Privacy Policy

Effective Date: October 17, 2026

This Privacy Policy describes how ArtWorld ARTUR KURYLA (“we”, “us”, or “our”) collects, uses, and protects your personal information when you use the Hypertube.io website and services (the “Service”). By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Data Controller

The data controller responsible for the processing of your personal information is:

• ArtWorld ARTUR KURYLA
• REGON: 522395721
• Registered Address: ul. Franciszka Klimczaka 5 lok. 59, 02-797 Warszawa, Poland
• Contact Email: [email protected]

If you have any questions regarding the processing of your personal information, you may contact us at [email protected].

2. Legal Basis for Processing

We process your personal information on the following legal bases:

• Performance of a contract: Processing is necessary to provide you with our marketplace services and fulfill our contractual obligations.
• Legitimate interests: We process data to operate, improve, and secure our Service, provided that such interests do not override your fundamental rights and freedoms.
• Legal obligations: Processing is necessary to comply with applicable laws and regulations.
• Consent: Where required by law, we obtain your explicit consent for certain processing activities, such as the use of cookies and analytics tools.

3. Information We Collect

3.1 Information You Provide

When you register for an account or use our marketplace services, we collect:

• First Name
• Last Name
• Email Address
• Identity verification data, collected through Didit and our payment provider
• Payment and balance data
• For Sellers, the data required under DAC7 (address, date of birth, tax identification number and payment account details)
• Messages in the deal chat and the content of Listings

3.2 Automatically Collected Information

We automatically collect certain information when you visit our Service, including:

• Log Data: Your browser sends log data whenever you visit our Service. This may include your computer's Internet Protocol (“IP”) address, browser type and version, pages visited, time and date of visit, time spent on pages, and other diagnostic data.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to monitor activity on our Service and store certain information. See the “Cookies” section below for more details.

4. How We Use Your Information

• To provide, operate, and maintain our marketplace Service
• To process transactions and manage your account
• To communicate with you, including responding to inquiries and providing customer support
• To improve and optimize our Service through analytics and user behavior analysis
• To ensure the security and integrity of our Service
• To comply with legal obligations and enforce our Terms of Service
• To send you updates, marketing communications, and other information that may be of interest to you (with your consent where required)

5. Cookies

Cookies are small files stored on your device that contain data about your browsing activity. We use two types of cookies:

5.1 Essential Cookies

These cookies are necessary for the Service to function and cannot be disabled. They include authentication session cookies and your cookie consent preference.

5.2 Analytics Cookies

We use Google Analytics (via Google Tag Manager) to understand how visitors interact with our Service. These cookies are only set if you explicitly accept them through the cookie consent banner shown on your first visit. If you reject analytics cookies, no tracking scripts are loaded.

5.3 Managing Your Preferences

You can change your cookie preference at any time by clicking the “Cookie Settings” link in the footer of any page. Your consent choice is stored for one year, after which you will be asked again.

6. Analytics

We use Google Analytics to monitor and analyze the use of our Service. Google Analytics is a web analytics service that tracks and reports website traffic. Google uses the collected data to track and monitor the use of our Service and may share this data with other Google services. Analytics cookies are only activated when you give your explicit consent through the cookie banner.

7. Data Storage and International Transfers

Your personal information is stored on servers located in the European Union (EU). We take appropriate measures to ensure that your data is processed securely and in accordance with this Privacy Policy.

If we transfer your personal information outside the EU, we will ensure that appropriate safeguards are in place in accordance with applicable data protection laws, such as Standard Contractual Clauses approved by the European Commission.

8. Service Providers

We may employ third-party companies and individuals to facilitate our Service, provide the Service on our behalf, perform Service-related services, or assist us in analyzing how our Service is used. These third parties have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

These recipients include:

• Didit, for identity verification (KYC);
• our payment provider, for payments, balances and withdrawals;
• our hosting providers, which store data in the European Union;
• Google, for sign-in, analytics and the YouTube API Services;
• the Polish tax authority (Krajowa Administracja Skarbowa, KAS), for Seller reporting under DAC7.

9. Google and YouTube User Data

Hypertube uses YouTube API Services. Google's processing of your data is governed by the Google Privacy Policy: https://www.google.com/policies/privacy. By connecting a channel, you also agree to the YouTube Terms of Service: https://www.youtube.com/t/terms.

