This is a convenience translation. The German version is legally binding.

Privacy Policy

Last updated: March 2026

1. Data Controller

Junus Ergin
Ottobrunner Str. 102
81737 Munich, Germany
Email: datenschutz@moderatezy.com

2. Overview of Data Processing

We process personal data only to the extent necessary for providing our service. Below we inform you about the nature, scope, and purpose of the collection and use of your data.

3. Legal Bases

We process your data on the following legal bases:

• Performance of contract (Art. 6(1)(b) GDPR): To provide our platform and fulfil the terms of use.
• Legitimate interests (Art. 6(1)(f) GDPR): To improve our service, ensure security, and prevent fraud.
• Consent (Art. 6(1)(a) GDPR): For optional analytics and marketing, where you have given consent.

4. Data Collected

4.1 Registration and Account Data

During registration we collect: email address, name (optional), chosen plan, payment data (processed by Stripe). This data is required for the performance of the contract.

4.2 Social Media Data

When you connect social media accounts, we receive access via the respective APIs to: public comments on your content, commenter usernames, and basic account information. We store OAuth tokens encrypted (AES-256) and only access data necessary for moderation.

4.2.1 YouTube API & Google User Data

Our use of the YouTube API complies with the Google API Services User Data Policy, including the Limited Use requirements. Additionally, the Google Privacy Policy applies.

OAuth Scopes Used:

• youtube.force-ssl — Read and manage YouTube comments on your channel (retrieve, reply, moderate: publish, hide, delete)
• userinfo.profile — Access your name and profile picture to identify your account within the app

YouTube Data Retrieved:

• Channel ID and uploads playlist ID (cached to reduce API calls)
• List of your recent video uploads (titles, thumbnails)
• Public comments on your videos: comment text, author name, author profile image URL, author channel URL, publication timestamp

Use of Data: Retrieved YouTube data is used exclusively to display and moderate comments in your moderatezy dashboard. Comment texts are transmitted to Anthropic for AI analysis (see Section 4.4). We do not sell, share, or transfer your YouTube data to third parties except as described in this privacy policy.

Storage: OAuth tokens (access token and refresh token) are stored encrypted with AES-256 on our servers in Germany. Comment data is stored in our database and deleted within 30 days after account deletion.

Revoking Access: You can revoke moderatezy’s access to your YouTube data at any time:

• Via the settings in the moderatezy app (disconnect account)
• Via Google Account Security under “Third-party access”

After revocation, we will delete all stored YouTube data and OAuth tokens within 30 days.

4.3 Usage Data

When you use our platform, we log: IP address, browser type, operating system, access time, and pages visited. This data serves security and service improvement purposes.

4.4 AI Analysis

Comments are transmitted to the Anthropic API (Claude) for analysis. Anthropic processes the data solely for providing the analysis service and does not retain customer data. For details, see the Anthropic Privacy Policy.

5. Cookies

5.1 Essential Cookies

We use technically essential cookies for: session management, language preferences, cookie consent preferences. These cookies are required for the operation of the website and cannot be disabled.

5.2 Analytics Cookies

With your consent, we use analytics cookies to understand and improve the use of our website. You may withdraw your consent at any time via the cookie settings.

For more information about the cookies we use, see our Cookie Policy.

5.3 Web Analytics via Burst Statistics

This website uses the “Burst Statistics” plugin for statistical analysis of visitor traffic. Burst Statistics stores all data exclusively on our own web server — no data is transmitted to third parties. No cookies are set. The following data is collected: pages accessed, time of access, referrer URL (the previously visited page), browser and operating system used, screen resolution, and an anonymized IP address. It is not possible to associate this data with a specific person. The collection is based on our legitimate interest in the statistical analysis of user behavior pursuant to Art. 6(1)(f) GDPR. The data is not merged with other data sources. Responsible: Junus Ergin, moderatezy@gmail.com.

6. Third Parties and Data Processors

• Hetzner Online GmbH (Hosting, Germany): Server location in Germany, data processing agreement in place.
• Stripe Inc. (Payment processing): Processing of payment data in accordance with PCI-DSS standards. Stripe Privacy Policy
• Anthropic PBC (AI analysis): Processing of comment text for classification. No permanent storage of customer data.
• Cloudflare Inc. (CDN and security): Processing of connection data for delivery and security of the website.
• Google LLC / YouTube: API access to YouTube comments in accordance with the YouTube Terms of Service. Our use is subject to the Google API Services User Data Policy. Google Privacy Policy
• Other social media platforms (Meta/Instagram, LinkedIn, TikTok): API access to public comments in accordance with their respective terms of service.
• Sentry (Functional Software, Inc., USA): We use Sentry for error detection and performance monitoring. Technical error data (stack traces, browser information) is processed. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in service stability). Sentry Privacy Policy
• Meta Platforms, Inc.: We use the Meta Pixel to measure the effectiveness of our advertisements. It is only loaded with your explicit consent (Art. 6(1)(a) GDPR). Meta Privacy Policy
• TikTok Inc.: We use the TikTok Pixel to measure the effectiveness of our advertisements. It is only loaded with your explicit consent (Art. 6(1)(a) GDPR). TikTok Privacy Policy

7. Data Security

We employ the following technical and organisational measures:

• Encryption of all data at rest with AES-256
• Encryption of all data in transit with TLS 1.3
• Regular security updates and backups
• Access restrictions and audit logging
• Server location exclusively in Germany (EU)

8. Data Retention Periods

We store personal data only for as long as necessary for its respective purpose:

• Account data: For the duration of the contractual relationship, then in accordance with tax and commercial law retention obligations (up to 10 years).
• Comment data: Deleted within 30 days after account deletion.
• Usage data/logs: Maximum 90 days.

9. Your Rights

Under the GDPR you have the following rights:

• Access (Art. 15 GDPR): You may request information about your stored data.
• Rectification (Art. 16 GDPR): You may have incorrect data corrected.
• Erasure (Art. 17 GDPR): You may request the deletion of your data.
• Restriction (Art. 18 GDPR): You may request the restriction of processing.
• Data portability (Art. 20 GDPR): You may receive your data in a machine-readable format.
• Objection (Art. 21 GDPR): You may object to the processing of your data.
• Withdrawal of consent: You may withdraw any given consent at any time.

To exercise your rights, please contact: datenschutz@moderatezy.com

10. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach, Germany

11. Changes

We reserve the right to amend this privacy policy as needed to reflect changes in the legal framework or modifications to our service. The current version is always available on this page.