Home
Privacy Policy
Wedia Corp — Video Localizer
Last updated: May 18, 2026
1. Introduction
Wedia Corp (“we”, “us”, “our”) operates the Video Localizer platform (“Service”), a video localization tool that helps content creators generate, translate, and manage subtitles for their YouTube videos. The Service is currently available by invitation only. Access is granted by administrators to authorized team members.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.
2. Information We Collect
2.1 Account Information
- Name, email address (provided during registration or invitation)
- Authentication credentials (encrypted, never stored in plain text)
- Profile avatar (optional)
2.2 YouTube Data (via YouTube API Services)
When you connect your YouTube channel via OAuth, we access: - Channel information: Channel name, ID, thumbnail, subscriber count, video count - Video metadata: Title, description, duration, privacy status, publish date, caption languages - Caption data: Existing subtitle tracks (for duplicate detection before upload)
We use YouTube API Services to: - List your channel’s videos for localization job creation - Upload translated subtitles (captions) to your videos - Update video title and description localizations - Download existing captions for reference
2.3 Generated Content
- Transcriptions (generated via ElevenLabs, WhisperX, or YouTube auto-captions)
- SDH-enhanced subtitles (generated via Google Gemini AI)
- Translated subtitles and metadata (generated via Google Gemini AI)
- Audio files (temporarily downloaded for transcription processing)
2.4 Usage Data
- Activity logs (login/logout events, job creation, system actions)
- IP addresses (for security and audit logging)
- Browser user agent (for security logging)
3. How We Use Your Information
- Service delivery: Generate, translate, and upload subtitles to your YouTube channel
- Authentication: Verify your identity and manage access permissions
- Security: Detect unauthorized access, prevent abuse
- Audit logging: Track actions for GDPR/KVKK compliance
- Improvement: Analyze usage patterns to improve the Service
4. YouTube API Services — Additional Disclosure
Our use of information received from YouTube API Services adheres to the YouTube API Services Terms of Service and the YouTube API Services Developer Policies.
Specifically: - We only access YouTube data that users explicitly authorize via OAuth consent - We do not sell, rent, or share YouTube data with third parties - We do not use YouTube data for advertising or profiling purposes - We do not download or redistribute video content - All YouTube API data access is limited to the minimum necessary for localization services - Users can revoke access at any time by disconnecting their channel
YouTube API Scopes
Our Service requests the following OAuth scopes: -
youtube.readonly — Read access to list channel videos, read
video metadata, and check existing captions -
youtube.force-ssl — Write access to upload caption tracks,
update video localizations (title/description translations)
Google Privacy Policy: https://policies.google.com/privacy
5. Legal Basis for Processing
Under GDPR Article 6 and KVKK Article 5, we process your data on the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Account management | Contractual necessity (to provide the Service) |
| YouTube data access | Consent (explicit OAuth authorization) |
| Subtitle generation and translation | Contractual necessity (core service delivery) |
| Activity and security logs | Legitimate interest (security, compliance, fraud prevention) |
| Cookie usage | Consent (cookie consent banner) |
You may withdraw consent for YouTube data access at any time by disconnecting your channel (see Section 8).
6. Data Storage and Retention
| Data Type | Storage Location | Retention Period |
|---|---|---|
| Account info | Encrypted database | Until account deletion |
| OAuth tokens | AES-256 encrypted | Until channel disconnection |
| Activity logs | Database | 365 days |
| Generated subtitles (SRT) | Server filesystem | 90 days after job completion |
| Audio/video files | Server filesystem | Deleted after job completion |
| YouTube metadata | In-memory cache | 24 hours (auto-expires) |
6. Data Security
- All OAuth tokens are encrypted at rest using AES-256 (Fernet encryption)
- All API communication is over HTTPS/TLS
- Database credentials are encrypted
- Access is controlled via role-based permissions (RBAC)
- Regular security audits are conducted
7. Data Sharing
We do not sell, rent, or share your personal information with third parties, except: - AI Service Providers: - ElevenLabs (US): Audio files are sent for speech-to-text transcription. ElevenLabs Privacy Policy - Google Gemini (US): Text and audio data are sent for SDH enhancement and translation. Google Privacy Policy - YouTube (Google, US): Translated subtitles and metadata are uploaded to YouTube at your explicit request. - Legal requirements: When required by law or valid legal process.
International Data Transfers
Your data may be transferred to and processed in countries outside Turkey and the EU, including the United States, by our AI service providers (Google, ElevenLabs). These transfers are governed by Standard Contractual Clauses (SCCs) or equivalent safeguards as required by GDPR and KVKK.
8. Your Rights
Under GDPR and KVKK (Turkish Data Protection Law), you have the right to: - Access: Request a copy of your personal data - Rectification: Correct inaccurate data - Erasure: Request deletion of your data (“right to be forgotten”) - Portability: Receive your data in a structured, machine-readable format - Objection: Object to certain data processing - Revoke consent: Withdraw consent at any time
Revoking YouTube Access
You can revoke our access to your YouTube data at any time by: 1. Disconnecting the channel in our platform (Settings > Channels) 2. Removing app access via Google Security Settings
Upon revocation, we will delete all stored YouTube data (tokens, cached metadata) within 30 days.
9. Cookies
We use essential cookies for: - Session management (authentication) - Language preference - GDPR consent tracking
We do not use advertising or tracking cookies.
10. Children’s Privacy
Our Service is not intended for users under 18 years of age. We do not knowingly collect information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of the Service after changes constitutes acceptance.
12. Contact
For privacy-related inquiries:
Wedia Corp Email: privacy@wediacorp.com Website: https://wediacorp.com
This Privacy Policy complies with GDPR (EU), KVKK (Turkey), and YouTube API Services Terms of Service.