Privacy Policy

Last updated: September 23, 2026

This Privacy Policy explains how Plys (“Plys”, “we”, “us”, or “our”) collects, uses, shares, and protects information when you use our websites at plys.ai and related domains, our applications, and our video production services (together, the “Service”). Plys is an AI video studio: it writes, generates, voices, packages, and publishes video episodes for the channels you connect.

Plys is currently offered as a closed beta. If you have questions about this policy or your data, contact us at hi@plys.ai.

1. Information we collect

Information you provide

  • Account information. We use Google Sign-In for authentication. When you sign in, we receive your name, email address, and profile picture from your Google account. We do not receive or store your Google password.
  • Waitlist information. If you join our waitlist, we collect your email address and, optionally, your company name.
  • Channel and production inputs. Briefs, scripts you paste, character and world descriptions, brand reference images, publishing schedules, and channel settings you or your account manager enter.
  • Client records (managed service).Where Plys operates as a managed (concierge) service, authorized operators may record a client contact name, email, company, and service notes in order to run the client’s channel.
  • Communications. Emails and messages you send us.

Information collected automatically

  • Usage and log data. Standard server logs (IP address, browser type, pages requested, timestamps) and event records generated as the production pipeline runs (job status, errors, spend accounting).
  • Cookies. We use strictly necessary cookies only: a session cookie to keep you signed in, and two short-lived (15-minute), single-use cookies used solely to secure the YouTube connection flow (an anti-forgery value and a return-page hint). We do not use advertising or cross-site tracking cookies.

Content generated by the Service

The Service produces scripts, images, animations, voiceovers, thumbnails, titles, and related assets for your channels. We store this content so we can deliver it to you, publish it on your instruction, and improve the specific channel’s future episodes (for example, by measuring which thumbnails performed best on that channel).

2. Google user data and YouTube API Services

Plys uses YouTube API Services. By connecting a YouTube channel to Plys, you are also agreeing to be bound by the YouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy.

When you connect a YouTube channel, we request the following permissions:

  • Upload videos (youtube.upload) — used exclusively to upload and schedule the episodes you commission to your own channel.
  • View your YouTube account (youtube.readonly) — used to identify which YouTube channel you connected, display its name in the product, and prevent your channel from being accidentally re-bound to a different Google account.
  • View YouTube Analytics(yt-analytics.readonly) — used to read performance metrics (views, watch time, traffic sources, audience statistics) for videos we published, so we can report performance to you and improve your channel’s future episodes.

How we handle this data:

  • OAuth refresh tokens are encrypted at rest and used only to perform the actions above on your behalf. Access tokens are short-lived.
  • We store the connected channel’s ID and title, and analytics metrics for videos we published, associated with your Plys channel.
  • We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except with your consent, for security or abuse investigation, to comply with law, or where it has been aggregated and de-identified.
  • You can disconnect YouTube at any time from your channel’s Settings page in Plys, which immediately deletes the stored tokens, or revoke Plys’s access from your Google security settings. Analytics metrics already captured remain associated with your Plys channel until the channel is deleted.
  • Stored YouTube API data is refreshed or deleted in line with these uses; we do not retain it beyond the life of the associated Plys channel.

Plys’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How we use information

  • Provide, operate, and secure the Service;
  • Produce, package, schedule, and publish the video content you commission;
  • Report channel performance to you and tune your channel’s future episodes against its own history;
  • Communicate with you about the Service, including waitlist invitations;
  • Account for production costs and enforce usage policies;
  • Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use your personal information or your Google user data to train generalized AI models.

4. How we share information

We share information only with service providers that process it on our behalf, under contractual confidentiality obligations:

  • Hosting and infrastructure — our application runs on Vercel, and our database is hosted by Neon (PostgreSQL), both in the United States;
  • AI generation providers — the prompts and reference assets needed to generate a specific scene, voiceover, or animation are sent to the third-party AI model providers that perform image, voice, and video generation. Your Google account data and YouTube tokens are never shared with these providers;
  • Google / YouTube — to publish and measure your videos, as described in Section 2;
  • Email delivery — transactional email providers, to send waitlist confirmations and Service notices.

We may also disclose information if required by law, to protect the rights, safety, or property of Plys or others, or in connection with a merger, acquisition, or sale of assets (in which case this policy will continue to apply to previously collected data until updated).

5. Data retention and deletion

  • Account data is retained while your account is active. To delete your account and associated personal data, email hi@plys.ai — we will complete deletion within 30 days, except records we must keep for legal or accounting purposes.
  • Deleting a channel in the product removes its client records and archives its production history; disconnecting YouTube immediately deletes stored OAuth tokens.
  • Waitlist entries are deleted on request.
  • Server logs are retained for a limited period for security and debugging.

6. Security

All traffic to the Service is encrypted in transit (TLS). OAuth refresh tokens are encrypted at rest with keys held separately from the database. Access to production systems is limited to authorized operators. The YouTube connection flow uses signed, expiring, browser-bound authorization state to prevent forgery. No method of transmission or storage is 100% secure; if we learn of a breach affecting your personal data, we will notify you as required by law.

7. Your rights

Depending on where you live (including under the GDPR, UK GDPR, or the California Consumer Privacy Act), you may have rights to access, correct, delete, export, or restrict the processing of your personal information, and the right not to be discriminated against for exercising them. We honor these requests for all users regardless of location: contact hi@plys.ai and we will respond within the legally required period. Where our processing relies on consent (such as your YouTube connection), you may withdraw it at any time as described in Section 2. You may also lodge a complaint with your local data protection authority.

8. International transfers

The Service is operated from the United States and information is processed there. If you use the Service from outside the United States, you understand your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

9. Children

The Service is not directed to children under 13 (or the minimum age required by your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version at this URL with a revised “Last updated” date, and, for material changes, notify account holders by email or in the product before the changes take effect.

11. Contact

Plys · hi@plys.ai