Privacy Policy
Effective Date: October 9, 2026 • Version 2.4
At Leksmedia (“Platform”, “we”, “us”, or “our”), we take creator data sovereignty seriously. We never sell your personal information, we never share proprietary scripts with advertisers, and we strictly enforce a Zero Public AI Model Training Guarantee: your Ikigai blueprints, avatar strategies, and video drafts are never utilized to train public foundation models.
01.Data Controller & Scope
This Privacy Policy explains how Leksmedia processes, secures, and safeguards your personal data when you visit our website, register for an account, access the YouTube Personal Brand Studio, or communicate with our support personnel.
For the purposes of the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), Leksmedia operates as the Data Controller for your account registration data and telemetry, and as a Data Processor regarding the strategic creative inputs and YouTube video scripts you draft within the platform.
02.Information We Collect
We only collect data strictly necessary to provide high-velocity YouTube outlier intelligence and strategic brand blueprint generation:
Email address, full name, encrypted password hashes, OAuth identifier tokens, and workspace membership roles.
Self-reported Ikigai answers, target audience avatar descriptions, niche topics, custom hook preferences, and brand tone guidelines.
Tokenized Stripe customer IDs, payment status, VAT/tax jurisdiction, and billing history. We never store raw credit card numbers.
Browser type, operating system, IP address (hashed for fraud prevention), request latencies, and platform navigation events.
03.YouTube API Services & Google User Data Disclosures
Leksmedia utilizes YouTube API Services to power the 48-Hour Outlier Velocity Scanner and channel diagnostics. By utilizing these features, you acknowledge and agree to be bound by the YouTube Terms of Service and Google Privacy Policy.
Our integration strictly conforms to the Google API Services User Data Policy, adhering to the following boundaries:
- Read-Only Public Analytics: We exclusively fetch publicly accessible metrics (video view velocities, public publish timestamps, video titles, thumbnail URLs, and public subscriber tier benchmarks).
- Zero Management or Upload Privileges: Leksmedia never requests write, upload, modify, comment, or channel administration permissions. We cannot alter or delete anything on your YouTube channel.
- No Private Data Harvesting: We do not store unlisted or private videos, YouTube studio earnings data, Google account passwords, or personal YouTube viewing history.
- Permission Revocation: You can disconnect and revoke Leksmedia's access to your Google account at any time via the Google Security Settings page.
For comprehensive information on how Google manages information, consult the Google Privacy Policy.
04.Zero Public Model Training Guarantee (Content Sovereignty)
Unlike generalized consumer AI platforms, Leksmedia maintains strict isolation between your proprietary brand positioning and underlying machine learning infrastructure:
Your inputs (including confidential Ikigai answers, private brand positioning statements, unpublished YouTube video scripts, and custom hook formulas) are never used to train, re-train, or fine-tune public foundation models. All API transmissions with our inference engines are governed by zero-retention enterprise agreements.
Your competitive edge remains exclusively yours. Another creator searching for outliers in your exact niche will never receive your generated scripts, hooks, or proprietary formulations.
05.Legal Bases for Data Processing (GDPR Article 6)
We only process your personal data when an established legal ground exists under applicable law:
- Performance of Contract: To generate your brand deliverables, authenticate your login session, and execute requested script generations.
- Legitimate Interests: To protect platform integrity against abuse, prevent fraudulent signups, and monitor infrastructure latency.
- Legal & Regulatory Compliance: To maintain required accounting records, process tax documentation, and comply with binding court subpoenas.
- Explicit Consent: Where you voluntarily opt into optional feature betas, email newsletters, or direct creator interviews.
06.Sub-processors & Third-Party Service Providers
We do not sell, rent, or monetize your personal data to ad brokers or third parties. We only share data with vetted sub-processors under strict Data Processing Agreements (DPAs):
| Entity | Purpose | Data Location | Safeguard |
|---|---|---|---|
| Stripe, Inc. | Payment processing & subscription billing | United States / Global | PCI-DSS Level 1, Standard Contractual Clauses |
| Vercel, Inc. | Edge hosting & platform frontend execution | United States / Global Edge | SOC 2 Type II, ISO 27001, GDPR DPA |
| Google LLC | YouTube API Services public metric retrieval | United States | Google API Services User Data Policy |
| Cloud Database Infrastructure | Encrypted user storage & session caching | United States / EU Regions | AES-256 at rest, TLS 1.3 in transit |
07.Cookies & Local Storage
Leksmedia adheres to a clean, non-intrusive tracking approach. We utilize essential session tokens stored via secure HTTP-only cookies and local storage items (such as creator_os_auth and onboarding draft keys) strictly for:
- • Maintaining your authenticated creator session across dashboard tabs.
- • Preserving incomplete onboarding progress to prevent accidental work loss.
- • Remembering interface settings (dark mode contrast, script font sizing).
We do not deploy cross-site tracking cookies, behavioral ad-targeting pixels, or third-party fingerprinting scripts.
08.Data Retention & Account Purge
We retain your personal information only for as long as your account remains active or as required to fulfill legal, taxation, and accounting obligations:
- Active Subscriptions: Your Ikigai blueprints, generated video scripts, and custom creator profiles remain securely archived for instant access in your dashboard.
- Account Termination: When you delete your account, your personal data, strategy inputs, and generated scripts are hard-deleted from production databases within thirty (30) days.
- Billing Records: Transaction receipts and invoices are preserved for seven (7) years in accordance with statutory financial auditing regulations.
09.Your Privacy Rights (GDPR & CCPA/CPRA)
Regardless of your country of residence, Leksmedia affords all creators comprehensive rights regarding their personal data:
To exercise any of these rights, submit a written request to privacy@leksmedia.com. We respond to all verified inquiries within thirty (30) days.
10.Data Security Measures
We employ defense-in-depth security architecture to safeguard your personal brand blueprints from unauthorized access, breach, alteration, or disclosure:
- End-to-End Transit Encryption: Enforced TLS 1.3 protocol on all API endpoints and web client sessions.
- Cryptographic Storage: Database volumes encrypted at rest with industry-standard AES-256 keys.
- Role-Based Access Control (RBAC): Strict internal least-privilege security policies; no employee has direct access to production script databases without audited oversight.
11.Updates to this Privacy Policy
We may periodically update this Privacy Policy to reflect modifications to our platform features, YouTube API guidelines, or international data protection mandates. Any material changes will be communicated via your registered email or highlighted prominently through an in-app banner prior to taking effect.
12.Contact & Data Protection Officer
For questions, data portability requests, or concerns regarding our privacy architecture, please contact our Data Protection Officer:
Leksmedia Privacy & Legal Department
Attention: Data Protection Officer
Email: privacy@leksmedia.com
Corporate Helpdesk: support@leksmedia.com
Response SLA: 24–48 Business Hours