Privacy Policy

01Who we are

You Translate (“we”, “us”, “our”, or the “Service”) is a Telegram-based assistant that translates YouTube video subtitles, titles, and descriptions into multiple languages and uploads the translated assets to the user’s YouTube channel.

You Translate is operated by Igor Yakimuk, an individual based in Israel, who acts as the data controller for the personal data described in this Privacy Policy.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you have over it. It applies to everyone who interacts with the Service, including visitors to this website and users of our Telegram bot at @translate_subtitles_bot.

For all privacy-related questions, contact us at [email protected].

02Scope of this policy

This policy covers data we process when you:

• visit or interact with the You Translate website;
• start a chat with our Telegram bot;
• connect a Google account to authorize the Service to access your YouTube channel;
• send video links, files, or messages to the bot;
• purchase tokens or use any paid feature.

It does not cover data handled by Telegram, Google/YouTube, or any other third party operating under their own terms — see Section 7 below.

03Data we collect

A. Information you give us directly

• Telegram identifiers — your Telegram user ID, username (if set), and language preference, as exposed by the Telegram Bot API.
• YouTube video URLs and files you submit to the bot for translation.
• Configuration choices — target languages, what to translate (subtitles / metadata), publishing options.
• Payment confirmations — token purchases processed through Telegram Payments or other payment providers. We do not receive or store full card numbers.

B. Information we receive from Google when you authorize the Service

See Section 5 for the full list of OAuth scopes and what each one is used for.

C. Information collected automatically

• Service logs — timestamps, request type, success/failure, error messages. No request bodies are stored.
• Usage counters — number of tokens consumed, languages used, video duration processed (for billing and quota enforcement).
• Website analytics — aggregated, privacy-friendly page views (no cookies, no cross-site tracking).

04YouTube API Services

You Translate uses YouTube API Services to access, modify, and upload content on your authorized YouTube channel. By using the Service, you agree to be bound by the YouTube Terms of Service.

Information obtained through YouTube API Services is processed in accordance with the Google Privacy Policy.

We do not use YouTube API Services to:

• show advertising on YouTube content;
• train AI models on your video content, transcripts, or metadata;
• aggregate or sell YouTube user data to third parties.

05Google user data and OAuth scopes

When you connect a Google account, the Service requests the minimum scopes required to perform the work you ask it to do. Each scope is listed below together with the specific operations we perform with it.

06How we use your data

We process your data only for the following purposes:

• Provide the Service — translate captions and metadata, upload them to your channel, deliver chat replies in Telegram.
• Operate billing — track token balance, process purchases, prevent abuse.
• Customer support — respond to messages sent to [email protected] or via the bot.
• Legal compliance — comply with applicable laws, fraud prevention, dispute resolution.
• Improve the Service — aggregated, anonymized statistics only. We never train translation or AI models on your content without explicit, separate, opt-in consent.

The legal basis for processing under the GDPR is, depending on the activity, performance of a contract (Art. 6(1)(b)), legitimate interests (Art. 6(1)(f)), or your consent (Art. 6(1)(a)).

07Sharing and third-party processors

We share data only with the providers strictly necessary to run the Service, and only to the minimum extent required:

You Translate is a global service. Data may be processed in any country where our subprocessors operate. Where required, transfers rely on the European Commission’s Standard Contractual Clauses or equivalent safeguards — see Section 12.

We do not sell, rent, or trade personal data. We do not transfer Google user data to third parties for advertising or for the development of AI models.

08Data retention

• Captured caption tracks, video metadata, and generated translation files — stored for up to 30 days after the translation job completes, then permanently deleted.
• OAuth refresh token — stored, encrypted at rest, until you revoke access or delete your account.
• Operational logs — kept for up to 90 days for security and debugging, then deleted automatically.
• Billing records — retained for as long as required by applicable accounting law (typically up to 6 years in the EU).

09Security

We apply industry-standard safeguards: TLS 1.2+ in transit, AES-256 at rest for OAuth tokens, principle-of-least-privilege access controls, regular dependency audits, and isolated processing environments. No system is 100% secure, but we treat your YouTube credentials and content with the same care we would treat our own.

10Your rights and data deletion

Under the GDPR (and equivalent laws in other jurisdictions) you have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• erase your data (“right to be forgotten”);
• restrict or object to processing;
• data portability — receive your data in a machine-readable format;
• withdraw consent at any time;
• lodge a complaint with your local data protection authority.

How to delete your data

You have three independent ways to remove your data from the Service:

• From inside the bot: send the command /delete_account. Your stored files, tokens, refresh tokens, and account records are wiped within 24 hours, except billing records we are legally required to retain (see Section 8). We send a confirmation message when the job is finished.
• Revoke access on Google: visit security.google.com/settings/security/permissions and remove “You Translate”. Our system detects the revocation on the next API call and erases the corresponding refresh token and any associated data automatically — in any case within 30 days of revocation.
• Email request: write to [email protected] from the email associated with your Google account. We respond and complete deletion within 7 days.

11Children

The Service is not intended for, and is not directed at, children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact [email protected] and we will delete it.

12International transfers

Your data may be processed outside your country of residence, including in the United States, by the providers listed in Section 7. Where required, transfers rely on the European Commission’s Standard Contractual Clauses or equivalent safeguards.

13Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced via the bot and on the website at least 14 days before they take effect. The “Effective” and “Last updated” dates at the top of this page always reflect the current version.

14Contact

For any privacy-related question, request, or complaint:

Email: [email protected]

Telegram: @translate_subtitles_bot (use the /contact command)