9.1 When we access it

When you buy a channel, you connect the purchased channel by signing in with Google and granting Hypertube read-only access to your Google account (scopes openid, email and youtube.readonly). We use this access when you connect the channel, again when you confirm that you have accepted the Brand Account invitation, and, for 14 days after the deal is Completed, to check that you still have access to the channel.

9.2 What we access

• From your Google account: your Google account ID, email address and whether that email address is verified.
• From YouTube: the ID and basic channel details (name, handle, description and profile picture) of the channel or channels on the Google account you choose.

We cannot upload, edit or delete anything on YouTube, and we never see your Google password.

9.3 How we use it

We use Google and YouTube data only to:

• confirm that the channel on the connected account is the channel in your deal;
• record this confirmation in the deal history as evidence that the channel was delivered, including in disputes and chargebacks;
• for 14 days after Completion, confirm that you still have access to the channel, so we can detect attempts by the Seller to reclaim it.

We do not use Google or YouTube data for advertising, profiling, selling, or training AI models.

9.4 Who can see it

You can see it. The Seller in your deal sees only whether the check was successful. Hypertube Agents may see the check result when they handle your deal, a dispute or a reclaim report; you agree to this when you connect the channel. If the deal is disputed, including through a chargeback, we may tell our payment provider, to prevent fraud, that the check succeeded and when. We may also access the data where necessary for security (investigating fraud or abuse) or to comply with the law. Our hosting providers store the data on our behalf in the European Union. We do not sell or transfer Google or YouTube data to anyone else.

9.5 Storage and deletion

• Access tokens are stored encrypted. They are never written to the deal history or to logs, and we revoke and delete them when the 14-day period after Completion ends or the deal is cancelled.
• We regularly check that our access is still valid and delete tokens that can no longer be refreshed.
• Channel details and your Google email address are deleted no later than 30 days after we obtain them.
• The deal record shows only that the check succeeded and when. It identifies the channel by the ID shown in the Listing, not by data received from Google.
• If you disconnect Google in your account, revoke access in your Google settings, ask us to delete your data, or delete your account, we revoke your tokens and delete all data we received from Google within 7 days. Deleting data at Hypertube does not delete anything on YouTube.

9.6 Revoking access

You can revoke Hypertube's access at any time with the “Disconnect Google” button on the deal page, which revokes our access immediately, or in your Google security settings: https://security.google.com/settings/security/permissions. What happens to your deal when access is revoked is described in Section 6.7 of our Terms of Service.

9.7 Limited Use

Hypertube's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9.8 Public channel data

Separately from the access described above, we read publicly available channel data through the YouTube Data API, without using anyone's Google access: channel statistics shown on Listings, and, for each deal, a record of the channel's public state (name, handle, description, profile picture, banner and list of public videos) used to detect changes during the Inspection Period (Section 6.4 of our Terms of Service). Listing statistics are refreshed at least every 30 days. Records of a channel's public state are deleted no later than 30 days after we create them.

Questions or complaints about how we handle Google and YouTube data: [email protected].

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account information: Retained for the duration of your account and for a reasonable period thereafter to comply with legal obligations.
• Transaction records: Retained for up to 7 years for accounting and legal compliance purposes.
• Log data and analytics: Typically retained for up to 26 months, in accordance with analytics provider policies.

11. Your Data Protection Rights

Under applicable data protection laws, including the General Data Protection Regulation (GDPR), you have the following rights:

• Right of Access: You have the right to request a copy of the personal information we hold about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal information.
• Right to Erasure: You have the right to request deletion of your personal information in certain circumstances.
• Right to Restriction of Processing: You have the right to request that we restrict processing of your personal information in certain situations.
• Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country of residence.

To exercise any of these rights, please contact us at [email protected].

12. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

13. Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach.

14. Links to Other Websites

Our Service may contain links to third-party websites or services that are not owned or controlled by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services.

15. Age Restrictions

Our Service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under the age of 18.

16. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the “Effective Date” at the top.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

• Email: [email protected]
• Company Name: ArtWorld ARTUR KURYLA
• REGON: 522395721

Last Updated: October 17, 2026