Made in Graphic Ltd — Privacy Policy

Privacy Policy

Last updated: April 2026  ·  Made in Graphic Ltd  ·  Company No: 13094248 (England & Wales)

This Privacy Policy describes how Made in Graphic Ltd collects, uses, and protects your personal data across all our products, including AmbientAI (YouTube automation) and SmartReply (AI WhatsApp customer support).

1. Data We Collect

• Account data: name, email address, password (hashed)
• Billing data: subscription status, payment history (processed by Stripe — we do not store card details)
• Usage data: prompts submitted, videos created, jobs processed, credits used
• Integration data: YouTube OAuth tokens (AmbientAI), WhatsApp Business connection details (SmartReply)
• Technical data: IP address, browser type, session cookies

2. How We Use Your Data

To provide and improve our services, manage your account, process payments, send service notifications, and respond to support requests. We never sell your data to third parties.

3. Google OAuth & YouTube (AmbientAI)

AmbientAI uses Google OAuth 2.0 to connect your YouTube channel. We request only the scopes necessary to upload approved videos on your behalf. Your Google account credentials and YouTube data are used solely to deliver the AmbientAI service. We do not use your YouTube data for advertising or to train AI models. OAuth tokens are encrypted at rest and never shared with third parties.

AmbientAI’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. WhatsApp & Business Data (SmartReply)

SmartReply connects to your WhatsApp Business account to receive and respond to customer messages. Conversation data is processed to generate AI responses and is not used for any purpose beyond delivering the SmartReply service. Customer conversation data is not shared with third parties.

5. Third-Party Processors

• Stripe — payment processing
• OpenAI — AI text and image generation
• Google / YouTube API — video upload (AmbientAI)
• ElevenLabs — text-to-speech (AmbientAI voiceover)
• Hostinger — transactional email

Each processor operates under their own data processing agreements and applicable data protection law.

6. Data Retention

Account data is retained while your account is active. Upon account deletion, personal data is removed within 30 days. Billing records may be retained for up to 7 years for legal compliance.

7. Your Rights (GDPR / KVKK)

You have the right to access, correct, or delete your personal data, restrict or object to processing, and request data portability. To exercise your rights, contact us at info@madeingraphic.co.uk.

8. Cookies

We use essential session cookies to keep you logged in. We use localStorage to remember your language preference. We do not use advertising cookies, tracking pixels, or analytics cookies.

9. Security

All data is transmitted over HTTPS. Passwords are hashed. OAuth tokens are encrypted at rest. We follow industry-standard security practices to protect your data.

10. Contact

Made in Graphic Ltd · Company No: 13094248 · info@madeingraphic.co.uk · join.madeingraphic.co.uk