Last updated: June 20, 2026
This Privacy Policy explains how YouTube Guru ("we", "us") collects, uses, shares, and protects your information when you use our Service, and the rights you have. We are committed to data minimization: we collect only what we need to run the Service.
1. Information we collect
- Account data — your name and email, provided at sign-up or via Google sign-in.
- Authentication data — managed by Supabase Auth. We never see or store your password.
- YouTube data — only if you explicitly connect your channel; see the dedicated section below. Your Google refresh token is encrypted at rest.
- Usage & analysis data — the URLs you analyze and the reports we generate for you.
- Billing data — handled by Lemon Squeezy. We store only non-sensitive metadata (plan, status, card brand, last four digits, order IDs). We never store full card numbers.
- Technical data — IP address, device/browser info, and log data used for security, rate-limiting, and debugging.
2. How we use your data
- To provide, maintain, and improve the Service and generate your analyses;
- To authenticate you, enforce plan limits, and process subscriptions;
- To send transactional emails (welcome, receipts, usage and subscription notices);
- To secure the Service, prevent abuse, and comply with legal obligations;
- With your consent, to measure aggregate, privacy-respecting analytics.
We do not sell your personal data, and we do not use your private YouTube data to train AI models.
3. YouTube API Services & Google user data
YouTube Guru uses YouTube API Services. When you connect your channel, you authorize us — via Google OAuth — to access specific Google user data, and you agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.
What we access (read-only — connecting is optional):
- youtube.readonly — your channel's basic profile and statistics, used to identify your channel.
- yt-analytics.readonly — your channel's analytics (views, watch time, average view duration, subscribers gained, likes, comments), used to render your private analytics dashboard.
How we use and store it. We use this data solely to display your own analytics back to you inside the Service. We request read-only access only — we never modify, upload to, or post on your channel. Analytics are fetched on demand and shown to you; we do not sell this data, share it with third parties for advertising, or use it to train AI models. The only Google credential we retain is your OAuth refresh token, encrypted at rest, so we can refresh your analytics on your behalf.
Limited Use. YouTube Guru's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Revoking access. You can disconnect your channel anytime within the app, and you can revoke YouTube Guru's access entirely from your Google Account permissions page. On revocation or account deletion we delete your stored refresh token.
4. Sub-processors we use
- Supabase — authentication & database
- Lemon Squeezy — payments & invoicing (merchant of record)
- Google / YouTube APIs — channel data you authorize
- Anthropic (Claude) — AI audit generation
- Resend — transactional email delivery
- Sentry — error monitoring (with PII scrubbing)
- Hosting providers for our frontend and backend
5. Cookies
We use essential cookies to keep you logged in and, with your consent, privacy-respecting analytics cookies. See our Cookie Policy for details and how to manage them.
6. Data retention
We keep your account and analysis data for as long as your account is active. If you delete your account, we delete your personal data and associated analyses (including any stored YouTube refresh token), except where we must retain limited records (e.g. billing/tax records) to comply with law. Backups are purged on a rolling schedule.
7. Your rights
Depending on your location (including under GDPR and CCPA/CPRA), you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can:
- Export your data from Settings → Export data;
- Delete your account and data from Settings → Delete account;
- Disconnect your YouTube channel at any time, and revoke access from your Google Account;
- Email privacy@youtubeguru.net to exercise any right. We respond within 30 days.
8. Security
We protect your data with HTTPS/TLS in transit, encryption of sensitive secrets (such as OAuth refresh tokens) at rest, role-based access, request rate-limiting, and continuous error monitoring. No system is perfectly secure, but we work hard to safeguard your information and will notify you of any breach affecting your data as required by law.
9. International transfers
Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers.
10. Children
The Service is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
11. Changes & contact
We may update this policy; material changes will be notified by email or in-app. For any privacy question or request, contact privacy@youtubeguru.net.
This document is a general template and not legal advice. Please have it reviewed by qualified counsel for your jurisdiction.