Privacy Policy
1. Who we are
This website (YouTube Money Farsi, https://youtubemoneyfarsi.com) is operated by the team behind YouTube Money Farsi (“we”, “us”). We decide how and why your personal data is processed on this website. You can reach us through our contact form.
2. What this policy covers
This policy explains what personal data we collect when you use this website, our AI tools, our services (channel audit, consultation, coaching and thumbnail design) and our digital library, why we use it, who we share it with, how long we keep it and the choices and rights you have.
3. The information we collect
- Account: your name, email address and password. Passwords are stored only as a one-way hash; we cannot read them. Optional details you may add: phone number, city, country, how you heard about us, YouTube channel link, profile photo and a short bio. We also store your language choice, whether your email is verified, and your notification and marketing preferences.
- Orders and payments: what you ordered, prices, the country you choose at checkout, payment status and the reference numbers our payment providers give us. We never receive or store card numbers or wallet keys. USDT payments are made on the payment page of our BTCPay Server payment system, on the TRON (TRC-20) blockchain. For these we keep the currency, network, amount, receiving address and transaction reference (blockchain transactions are public by nature). If you pay with HesabPay, you upload an image of your payment receipt, which may contain financial details.
- Service information: your answers to the questions before a service (for example your channel, goals, competitors, availability and time zone), messages exchanged with our team about your order, files we deliver to you, consultation times, and coaching tasks and feedback.
- AI tools: the text and images you submit, the results produced, your usage counts, and your AI Coach conversations. When you analyse or connect a YouTube channel, we retrieve that channel’s public information (such as its name, subscriber, view and video counts and recent videos) through YouTube API Services. We do not ask for access to your Google account.
- Library: the books you buy and a record of downloads.
- Messages: what you send through the contact form, and your email address if you ask to be notified when a course launches.
- Security and abuse prevention: a session cookie; a short one-way hash derived from your IP address (we do not keep your raw IP address in our records); a random device identifier stored in a cookie, created only when you sign up, sign in or use a free AI tool; and security events such as rate limits and verification checks.
- Emails: a copy of the service emails we send you, kept as a delivery record.
Our hosting provider may also keep standard server logs (such as IP addresses and requested pages) for operating and securing its servers.
4. Why we use it (and our legal bases)
- To provide what you asked for — your account, orders, services, AI tools, library and customer support. Legal basis where required: performance of a contract.
- To keep the service secure and fair — preventing fraud, abuse of the free plan and automated attacks. Legal basis: our legitimate interests.
- To keep business, tax and payment records. Legal basis: legal obligation.
- To send you service messages about your orders, payments and account. Legal basis: performance of a contract.
- To send you news and offers — only if you opt in. You can withdraw at any time in your profile. Legal basis: consent.
5. Automated checks on the free plan
To prevent misuse of the free plan, an automated system considers several signals together (for example many accounts created on one device, or very rapid requests). It may ask you to complete a short automatic check, or pause free usage temporarily. It never blocks anyone permanently, it never affects paid subscriptions, and you can ask us to review a restriction through our contact form.
6. Who we share it with
We do not sell your personal data and we do not use advertising or analytics trackers. We share data only with the service providers we need to run this website:
- Namecheap — web hosting (stores the website and its database).
- Resend — delivery of the emails we send you.
- OpenAI — generates the results of our AI tools and AI Coach from what you submit.
- Google / YouTube — YouTube API Services provide public channel data; the YouTube player loads only when you press play on a guide video. See the YouTube Terms of Service and the Google Privacy Policy.
- BTCPay Server — the payment system we use for USDT on the TRON network (it may run with a hosting provider and a TRON network provider). Your payment is recorded on the public TRON blockchain. HesabPay — you pay HesabPay directly; we receive only the receipt you upload.
We may also disclose information when required by law, or to protect our rights and the safety of our users.
7. International transfers
Our service providers process data in the United States and other countries. If you are in the European Economic Area or the United Kingdom, your data will be transferred to countries whose laws may offer a different level of protection. Where the law requires it, we rely on appropriate safeguards offered by our providers, such as standard contractual clauses.
8. How long we keep it
- Account, AI history and conversations: until you delete them or your account.
- Orders, payments and receipts: as long as needed for accounting and tax purposes — generally up to seven years.
- Security and abuse signals: 90 days.
- Email verification links: deleted 30 days after use or expiry.
- Service emails and messages: as long as your account exists, unless the law requires longer.
9. Your rights
Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive a copy in a portable format, and withdraw consent at any time (this does not affect processing already done). If you are in the EEA or the UK you may also complain to your local data protection authority. To use any of these rights, contact us through our contact form. We may need to confirm your identity first. Some records — such as payment and tax records — may have to be kept even after a deletion request.
10. Children
This website is intended for people aged 16 or older. We do not knowingly collect personal data from anyone younger. If you believe a child has given us personal data, contact us and we will delete it.
11. Security
We protect passwords with one-way hashing, keep uploaded receipts and delivered files in protected storage available only to you and our authorized staff, store network information only as one-way hashes, and restrict access to the admin area. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
12. Cookies
We use only the cookies the website needs to work and to remember your language. See our Cookie Policy.
13. Changes to this policy
When we change this policy we publish a new version with a new date. Earlier versions are kept. If a change is significant, we will tell you on the website or by email before it takes effect.