SmartChannel AI · Legal

SmartChannel AI Privacy Policy

Effective date: 20 October 2026
Last updated: 21 October 2026

1. Who we are

SmartChannel AI ("SmartChannel", "we") is a YouTube channel analytics service developed by D20 Reklamcılık ve Prodüksiyon Hizmetleri Limited Şirketi ("D20"), the data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK"). Address: Zühtüpaşa Mah. 1. Hatboyu Sk. Seyran Apt. No:7 Daire:12 Kadıköy/İstanbul, Türkiye · Email: smartchannel@d20.com.tr

2. YouTube API Services

SmartChannel uses YouTube API Services. Data obtained from YouTube is also subject to Google's privacy policy: Google Privacy Policy — http://www.google.com/policies/privacy

3. Information we collect

a) Public YouTube data. Through the YouTube Data API v3 we read only publicly available channel and video information: channel name, handle, description, keywords, topic categories, country, default language, creation date, profile and banner image links, featured channels, the "made for kids" designation, subscriber/view/video counts; video title, publish date, duration, category, whether it is a live stream or premiere, view/like/comment counts, the paid product placement declaration and the declared brand partner channel. From video descriptions we extract only the domain names of links (e.g. example.com) and the @channel names mentioned; we do not store the description text itself. We obtain this data only through the official API; we do not scrape YouTube or any other site.

b) Comments. We do not collect comments today. When community analysis is introduced, comment text will be collected without the commenter's name or identifier, deleted after analysis, and never stored for more than 30 days.

c) Dashboard account. For users who sign in to the SmartChannel dashboard: name, work email, organisation and sign-in records. Today the dashboard has only a demo account prepared for the YouTube API compliance audit.

d) Technical logs. Server logs (IP address, browser information, request time) for security and operation.

We do not connect to your YouTube account; we do not ask for Google sign-in or authorization (OAuth) to access a YouTube account. If this feature is added, this policy will be updated beforehand.

Collection method and legal basis.

Public YouTube data (and comments, once introduced) is collected automatically through the YouTube Data API; the legal basis is that the data has been made public by the data subject (KVKK Art. 5(2)(d)) and our legitimate interest (Art. 5(2)(f)).
Dashboard account details are obtained electronically from you or your organisation when the account is opened; the legal basis is the establishment and performance of a contract (Art. 5(2)(c)).
Technical logs are generated automatically when the site and dashboard are used; the legal basis is our legitimate interest (Art. 5(2)(f)).

4. How we use information

To help brands and agencies search, compare and select channels for campaigns.
To determine, from the domain names and @channel names extracted from video descriptions, whether a channel belongs to a brand and which channels it works with.
To produce our own analyses from public statistics (e.g. engagement and consistency indicators). These analyses are calculated by SmartChannel, are not YouTube data, and are labelled as such and shown separately from figures that come from YouTube. Until our application under YouTube's derived metrics additional policy is approved, scores are not shown to customers.
To assess content and categories with AI. We never infer protected characteristics of viewers or creators, such as age, race or ethnic origin, religion, political views, sexual orientation or health.
To manage dashboard accounts, keep the service secure and meet legal obligations.

We do not use information for ad targeting and we do not sell it.

5. Who we share information with

Only with infrastructure providers we use to run the service, to the extent of their service:

Provider	Purpose	Location
Google LLC (YouTube API Services, Google Fonts)	Reading public YouTube data; website fonts	USA
Supabase Inc.	Database and server-side processing	EU (Frankfurt)
Vercel Inc.	Website and dashboard hosting	USA / global

AI assessment. During development, public channel information is sent to the Claude service of Anthropic PBC (USA) for AI assessment; Anthropic processes this data under its own privacy policy: https://www.anthropic.com/legal/privacy. Once the service is opened to users, this assessment is carried out through the Anthropic API under Anthropic's commercial terms.

The servers of these providers and of Anthropic are located outside Türkiye, so your personal data is transferred for the purposes above to Germany (European Union) and the United States:

Dashboard account details and technical logs: Supabase (Germany) and Vercel (USA / global).
Public channel information: Supabase (Germany) and, for AI assessment, Anthropic (USA).
Website visitors' IP addresses: Vercel (USA / global) and Google Fonts (USA).

We do not share information with public authorities except where required by law.

6. Cookies and advertising

SmartChannel does not show advertisements and does not allow third parties to serve content or advertisements on the site. No advertising, visitor analytics or tracking cookies are used.

Website: uses no cookies. Your language choice is kept in your browser's local storage. Fonts are loaded from Google Fonts; your browser connects to Google's servers and your IP address is passed to Google (the Google Privacy Policy applies).
Dashboard: uses only strictly necessary cookies and browser local storage to keep you signed in.

7. How long we keep information

Public YouTube statistics (subscriber, view and like counts and their time series): up to 30 days; expired data is deleted or refreshed from YouTube.
Channel names, descriptions, video titles and comment text: up to 30 days in all cases.
Other public channel and video information (including domain names and @channel names extracted from video descriptions), and the analyses we derive from it: up to 30 days; then deleted or refreshed from YouTube.
If our application under YouTube's "derived metrics and data storage" additional policy is approved, statistics and the analyses we derive from them may be kept for up to 36 months; the 30-day rule for names, titles, descriptions and comment text does not change. This policy will be updated before that change takes effect.
Dashboard accounts: while the account is open; deleted within 7 days of closure (except records we must keep by law).

We refresh stored data regularly to keep it consistent with current YouTube data; we show the most recent data, and historical data with its date.

8. Deletion requests

Dashboard users: you can ask for your account and your data to be deleted by writing to smartchannel@d20.com.tr; we complete the request within 7 days.
Channel owners: you can ask, at the same address, for your channel not to be shown on SmartChannel and for its data to be deleted; the channel is deleted within 7 days and added to a block list so that it is not re-added. The block list holds only the channel's YouTube channel ID, which is kept indefinitely so that we can keep honouring your request.

Deleting data stored by SmartChannel does not in any way affect data stored by YouTube. To delete data on YouTube, use a YouTube application or an authorised application that supports deleting that data.

9. Security

Data is transmitted with industry-standard transport encryption (HTTPS/TLS). Database access is restricted by permission; keys are kept in protected environment variables rather than in code.

10. Your rights

Under Article 11 of KVKK you have the right to: learn whether your personal data is processed; request information if it is; learn the purpose of processing and whether it is used accordingly; know the third parties in Türkiye or abroad to whom it is transferred; request correction if it is incomplete or inaccurate; request deletion or destruction under the conditions of Article 7 of KVKK; request that corrections and deletions be notified to the third parties to whom the data was transferred; object to a result against you arising exclusively from automated analysis; and claim compensation for damage caused by unlawful processing. If you are in the European Union, your rights under the GDPR are reserved. Send requests to smartchannel@d20.com.tr; we reply within 30 days.

11. Changes

When we change this policy we publish the new text on this page and update the "last updated" date. Dashboard users are notified of significant changes.