Feedzy

Privacy Policy

Last Updated: May 27, 2026

Feedzy (“we,” “us,” or “our”) is operated by ThumbMastery LLC, a Delaware limited liability company. This Privacy Policy explains how we collect, use, and protect your information when you use Feedzy at feedzy.io and app.feedzy.io.

We don't sell your data. We don't share it with advertisers. We don't use it to train AI models. Your content is yours.

Information we collect

Account information

When you sign up, we collect your name, email address, and profile picture through Google sign-in. If you sign up with email, we collect your name, email, and a password (hashed using bcrypt, never stored in plain text).

YouTube channel data

When you connect your YouTube channel, we access it through Google's OAuth 2.0 authorization. Feedzy requests two YouTube permissions: “See, edit and delete your videos” (required for uploading and A/B thumbnail testing) and “View monetary and non-monetary YouTube Analytics reports” (required for displaying analytics in your workspace). This includes channel metadata, video data, thumbnails, analytics (views, watch time, subscribers), and revenue data (AdSense earnings, RPM, CPM).

We never delete, edit, or modify your YouTube content unless you explicitly initiate the action inside Feedzy. We never access your channel outside of actions you trigger.

Feedzy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Workspace content

This includes everything you and your team create inside Feedzy: video ideas, scripts, task assignments, comments, direct messages, chat messages, uploaded files (thumbnails, graphics, video files), and A/B test configurations.

Usage data

We collect information about how you interact with Feedzy to improve the product. This includes pages visited, features used, clicks, and session recordings (see the Analytics section below).

Payment information

We use Paddle as our payment processor. Paddle acts as our merchant of record and handles all payment processing on their own domain. We never see, store, or have access to your credit card number or payment details. We receive transaction confirmations, subscription status, and billing history from Paddle.

How we use your information

We use your information to:

  • Provide and operate Feedzy (your workspace, pipeline, A/B tests, analytics, chat, file storage)
  • Process payments and manage your subscription through Paddle
  • Send transactional emails (workspace invitations, notifications) through Resend
  • Improve the product by understanding how teams use Feedzy
  • Communicate important updates about your account or our service
  • Respond to support requests

We do not use your information to sell or share with third parties for advertising, to train AI or machine learning models, to target you with ads, or to profile you for purposes unrelated to providing Feedzy.

Analytics and session recording

We use PostHog (hosted in the EU) for product analytics, including session recording. Session recordings capture interactions like mouse movements, clicks, and page navigation to help us understand where the experience can improve.

Sensitive fields (passwords, personal identifiers) are automatically masked in all recordings. Payment data is never recorded because Paddle handles checkout on their own domain, completely separate from Feedzy.

We use Sentry for error tracking. Sentry captures technical error data (stack traces, browser information) but does not record personal content.

We use Vercel Web Analytics and Speed Insights on our landing page to understand traffic and page performance. This data is aggregated and does not identify individual visitors.

You can opt out of session recording by contacting us at support@feedzy.io.

Data storage and security

Your data is stored on the following infrastructure:

  • Application hosting: Laravel Cloud (backend) and Vercel (frontend), both using HTTPS encryption in transit
  • File storage: Laravel Cloud (included S3-compatible storage) with server-side encryption at rest
  • Database: Managed database through Laravel Cloud with automated backups

All data transmitted between your browser and Feedzy is encrypted using TLS/SSL. All stored data is encrypted at rest.

For more details on our security practices, see our Security Overview.

Third-party services

We share data with the following services only as needed to operate Feedzy:

  • Google (YouTube API) — channel connection, A/B testing, video uploads, analytics. Shared: YouTube channel data via OAuth.
  • Paddle — payment processing. Shared: transaction and subscription data.
  • Resend — transactional emails. Shared: email address, name.
  • PostHog — product analytics and session recording. Shared: usage data, session interactions.
  • Sentry — error tracking. Shared: technical error data.

We do not sell your personal data to any third party. We do not share your data with any party not listed above.

Data retention

  • Account information — until you delete your account.
  • Workspace content (scripts, ideas, tasks, comments) — until you delete the content or your workspace. For paused workspaces, preserved for up to 12 months.
  • Uploaded files (thumbnails, videos, graphics) — until you delete them; removed within 24 hours of deletion. For paused workspaces, preserved for up to 12 months.
  • YouTube channel data — stored while your channel is connected; deleted when you disconnect your channel or delete your workspace.
  • Payment records — as required by law (typically 7 years for tax purposes).
  • Analytics data (PostHog) — 12 months.
  • Error logs (Sentry) — 90 days.

When you delete your account, we delete your personal data and workspace content within 30 days. Some data may be retained longer where required by law (such as payment records for tax compliance).

Your rights

Depending on where you are located, you may have the following rights:

For all users: access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, export your data in a portable format, and opt out of session recording.

For EU/UK users (GDPR): we process your data under the legal basis of legitimate interest (providing and improving Feedzy) and contractual necessity (delivering the service you signed up for). You have the right to object to processing, request restriction of processing, and lodge a complaint with your local data protection authority.

For California users (CCPA): we do not sell your personal information. You have the right to know what data we collect, request deletion, and not be discriminated against for exercising your rights.

To exercise any of these rights, email us at support@feedzy.io. We will respond within 30 days.

Workspace isolation

Each Feedzy workspace is completely isolated. Team members in one workspace cannot access data from another workspace. Workspace owners control who has access through the roles and permissions system, and can remove members at any time.

Revenue data (earnings, RPM, CPM) is separated from general analytics within the permissions system. Workspace owners can restrict which team members see financial data.

Cookies

Feedzy uses essential cookies required for the service to function:

  • Authentication cookies: HTTP-only, SameSite cookies to keep you logged in securely.
  • CSRF tokens: to prevent cross-site request forgery attacks.

We do not use advertising cookies or third-party tracking cookies on the Feedzy application.

PostHog on the application and Vercel Analytics on the landing page may use first-party cookies for analytics purposes.

International data transfers

Feedzy is operated from the United States. If you are located outside the United States (including the EU/UK), your data may be transferred to and processed in the United States where our servers and service providers are located. By using Feedzy, you consent to this transfer. We take steps to ensure your data receives adequate protection in accordance with applicable data protection laws, including GDPR. Our analytics provider (PostHog) is hosted in the EU.

Children's privacy

Feedzy is not intended for anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected data from someone under 18, we will delete it promptly. If you believe a minor has provided us with personal data, contact us at support@feedzy.io.

Changes to this policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or through a notice inside Feedzy at least 30 days before the changes take effect. Your continued use of Feedzy after changes are posted constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or your data, contact us at:

feedzy.io, operated by ThumbMastery LLC
Email: support@feedzy.io