Last updated: September 1, 2026
This Privacy Policy explains how Kolicoski DOOEL ("VIDIK", "we", "us", or "our") collects, uses, and shares information when you use VIDIK (the "Service"). By using the Service, you agree to the collection and use of information as described here.
Account information. When you register, we collect your name, email address, a securely hashed password, email-notification preferences, and security settings such as whether two-factor authentication is enabled. We do not use Google as a VIDIK sign-in provider.
Google and YouTube data. When you connect a YouTube channel, Google grants VIDIK an OAuth access/refresh token scoped to the permissions you approve. Using that token, VIDIK retrieves and stores data needed to provide the Service, including your channel identifiers, video IDs, titles, and descriptions. We use this data only to display it to you, detect broken links in it, and, when you request it, write your approved edits back to YouTube.
Edit and job history. We store pending and completed edits (including prior and new description text) so that you can preview changes, execute them in bulk, and roll them back if needed.
Usage and technical data. We collect security and application logs such as pseudonymized source information, request identifiers, event types, results, and timestamps. We use cookies/session identifiers required to keep you signed in and protect requests. We do not currently use advertising or analytics trackers.
Billing information. Paid plans are processed by AgentaOS. We do not receive or store your full card number. We retain the subscription, customer, event, and channel-association identifiers needed to provide paid access, reconcile billing state, prevent duplicate subscriptions, and investigate payment failures.
VIDIK uses YouTube API Services. VIDIK's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google/YouTube authorization is used only to provide and improve the YouTube management features you have explicitly requested - it is never used for advertising, and it is never sold or transferred to third parties except as required to operate the Service, comply with the law, or in connection with an approved merger or acquisition, and only ever in de-identified or aggregated form to any other party.
Your use of YouTube through VIDIK remains subject to the YouTube Terms of Service and the Google Privacy Policy.
VIDIK does not use raw, derived, aggregated, or anonymized Google user data to develop, improve, or train generalized, foundational, or other non-personalized artificial intelligence or machine-learning models.
To the extent GDPR applies to our processing of your personal data (see Section 10 below), we rely on the following legal bases under Article 6 GDPR for each purpose described in this Policy:
We do not sell your personal information. We share information only with:
VIDIK is operated by Kolicoski DOOEL from North Macedonia, which is not a member of the EU/EEA and does not currently hold a European Commission adequacy decision. If you are located in the EU/EEA, using the Service means your personal data is transferred to and processed in North Macedonia, and potentially in other countries where our hosting and service providers operate.
Where a provider processes personal data outside the country in which it was collected, we use the transfer mechanism required for that relationship, such as contractual safeguards and Standard Contractual Clauses where applicable. Provider locations and subprocessors can change; contact us for the current transfer information relevant to your account.
We retain account and connected-channel data while your account is active and it is needed to provide the Service. VIDIK refreshes stored YouTube data and revalidates authorization at least every 30 days.
If you disconnect a channel or revoke VIDIK's authorization, imported YouTube data is deleted as soon as possible. A disconnect inside VIDIK deletes that channel's imported data immediately; when we detect revocation outside VIDIK, the related authorized data is deleted no later than 7 calendar days after detection.
If you disconnect a channel in VIDIK, its imported videos, descriptions, edit records, link-scan results, and copied channel metadata are deleted immediately. If the authorization is shared, the other channels remain connected unless you choose to revoke the shared authorization. Disconnecting or deleting data in VIDIK does not delete videos or other content on YouTube.
Application logs are retained for 14 days; failed queued-job records for 7 days; redacted billing events for 90 days; and security alerts and pseudonymized audit records for up to 365 days. A keyed, non-reversible channel-identifier hash may remain until account deletion solely to match a user-requested reconnect to its existing local billing/free-channel record and to prevent repeated use of a once-only scan allowance. VIDIK does not use this hash for marketing, profiling, or contacting channel owners.
When you delete your account, VIDIK first attempts to cancel active subscriptions and revoke Google authorization, then deletes the account and associated operational data. Records required for accounting, fraud prevention, dispute handling, or legal obligations may be retained in minimized or pseudonymized form for the applicable period. Deleted data may remain temporarily in Hetzner's seven rotating daily backups and ages out as those backups are replaced; we do not keep permanent server snapshots.
Payment provider notifications. Our payment processor sends us automated notifications about subscription events (activation, renewal, payment failure, cancellation). We store a redacted copy of each notification - with billing addresses and tax identifiers removed - for 90 days so that we can diagnose and re-apply any that fail to process, after which it is deleted automatically.
We use industry-standard safeguards to protect your information, including encrypted connections (HTTPS/TLS), hashed passwords, and access controls around OAuth tokens. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you as required by applicable law.
Kolicoski DOOEL is established in North Macedonia and, as a data controller, is subject to North Macedonia's Law on Personal Data Protection, which is closely modeled on the GDPR as part of the country's EU accession process. The competent supervisory authority for our processing activities is the Agency for Personal Data Protection of the Republic of North Macedonia ("AZLP"). You may lodge a complaint with the AZLP regarding our processing of your personal data.
If you are located in the EU/EEA and consider that GDPR applies to our processing of your data (see Section 6), you also have the right to lodge a complaint with the supervisory authority in your own country of residence, place of work, or the place of the alleged infringement, in addition to or instead of contacting the AZLP.
We use strictly necessary cookies/session tokens to keep you signed in and to secure requests against cross-site request forgery. We do not currently use third-party advertising or analytics cookies. If analytics are added later, this Policy and the consent controls required by applicable law will be updated before activation.
The Service is not directed to, and we do not knowingly collect personal information from, children under 13 (or the minimum age required in your jurisdiction). If we learn we have collected such information, we will delete it.
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.
Questions about this Privacy Policy, or requests regarding your personal data, can be sent to contact@vidik.app.
