Inayan Heavy Industries, doing business as Inayan Training Organization ("ITO", "we", "us"), operates https://www.inayan-eskrima.com and related online training, seminar booking, and community tools (the "Services").
01Scope
This policy covers the website, member accounts, payments, training email/SMS, and TikTok, Instagram, Facebook, YouTube, or similar apps used on our own channels.
It also covers InayanEskrima, the ITO publishing app our team uses to post ITO's own videos to our TikTok account and YouTube channel.
02Information we collect
- Account/contact: name, email, phone, billing address, membership tier.
- Payment data processed by GHL Payments or Stripe; we do not store full card numbers.
- Usage: pages, device/browser, IP, approximate location, cookies.
- Support: forms, emails, community posts, uploads.
- Connected social tools: platform tokens/profile identifiers for approved uploads or scheduling; we do not sell that access.
03TikTok and other platform data
When you or we connect a TikTok account to our app, we receive only the data TikTok provides for the permissions granted:
- Basic profile information (such as display name, avatar, and an account identifier) so we can show which account is connected.
- Permission to upload and publish videos to that account, used only to post content a person on our team has reviewed and approved.
We use this data only to publish and manage content on the connected account. We do not sell it, share it with third parties for their own purposes, or use it for advertising or profiling.
04Google and YouTube data
InayanEskrima uses YouTube API Services. When you or we connect a Google account or YouTube channel to InayanEskrima, we receive only the data Google provides for the permissions granted:
- Basic account information (such as the Google account identifier and the YouTube channel name and ID) so we can show which channel is connected.
- Permission to manage the connected YouTube account (youtube) and to upload videos (youtube.upload) and set their details (title, description, tags, thumbnail, and privacy status), used only to post and manage content a person on our team has reviewed and approved.
- Permission to see, edit, and delete the channel's videos, playlists, captions, and comments (youtube.force-ssl), used to organize our own playlists and to read comments on our own videos and post replies to them.
- Read-only access to the channel's videos, playlists, and account details (youtube.readonly).
- Read-only access to YouTube Analytics reports, such as views, watch time, and subscribers gained (yt-analytics.readonly), and to revenue reports, such as estimated ad revenue (yt-analytics-monetary.readonly), used only to measure how our own content performs.
We use this data only to publish, organize, and measure ITO's own content on the connected channel. We do not sell it, share it with third parties for their own purposes, or use it for advertising or profiling.
Storage: YouTube statistics and analytics (such as views, likes, comment counts, watch time, subscribers gained, and estimated ad revenue), together with each video's ID and link, are stored in our internal operations database, which is hosted by Airtable. We keep statistics while the connection is active and confirm at least every 30 days that we are still authorized to access them. Comments on our own videos (the comment text, the commenter's public name and channel ID, and the video it was posted on) are stored in a database on our own systems so we can reply to them and understand feedback. We delete or refresh comments and other video details, such as titles, descriptions, and transcripts, within 30 days of collecting them.
AI processing: To help organize our own videos (for example, sorting them into playlists), we may send video titles, descriptions, transcripts, and still frames from the videos to a third-party AI service, Anthropic's Claude. We do not use your data to train AI models. When we use third-party AI services to help create or organize content, they process the data under their own terms and privacy policies.
InayanEskrima's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
By using YouTube features through InayanEskrima, you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.
05How we use information
Provide courses, memberships, seminar booking, support; process payments, prevent fraud, and meet legal duties; send transactional and opted-in marketing (unsubscribe anytime); improve the site and approved content workflows; comply with law and enforce Terms.
06Sharing and retention
Hosting, payments, email/SMS, GoHighLevel, Airtable (our internal operations database), AI services (such as Anthropic's Claude, as described in section 04), and authorized social platforms may process data. We do not sell personal information. We do not share mobile phone numbers, SMS opt-in data, or consent with third parties or affiliates for their marketing or promotional purposes; see our SMS Policy. We may disclose data when required by law or to protect safety. We retain account and transaction records while active and as needed for legal, tax, and dispute purposes, then delete or anonymize.
Platform access tokens are kept only while the connection is active. If you ask us to revoke access or to delete your data, we revoke the token immediately and delete the token and the related platform data within 7 days. If you revoke access in the platform's own settings, we stop using the token as soon as we learn of it and delete the related data within 30 days, unless we must keep a record by law.
For Google and YouTube connections, you can also revoke access at any time on the Google security settings page at https://security.google.com/settings/security/permissions. If you ask us to revoke access or to delete your data, we revoke the token immediately and delete the related Google and YouTube data within 7 days. If you revoke access through your Google security settings, we delete the related data within 30 days.
07Your choices
Email [email protected] to access, correct, or delete data. California residents may request to know, correct, or delete their personal information and to opt out of sale or sharing (we do not sell or share personal information). We will not discriminate against you for using these rights. California's privacy law (CCPA) applies to businesses that meet certain revenue, data-volume, or data-sale thresholds. We may be below those thresholds, but we honor the rights listed here. Our site does not respond to browser Do Not Track signals, and we do not track you across other sites. Manage cookies in browser settings and revoke social connections in platform settings or by contacting us.
08Security
We use reasonable safeguards to protect data, including encrypted (HTTPS) connections for data in transit and access limited to the team members who need it. Card payments are processed by our payment providers, and we do not store full card numbers. Platform access tokens are kept on access-restricted systems, used only by our publishing tool, and never shared or sold. No system is perfectly secure; if we learn of a breach that affects your data, we will notify you as required by law.
09Children
Services are not directed to children under 13. Online memberships require 18+.
10Changes to this policy
We may update this policy. Material updates will be dated here and may be emailed to active members. If we change how InayanEskrima uses Google, YouTube, or TikTok data, we will update this policy and ask for consent again before using the data in the new way.