Privacy policy

1. Introduction

This privacy policy describes how Kraken Lab (“we”, “our”) collects, uses, stores, and protects your personal data when you use the website https://kraken-lab.fr and the SaaS application https://app.kraken-lab.fr (together, the “Services”).

Kraken Lab uses YouTube API Services. Kraken Lab lets users generate type beat videos and publish them to their YouTube channel via Google OAuth and YouTube API Services (including the YouTube Data API).

By using the Services, you accept the practices described in this policy.

2. Data controller

The controller of personal data is Kraken Lab, a micro-enterprise established in France, publisher of https://kraken-lab.fr and https://app.kraken-lab.fr.

For any question about your personal data, contact us through the support chat available on https://kraken-lab.fr.

3. Data we collect

Depending on how you use the Services, we may collect the following categories of data:

Account data: name, email address, and profile photo obtained when signing in with Google (openid, email, profile scopes).

YouTube / Google service OAuth data: access and refresh tokens, authorized scopes, and technical metadata needed to publish videos to your YouTube channel (youtube.upload scope).

User content: audio files, images, templates, generated videos, titles, descriptions, tags, scheduled publication dates, and URLs of videos published on YouTube.

Usage and statistics data: service usage information, including aggregated view statistics for published videos, obtained via YouTube API Services (YouTube Data API) with an API key.

Billing data: Stripe identifiers, subscription status, and plan information needed to manage your subscription. Card payment details are processed by Stripe and are not stored by Kraken Lab.

Support data: name, email, and message content exchanged via the Crisp chat.

Browsing data (marketing site): data collected via Google Analytics and cookies/UTM parameters (for example utm_source).

4. Access, use, and storage of Google / YouTube data

Kraken Lab uses YouTube API Services to publish videos to your YouTube channel and to retrieve certain statistics related to your publications.

When you connect your Google account to sign in, we use identity information (openid, email, profile) only to create and authenticate your Kraken Lab account.

When you link YouTube, we request the youtube.upload permission to upload, on your behalf, the type beat videos you choose to publish or schedule. We store the OAuth tokens needed to maintain that connection until you disconnect or delete your account.

Kraken Lab does not use data obtained from Google APIs or YouTube API Services to serve ads, sell it to third parties, or train generalized AI models.

Kraken Lab’s use of information received from Google APIs and YouTube API Services will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

For more information about how Google processes data, see the Google Privacy Policy.

You may revoke YouTube access at any time from the application (disconnect the service) or from your Google Account security settings. Deleting your Kraken Lab account also revokes and deletes stored tokens.

5. Purposes of processing

Your data is processed to: create and manage your account; provide video generation and publishing features; connect and maintain YouTube authorization; display statistics related to your publications; manage subscriptions and payments; secure and operate the Services; respond to support requests; measure marketing-site audience and improve our Services.

6. Legal bases

Processing is based on: performance of the contract when you use the application; your consent (Google/YouTube connection, certain analytics cookies); our legitimate interest in securing and improving the Services; and, where applicable, our legal obligations (accounting, billing retention).

7. Retention period

Account and content data are retained while your account remains active.

YouTube OAuth tokens are retained only for the duration of the service connection, then revoked and deleted upon disconnection or account deletion.

Statistics retrieved via YouTube API Services (Authorized Data and Non-Authorized Data) are neither stored nor displayed for more than 30 days. After that period, they are refreshed from YouTube API Services or purged.

If you request deletion or delete your account in the application, we erase your personal data from active systems within a maximum of 30 days, subject to legal retention obligations (for example billing records).

Support messages (Crisp) are kept for as long as needed to handle your request, then archived or deleted according to operational needs and legal obligations.

UTM cookies are kept for approximately 30 days. Google Analytics data is retained according to the tool’s configuration.

8. Recipients and processors

Your data may be processed by providers acting on our behalf, including: Google (Google Sign-In, OAuth, YouTube API Services, Google Analytics); Amazon Web Services (media storage and video rendering); Stripe (payments and subscriptions); Crisp (support chat); OVH SAS (marketing website hosting).

These providers act only within the scope of their services. We do not sell your personal data.

9. Transfers outside the European Union

Some providers (notably Google, Amazon Web Services, and Stripe) may process data outside the European Economic Area. In that case, appropriate safeguards are implemented in accordance with the GDPR (standard contractual clauses or equivalent mechanisms provided by those providers).

10. Cookies

The marketing website uses cookies and similar technologies for operation, audience measurement (Google Analytics), and marketing information (UTM parameters).

The application uses technical cookies/sessions required for authentication and security (including session and OAuth state cookies).

You can configure your browser to refuse some or all cookies. Refusing certain cookies may limit some features.

11. Your rights

Under the GDPR and applicable French law, you have rights of access, rectification, erasure, restriction, objection, and portability where applicable.

You may delete your account from the application settings, disconnect YouTube from the service linking tab, or contact us via the support chat on https://kraken-lab.fr. You may also lodge a complaint with the CNIL (https://www.cnil.fr).

12. Security

We implement appropriate technical and organizational measures to protect your data, including authenticated access to the application, secure storage of OAuth tokens, and access restriction to personnel and systems necessary to operate the service.

13. Contact

For any question about this policy or the processing of your personal data, use the support chat available on https://kraken-lab.fr.

14. Changes

We may update this privacy policy at any time. The last updated date at the top of this page will then be revised. If we materially change how we use Google user data, we will notify you and, where required, obtain renewed consent.