Workspace data should stay understandable

Marlonica is a production workspace for YouTube music channels: it builds a catalog with an Artistic Director, produces on-demand session videos, and runs an always-on live broadcast. This page explains what data Marlonica handles, why, and the choices you have.

This service is operated by Marlonica (“Marlonica”, “we”), the controller of the data described here. For any privacy question or data-protection request — including the rights described below — reach our data-protection contact at [email protected].

We collect only what we need to run your workspace:

• Account. Your email, an optional display name, and your password — stored as a salted hash, never in plain text.
• Workspace and creative content. Channel worlds, creative briefs, prompts, catalog metadata, session and broadcast settings, and the media you generate (music, cover art, visual loops, videos, and export bundles).
• YouTube connection. When you connect a channel: its YouTube channel ID, title, and thumbnail; the OAuth tokens that authorize publishing (stored encrypted); and the broadcast and stream identifiers we create on your behalf.
• Waitlist. If you join the waitlist before we open access, we keep the email you give us and an optional name, so we can invite you. We rely on your consent and keep it until we invite you or you ask us to remove you — email us to be taken off the list.
• Diagnostic data. When you use the contact form or join the waitlist we record a coarsened IP address (the final segment is removed) and your browser’s user-agent to detect abuse. Operational logs capture the identifiers needed to run the service and are written to avoid storing personal data such as email addresses in plain text.
• Cookies. One essential cookie keeps you signed in — see Cookies and analytics below.
• Analytics. If you allow analytics, we collect page paths, referring sites, campaign parameters, approximate region, browser and device category, page-leave and scroll measurements, Core Web Vitals, masked click targets, and named product milestones. Signed-in events use internal user and workspace identifiers, never your email address.

Add only the personal data a channel actually needs — please avoid putting private information into prompts, briefs, metadata, or uploaded materials.

• To provide the service (to perform our contract with you). Authenticate you, scope your workspace, run the Artistic Director, produce sessions and broadcasts, and publish to YouTube when you connect a channel.
• To keep it secure (our legitimate interests). Prevent abuse, debug failures, and protect accounts.
• To communicate (contract and legitimate interests). Account, support, and product messages, plus verification and transactional email.
• To meet legal obligations where they apply.

Where we rely on consent for anything optional, you can withdraw it at any time.

When you connect a YouTube channel, Marlonica requests Google permissions to upload videos to your channel, read your channel’s basic details, and manage live streaming on it. We use these only to create private video drafts, run your always-on live broadcast, and read the channel information needed to publish. We do not request or read your audience analytics, and we access no Google service other than YouTube.

We store your channel ID, title, and thumbnail along with encrypted access and refresh tokens so you don’t have to reconnect for every action.

Marlonica’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect a channel inside Marlonica at any time, which revokes our tokens, and you can review or remove Marlonica’s access from your Google Account permissions. Your use of YouTube is also governed by the YouTube Terms of Service and the Google Privacy Policy.

When you generate assets, Marlonica sends the creative prompt and channel context — and, for some providers, optional reference images — to the third-party AI provider that produces that asset. We send only what’s needed to generate the asset, never your email, password, or account identity.

Each provider processes these inputs under its own terms, and we don’t control whether a provider uses inputs to improve its own models — so avoid putting sensitive personal data in prompts. We do not sell your prompts or generated content. See our Responsible AI page for provenance details.

To deliver the product we share data with these processors, as the features you use require:

• Managed database — account, workspace, and catalog data.
• Object storage — generated media and export files.
• Email delivery — transactional, verification, and contact-form email.
• Error and performance monitoring — diagnostics to keep the service reliable.
• Content delivery and analytics — serving the site and, with your browser choice, measuring visits, performance, navigation, and product activation in PostHog Cloud EU.
• YouTube — when you connect a channel and publish.
• AI generation providers — when you generate assets.

Marlonica uses an essential cookie to keep you signed in, set by our authentication layer and cached for up to five minutes for performance. If you allow analytics, PostHog stores a first-party browser identifier in local storage and a first-party cookie so visits and sessions can be measured across page loads. Declining leaves browser analytics disabled.

Allowed analytics includes page views, page leaves, scroll depth, campaign attribution, masked click targets, Core Web Vitals, and named activation milestones. Query strings and URL fragments are removed before transmission. Form values, page text, email addresses, prompts, provider payloads, access tokens, uploaded media URLs, session replay, and console capture are not collected. PostHog processing is hosted in the EU and IP addresses are anonymized. We use no advertising cookies or cross-site tracking pixels.

You can allow or withdraw optional analytics at any time below.

We keep account and workspace data for as long as your account is active. Final render outputs (full videos and export bundles) expire automatically about seven days after they’re produced; source assets such as covers, loops, and catalog audio persist until you delete them or close your account. YouTube tokens are kept until you disconnect the channel or delete your account. Coarsened diagnostic data is kept only as long as needed to investigate abuse.

Depending on where you live, you can access, correct, delete, export, restrict, or object to the processing of your data, and withdraw consent. You can delete your account yourself from your settings — it’s password-confirmed and permanently purges your workspace and all stored media. For any other request, email [email protected]. If you’re in the EEA or UK, you also have the right to lodge a complaint with your local data-protection authority.

Some of our sub-processors — including Google and our AI providers — are located outside the EEA and the UK. Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Marlonica is a tool for channel operators and is not directed to children. You must be at least 18, or the age of majority where you live, to use it.

We describe how we protect your data on the Security page. No system is perfectly secure, but we take reasonable measures to safeguard it. We’ll update this page when our practices change and revise the date above; we’ll flag significant changes in-product or by email. Questions or requests: [email protected].