← Back to Home
Privacy Policy
Last updated: March 22, 2026
ChannelGrade ("we", "our", "the Service") respects your privacy. This policy explains what data we collect, why, and how we protect it.
Summary: We collect minimal data needed to run the service. We don't sell your data. We don't track you across the web. Video analysis data is processed through Google's Gemini AI.
1. Data We Collect
| Data | When | Why |
|---|
| Email, name, profile photo | Google OAuth login | Account creation, communication |
| YouTube channel URL | You connect a channel | Fetch video data for analysis |
| Video metadata (titles, descriptions, tags, thumbnails) | Channel sync | AI grading and suggestions |
| Video transcripts | Free tool or hook analysis | Sent to Gemini AI for analysis |
| YouTube Analytics data (watch time, CTR, traffic sources) | You connect YouTube Studio (optional) | Enhanced analytics on your dashboard |
| IP address, browser info | Every visit | Rate limiting, abuse prevention, country detection |
| Payment info | Subscription checkout | Processed by Stripe (we never see your card number) |
2. How We Use Your Data
- AI Analysis: Video metadata and transcripts are sent to Google Gemini AI to generate grades, scores, and improvement suggestions. Google may process this data per their Gemini API Terms.
- YouTube API: We use the YouTube Data API v3 to fetch public video information. If you connect YouTube Studio, we also access YouTube Analytics API data (view counts, watch time, traffic sources) using OAuth tokens you authorize.
- Billing: Payment processing is handled entirely by Stripe. We store your Stripe customer ID and subscription status but never your card details.
- Communication: We may send onboarding emails and weekly digest reports to your registered email. You can unsubscribe at any time.
- Analytics: We track page visits and tool usage in aggregate to improve the service. We do not use third-party ad trackers.
3. Data We Do NOT Collect
- We do not read your YouTube comments, DMs, or private videos
- We do not access your Google Drive, Gmail, or other Google services
- We do not use advertising cookies or sell data to third parties
- We do not store your Google OAuth password (authentication is handled by Google)
4. Third-Party Services
- Google Gemini AI: processes video metadata and transcripts for AI analysis
- YouTube Data API v3: fetches public video and channel information
- YouTube Analytics API: fetches your channel analytics (only with your explicit OAuth consent)
- Stripe: handles payment processing and subscription management
- IPHub: IP address country detection for rate limiting
5. YouTube API Compliance
ChannelGrade's use of YouTube API Services is subject to the YouTube Terms of Service and Google Privacy Policy. You can revoke ChannelGrade's access to your YouTube data at any time via Google Security Settings.
6. Data Retention
- Account data: Retained while your account is active. Deleted within 30 days of account deletion.
- Video analysis data: Retained while the channel is connected. Preserved on disconnect (soft-deleted) so you can restore it by reconnecting. Permanently deleted on account deletion.
- YouTube OAuth tokens: Stored encrypted, automatically refreshed, and deleted when you disconnect YouTube Studio or delete your account.
- Free tool usage: Cached results expire after 7 days. Usage counters are IP-based and reset daily.
- Server logs: Retained for up to 30 days for debugging and abuse prevention.
7. Data Security
- All connections use HTTPS/TLS encryption
- Session cookies are HTTP-only, secure, and SameSite=Lax
- Database credentials and API keys are stored server-side, never exposed to clients
- YouTube OAuth tokens are stored in the database and refreshed automatically
8. Your Rights
You have the right to:
- Access your data via your dashboard and settings page
- Delete your account and all associated data from Settings → Danger Zone
- Disconnect your YouTube channel at any time
- Revoke YouTube Studio access at any time
- Export your analysis data (contact us)
For EU/EEA users: you have additional rights under GDPR including data portability, rectification, and the right to lodge a complaint with a supervisory authority.
9. Cookies
We use a single essential session cookie for authentication. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
10. Children's Privacy
ChannelGrade is not intended for users under 16 years of age. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this policy as ChannelGrade evolves. Material changes will be communicated via email to registered users at least 14 days before taking effect.
12. Contact
For privacy questions or data requests:
ChannelGrade is operated by ChannelGrade, registered in Denmark.