Moneytized.ai

Privacy Policy

Last updated: 27 April 2026

This Privacy Policy explains how Hadi Ahmed Irfan("Moneytized.ai", "we", "us") collects, uses, and protects your personal data when you use our website at moneytized.net and the related services (the "Service"). We are the data controller for the personal data we process about you.

1. Who we are

Hadi Ahmed Irfan, a sole trader based in the United Kingdom, operating under the trading name Moneytized.ai. You can contact us at hadiahmedirfan@gmail.com.

2. What data we collect

  • Account data: name, email address, password (hashed), profile preferences.
  • Billing data: Stripe customer ID, subscription status, plan, billing history. Card details are processed and stored by Stripe — we never see or store your card number.
  • Usage data: videos you generate, prompts you submit, credits consumed, monetisation scores, calendar entries, RPM benchmarks you save, social accounts you connect.
  • Technical data: IP address, browser type, device information, pages visited, timestamps.
  • Generated content: AI-generated videos, scripts, and images you create using the Service.

3. How we use your data

We process your personal data for the following purposes and lawful bases under UK GDPR:

  • To provide the Service (contractual necessity) — creating your account, generating videos, processing payments.
  • To improve the Service (legitimate interest) — analysing usage to fix bugs and improve features.
  • To prevent abuse and fraud (legitimate interest) — rate limiting, security monitoring.
  • To send service emails (contractual necessity) — billing receipts, password resets, important notices.
  • To send marketing emails (consent) — only if you opt in. You can unsubscribe at any time.
  • To comply with the law (legal obligation) — tax, accounting, responding to lawful requests.

4. Who we share data with

We share data with the following processors who help us run the Service. They act on our instructions and are bound by data-processing agreements:

  • Supabase (database & authentication, EU/US)
  • Stripe (payments, US/UK)
  • Vercel (hosting, US/EU)
  • fal.ai, Anthropic, Google AI, ElevenLabs, Shotstack (AI generation, US)
  • Resend (transactional email, EU)
  • YouTube, TikTok, Meta (only if you connect a social account)

Some of these providers are based in the United States. We rely on the UK International Data Transfer Agreement, Standard Contractual Clauses, and adequacy decisions where applicable to protect your data when it is transferred outside the UK.

5. How long we keep your data

  • Account data: while your account is active and for 30 days after closure.
  • Generated videos & assets: while your account is active. You can delete them at any time.
  • Billing records: 7 years (UK tax retention requirement).
  • Usage logs: 90 days.

6. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Erase your data (the "right to be forgotten").
  • Restrict or object to processing.
  • Data portability — receive your data in a machine-readable format.
  • Withdraw consent for marketing at any time.
  • Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, email hadiahmedirfan@gmail.com. We will respond within 30 days.

7. Security

We use industry-standard measures to protect your data: TLS encryption in transit, encryption at rest, Supabase row-level security, hashed passwords, and access controls. No system is 100% secure, and we cannot guarantee absolute security.

8. Cookies

See our Cookie Policy for details on the cookies we use.

9. Children

The Service is not intended for users under 18. We do not knowingly collect data from children.

10. Connected social accounts

Direct publishing is optional. If you choose to connect a YouTube, TikTok, or Facebook (Meta) account, you authorise us via that platform's official OAuth flow and we store only what is needed to publish on your behalf:

  • YouTube / Google:your channel ID, channel name and thumbnail, and OAuth access & refresh tokens. We use the youtube.upload and youtube.readonly scopes to upload videos you explicitly choose to publish and to display your channel name in the app. We do not read your watch history, subscriptions, or private videos.
  • TikTok: your open_id, display name, avatar, and OAuth tokens. We use thevideo.upload and video.publish scopes solely to post videos you choose to publish.
  • Facebook (Meta):the list of Pages you manage, the selected Page's ID and name, and a Page access token. We use pages_manage_posts and related scopes only to post videos to the Page you select.

Connected-account tokens are stored encrypted and used only to perform actions you initiate. We never post without your explicit action, and we do not sell or share this data with third parties for advertising.

11. Google API Services & Limited Use

Moneytized.ai's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Our use of YouTube API Services is also subject to the YouTube Terms of Service and the Google Privacy Policy. We do not transfer Google user data to others except as necessary to provide or improve the publishing feature, to comply with applicable law, or as part of a merger or acquisition; we do not use this data for advertising, and we do not allow humans to read it unless you give consent, it is necessary for security, or it is required by law.

12. Revoking access & deleting connected-account data

You can disconnect a social account at any time, which deletes the stored tokens and profile data for that platform:

  • In-app: Settings → Connected Accounts → Disconnect.
  • YouTube / Google: also revocable at myaccount.google.com/permissions.
  • TikTok: also revocable in TikTok app settings under Manage app permissions.
  • Facebook / Meta: also revocable at Business Integrations. Meta users may also submit a data deletion request, which we honour automatically via our deletion callback; see Data Deletion.

13. Changes to this policy

We may update this policy from time to time. Material changes will be notified by email or in-app notice at least 14 days before they take effect.

14. Contact

Questions? Email hadiahmedirfan@gmail.com.