Privacy Notice

Last updated: 1 May 2026

1. Who we are

DOPYS (the "Service") is operated by ANTON MATUS ANDRIYOVICH, a sole trader (the "Seller", "we", "us"). For the personal data described below we act as the data controller. Contact: dynamivets.media@gmail.com.

2. Personal data we collect

  • Account data: name, email address, login credentials.
  • Service data: prompts you submit (niche, topic, writing samples for Voice Match), generated outputs, ideas you save.
  • Support messages: emails or in-app messages you send us.
  • Usage & telemetry: pages visited, features used, generation counts, errors.
  • Device & technical data: IP address, browser type, device identifiers, approximate location (from IP).

Payment data (card number, billing address, tax ID) is collected and processed by our Merchant of Record, Paddle — we do not see or store your card details.

3. Why we use your data and the legal basis

  • To provide the Service (account creation, generating ideas, saving content) — performance of contract.
  • To process payments and subscriptions via Paddle — performance of contract.
  • Security & fraud prevention (detecting abuse, rate-limiting, audit logs) — legitimate interests.
  • Product improvement (aggregated, de-identified analytics) — legitimate interests.
  • Customer support — performance of contract / legitimate interests.
  • Marketing emails (only if you opt in) — consent. You may withdraw consent at any time.
  • Legal compliance (tax records, responding to lawful requests) — legal obligation.

4. AI processing

When you use DOPYS we send your prompts (and Voice Match samples, if you provide them) to third-party AI model providers to generate the response. Your prompts and outputs are stored in our database so you can revisit your history. We do NOT use your prompts to train any AI model.

5. Sharing your data

We share personal data with the following categories of recipients:

  • Service providers / subprocessors: hosting and database (Supabase / Lovable Cloud), AI inference providers (Google, OpenAI), email delivery, analytics, error monitoring.
  • Merchant of Record: Paddle.com Market Limited handles the sale of subscriptions, payments, billing, tax compliance, invoicing, and customer-portal services. See Paddle's privacy policy.
  • Professional advisers (legal, accounting) where necessary.
  • Authorities where required by law.

6. International transfers

Some of our service providers are located outside Ukraine and the EEA (e.g. United States). When personal data is transferred outside your country we rely on appropriate safeguards such as the EU Standard Contractual Clauses and adequacy decisions where applicable.

7. Retention

We keep account data for as long as your account is active. Generated ideas and history are kept until you delete them or close your account. Billing records are retained for the period required by tax law (typically up to 7 years). Backups are rotated within 30 days. After deletion data is purged or anonymised when no longer needed.

8. Your rights

Subject to applicable law (including the GDPR for users in the UK/EEA) you have the right to: access, rectification, erasure, restriction of processing, portability, objection, and withdrawing consent. You also have the right to lodge a complaint with your local data-protection supervisory authority. We will respond to verified requests within one month. To exercise your rights, email dynamivets.media@gmail.com.

9. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS), encryption at rest, access controls, and least-privilege service credentials.

10. Cookies

We use a small number of essential cookies to keep you signed in and to remember your preferences. We do not currently use third-party advertising cookies. If we add analytics or marketing cookies in the future we will present a cookie banner so you can manage your preferences.

11. YouTube API Services

DOPYS uses the YouTube Data API Services and the YouTube Analytics API to read information from your own YouTube channel (channel statistics, video titles, descriptions, view counts, thumbnails, recent comments, impressions click-through rate, and average view duration) so we can analyze your content and generate personalised recommendations. By connecting your YouTube account, you agree to be bound by the YouTube Terms of Service and acknowledge Google's Privacy Policy.

Limited Use Disclosure

DOPYS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, DOPYS:

  • uses Google user data only to provide and improve the user-facing features described below;
  • does not transfer Google user data to third parties except as necessary to provide or improve those features, comply with applicable law, or as part of a merger, acquisition, or sale of assets with the user's explicit consent;
  • does not use Google user data for serving advertisements, including retargeting, personalised, or interest-based advertising;
  • does not allow humans to read Google user data unless we have the user's affirmative agreement for specific messages, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data is aggregated and used for internal operations.

Scopes requested and how each is used in DOPYS

ScopeWhat we readWhere it's shown in DOPYS
youtube.readonlyChannel name, avatar, subscriber count, total views, recent video titles & thumbnails, recent comments — read-only./channel (My Channel dashboard)
yt-analytics.readonlyImpressions click-through rate (CTR) and average view duration for the last 28 days — read-only./analytics (Diagnose my channel)
userinfo.email, userinfo.profile, openidEmail address and basic profile (name, picture) for account identification.Account header and /account

We never post, edit, comment, like, subscribe, or delete anything on your YouTube channel. All requested scopes are read-only.

Storage and retention

  • OAuth access tokens and refresh tokens are stored encrypted server-side and used only to refresh access to your data.
  • Cached YouTube data (channel info, last comments, CTR, retention) is refreshed on demand and on each "Sync" action.
  • When you click Disconnect YouTube inside DOPYS, we immediately delete your OAuth tokens and cached YouTube data from our database.

Revoking access

You can disconnect your channel at any time inside DOPYS at /channel → Your data & access → Disconnect YouTube. You can also revoke DOPYS access directly from your Google Account at https://myaccount.google.com/permissions. Revoking immediately stops all data access and triggers deletion of the corresponding tokens on our side.

12. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be announced by email or in-app notice.