Legal

Privacy Policy

Effective date: April 26, 2026

This Privacy Policy describes how Unscripted ("we", "us", "our") collects, uses, and protects information when you use the website at unscripted.video and any associated services, applications, or content (collectively, the "Service").

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) (EU 2016/679) and other applicable data protection laws.

1. Data Controller

The data controller for the Service is:

Unscripted
Operated by Ya S.à r.l.-S
Luxembourg
Email: contact@unscripted.video

2. Information We Collect

2.1 Information collected automatically

When you visit the Service, we may automatically collect limited technical data including:

• IP address (anonymized where possible)
• Browser type and version
• Pages visited and time spent
• Referring website

We do not use tracking cookies for advertising. Any analytics we deploy are privacy-focused and, where applicable, do not require cookie consent (e.g., server-side analytics or cookie-free analytics services).

2.2 Information you provide

If you contact us (e.g., via email), we collect the information you voluntarily provide, such as your name and email address, solely to respond to your inquiry.

2.3 Information from third-party platforms

If you authenticate with a third-party service (such as TikTok or YouTube) through the Service, we may receive limited profile information as described below.

3. TikTok API Data

The Service integrates with the TikTok API for the purpose of publishing video content to TikTok. When you authorize the Service to connect with your TikTok account, we may access:

• Your TikTok display name, username, and profile picture
• Your TikTok open ID (a unique identifier for the authorization)
• Permission to publish videos to your TikTok account on your behalf

3.1 How we use TikTok data

We use TikTok data exclusively to:

• Authenticate your identity for the purpose of content publishing
• Publish video content to your TikTok account as authorized by you

We do not:

• Store your TikTok data beyond what is necessary for the publishing session
• Sell, rent, or share your TikTok data with any third parties
• Use your TikTok data for advertising, profiling, or any purpose other than content publishing
• Access your TikTok followers, likes, comments, or direct messages

3.2 TikTok data retention and deletion

TikTok authentication tokens are stored securely and only for as long as needed to perform authorized actions. You may revoke access at any time by disconnecting the Service from your TikTok account in your TikTok settings. Upon revocation, we will delete all stored TikTok data within 30 days.

3.3 TikTok's policies

Our use of TikTok data is subject to TikTok's Privacy Policy and TikTok's Terms of Service. We encourage you to review those documents.

4. YouTube API Services

The Service uses YouTube API Services to publish and manage video content. By using features that interact with YouTube, you agree to be bound by the YouTube Terms of Service and acknowledge Google's Privacy Policy.

YouTube API data is used exclusively for content publishing and channel management. We do not access or store YouTube user data beyond what is required for these functions. You may revoke our access to your YouTube data at any time via the Google security permissions page.

5. Legal Basis for Processing (GDPR)

We process personal data under the following legal bases:

6. Data Sharing

We do not sell your personal data. We may share data only in the following circumstances:

• Third-party platform APIs: When you authorize us to publish content to TikTok, YouTube, or similar platforms, data is transmitted to those platforms in accordance with their respective policies.
• Legal obligations: If required by law, regulation, or legal process.
• Service providers: We may use hosting providers (e.g., Netlify) that process data on our behalf under data processing agreements compliant with GDPR.

7. International Data Transfers

Your data may be transferred to servers outside the European Economic Area (EEA), including to the United States (e.g., when interacting with TikTok or YouTube APIs). Such transfers are made in compliance with GDPR, relying on adequacy decisions, Standard Contractual Clauses (SCCs), or other lawful transfer mechanisms.

8. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These include encrypted connections (TLS/HTTPS), secure token storage, and access controls.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Specifically:

• Website analytics data: Retained for a maximum of 12 months in anonymized form.
• Contact inquiries: Retained for up to 24 months after the last communication.
• API authentication tokens: Retained only for the duration of active use and deleted within 30 days of access revocation.

10. Your Rights Under GDPR

If you are in the European Economic Area, you have the following rights:

• Right of access (Art. 15 GDPR): You may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): You may request correction of inaccurate personal data.
• Right to erasure (Art. 17 GDPR): You may request deletion of your personal data.
• Right to restriction (Art. 18 GDPR): You may request that we restrict processing of your data.
• Right to data portability (Art. 20 GDPR): You may request your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You may object to processing based on legitimate interest.
• Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at contact@unscripted.video. We will respond within 30 days.

You also have the right to lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD), the Luxembourg data protection supervisory authority.

11. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If we learn that we have collected personal data from a child under 16, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Effective date" at the top of this page. We encourage you to review this page periodically.

13. Contact

For questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact:

Email: contact@unscripted.video