Privacy Policy

Mekax OS · Effective date: November 8, 2026 · Türkçe

Mekax OS ("the app") is an internal marketing production tool operated by Mekax Studio ("we", "us"). This policy explains what information the app uses, why, and the choices you have. It covers Mekax OS only; each of our games has its own privacy policy.

Summary

• Mekax OS uses YouTube API Services. By connecting a YouTube channel, you agree to this policy and to the YouTube Terms of Service.
• We are adding a connection to TikTok through TikTok Login Kit and the Content Posting API. The TikTok section explains what it will use once it is switched on.
• The app is available only to our team and is used only with our own channels and accounts. Nothing is published publicly without a team member's approval.
• We do not sell your data, use it for advertising or share it with data brokers.
• You can disconnect an account and revoke access at any time.

Information from Google and YouTube

When you connect a YouTube channel, the app receives and stores:

• Authorization tokens that let the app act for the channel within the permissions you gave. They are encrypted before being stored.
• Channel details: channel name, channel ID, channel handle and the ID of the channel's uploads list.
• Upload results: the ID of each video uploaded through the app, and its privacy and processing status, and whether a cover image was accepted.

To avoid duplicate uploads, the app may check the details of up to 50 of the channel's most recent uploads, including their tags, in order to find a video it uploaded. It uses these details for that comparison and does not store them.

The app can make public or delete only videos it uploaded, and only when a team member confirms it. It does not read or store comments, subscribers, watch history, analytics or your Google account password.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. See also the Google Privacy Policy.

Information from TikTok

The TikTok connection is being introduced. When it is switched on and a team member connects one of our TikTok accounts through TikTok Login Kit, the app will ask TikTok only for these permissions:

• user.info.basic: to show which account is connected. The app stores the account's open ID and display name. It does not store the profile picture.
• video.upload: to send a video to the account's TikTok inbox as a draft. A team member then finishes and posts it in the TikTok app.
• video.publish: once TikTok has approved the app for direct posting, to post a video directly, only after a team member has reviewed it and chosen its privacy and interaction settings.

For a connected TikTok account the app stores its authorization tokens (encrypted in the same way as for YouTube), the account's open ID and display name, and for each video it sends: the post or upload ID TikTok returns, its status and the caption sent with it. Before a direct post, the app asks TikTok for the account's current posting options (allowed privacy levels, whether comments, duets and stitches are allowed, and the maximum video length); it uses these to show the choices and does not keep them.

The app does not read or store TikTok followers, messages, comments, likes, analytics or your TikTok password, and it does not post anything a team member has not approved. Information from TikTok is used only for the features described here. See the TikTok Privacy Policy.

How we use it

We use this information only to show which channel or account is connected, upload the videos a team member approves, check their status, make a YouTube video public or delete it when a team member confirms it, and report errors. We do not use it for advertising, and we do not use it to train artificial intelligence models.

Information you enter and videos

The app sends the chosen video to the platform together with its title or caption, description, tags, category, cover image and declarations such as "made for kids", and it keeps a record of them. Titles and descriptions may be sent in several languages so that viewers see the one for their language. The videos show gameplay of our own games; they do not contain information about the people who connect accounts.

Approval notifications on Telegram

A team member can link a Telegram chat so that the app can ask for approval there. For this, the app stores the Telegram bot token (encrypted), the bot's username, the linked chat's ID and which team member linked it. When a video is ready, the app sends that chat a message with the video's titles, description, checks, channel or account name and a link to the private video; for TikTok, where there is no private link, it will send the video file itself so it can be reviewed. These messages are delivered and kept by Telegram under the Telegram Privacy Policy. Unlinking the chat in the app deletes the bot token and the chat link from the app's active database; messages already sent stay in the Telegram chat until you delete them there.

Team accounts and technical records

To let team members sign in, the app stores their email address and display name. It also keeps session records, a record of important actions such as connecting an account, uploading, approving, publishing or deleting a video, and technical logs used to fix problems.

Cookies and browser storage

The app uses cookies only to keep you signed in and to protect sign-in and account connection requests. Your browser also remembers small settings such as which product you last selected. The app shows no ads and uses no third-party advertising or analytics cookies.

Sharing

We share information with Google and YouTube, TikTok and Telegram only as needed to provide the features above, for example when uploading a video or sending an approval message. We do not transfer it to anyone else unless required by law, needed for security, or as part of a merger, acquisition or sale of assets, and then only with your prior explicit consent where the Google API Services User Data Policy requires it.

Where it is stored and how it is protected

Data is stored on a computer operated by Mekax Studio, including in its backups. Authorization tokens, the Telegram bot token and upload session addresses are encrypted with AES-256-GCM, and they do not appear in the app's screens or logs. The app connects to Google, TikTok and Telegram over HTTPS. Each platform stores videos and account data on its own servers. No system is perfectly secure, but we limit access to our team.

How long we keep it

• Authorization tokens: until you disconnect the channel or account, when they are deleted immediately from the app's active database. Copies in older encrypted backups remain until those backups are deleted.
• Channel and account details, and upload records: kept as a record of past actions until you ask us to delete them. We will delete them as soon as possible and within 7 calendar days of your request.
• Telegram link: until you unlink the chat in the app.
• Team account records and logs: kept while they are needed to operate and secure the app, or until you ask us to delete them where the law allows.

Videos already uploaded stay on YouTube or TikTok until you delete them there. See Data Deletion.

Revoking access

You can disconnect a YouTube channel on the app's Social Media Accounts screen, which also asks Google to revoke the app's access. You can also revoke it at any time in your Google security settings. Once the TikTok connection is available, disconnecting a TikTok account in the same screen will delete its tokens and ask TikTok to revoke the app's access; you can also remove the app at any time in the TikTok app under Settings and privacy › Security › Manage app permissions.

Your rights

Depending on where you live (for example under the EU/UK GDPR or Turkey's KVKK), you may have the right to access, correct or delete data about you, to object to its processing, and to complain to your data protection authority. For any request, question or complaint, email us at the address below.

Children

Mekax OS is a tool for our team and is not directed at children.

Changes

We may update this policy. The effective date above shows the latest version.

Contact

Mekax Studio
Email: mekaxstudio@gmail.com