaccount.google.com/permissions. You can delete your ByNiche account from your account settings or by emailing us.
7. AI processing
To label niches and detect faceless content, we send the titles, descriptions and thumbnails of public YouTube channels to Anthropic's Claude API. No personal data about ByNiche users is sent to Anthropic. Under Anthropic's commercial terms, data sent through its API is not used to train its models. AI labels are estimates and can be wrong.
8. How long we keep data
- Account data and data you create: for as long as your account is active. When you delete your account, we delete or anonymize this data within 30 days, apart from what we must keep by law. Copies may remain in our database backups, which are deleted after 7 days.
- Billing records: for as long as tax and commercial law requires (in Turkey generally up to 10 years).
- Server logs: normally no longer than 30 days.
- Support emails: for up to 2 years after the conversation ends, unless needed longer for a legal claim.
- YouTube API data: as described in section 6.
9. Security
We protect data with encryption in transit (HTTPS), access controls limited to people who need them, separated environments and providers that maintain recognized security programs. No system is perfectly secure; if a personal data breach affects you, we will notify you and the competent authority as required by law.
10. Your rights
Depending on where you live, you have the right to:
- access the personal data we hold about you and get a copy;
- correct inaccurate data;
- delete your data ("right to be forgotten");
- restrict or object to processing, including processing based on legitimate interests and direct marketing;
- data portability (receive your data in a machine-readable format);
- withdraw consent at any time, without affecting earlier processing;
- lodge a complaint with a supervisory authority, for example your local EU data protection authority, the UK Information Commissioner's Office or, in Turkey, the Personal Data Protection Authority (KVKK).
If you are a California resident, you also have the right to know, delete and correct personal information and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.
To exercise any right, email hello@byniche.app from the address linked to your account. We reply within one month (30 days under Turkish law). We may need to verify your identity before acting on a request.
11. Changes to this policy
We may update this policy as ByNiche changes or the law changes. We will post the new version on this page with a new "last updated" date and, for material changes, tell you by email or in the app before they take effect.
12. Contact
Questions about privacy? Write to hello@byniche.app or to By Code Software (Atıf Doğan Özcan), Atatürk Mah. Turgut Reis Cad. No: 32 İç Kapı No: 6, Karesi / Balıkesir, Türkiye.