Privacy & GDPR
GDPR Compliance Policy
We are committed to protecting your personal data and ensuring you have complete control over how it is gathered, processed, and deleted.
1. Introduction
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that protects individuals in the European Union (EU). Vidanalyze is committed to complying with GDPR rules to guarantee safety, transparency, and data portability for all users.
2. Your Rights Under GDPR
As a Vidanalyze user, you hold specific legal rights concerning your personal information:
- Right to Access: You can request a copy of all personal details and database configurations linked to your profile.
- Right to Rectification: You can edit incorrect profile settings, name details, or channel sync configurations directly from your profile settings.
- Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your account and all sync databases. All personal data is deleted within 30 days.
- Right to Restriction: You can contest data collection parameters and lock down processing channels.
- Right to Data Portability: You can download your data in commonly used machine-readable formats (JSON or CSV).
- Right to Object: You can object to specific automated processing pipelines.
- Right to Withdraw Consent: You can disconnect your YouTube OAuth connection at any time to immediately revoke data processing permissions.
3. Data We Collect
Vidanalyze collects specific categories of data necessary for providing growth analytics:
- Account Details: Email addresses, name strings, and avatar links sourced via Google OAuth during registration.
- YouTube Analytics Data: Channel IDs, publishing volume, retention metrics, subscriber estimates, and video velocity figures imported via the official YouTube API.
- Billing Context: Payment tokens and transaction logs managed securely via Stripe. We do not store raw credit card details on our servers.
4. Data Retention
We do not store information longer than required:
- Active Account Details: Retained while your account remains active.
- Closed Accounts: All profile databases, API keys, and channel stats are permanently expunged within 30 days of closure.
- Activity Logs: System log lists are deleted after 12 months for security audits.
5. International Transfers
To serve a global creator audience, Vidanalyze runs secure databases primarily hosted in United States data centers. All transfers outside the European Economic Area (EEA) rely on Standard Contractual Clauses (SCCs) approved by the European Commission, maintaining a high safeguard standard.
6. Exercising Your Rights
To access, edit, export, or permanently delete your Vidanalyze information, contact our DPO at privacy@vidanalyze.com. We respond to all requests within 30 days as mandated by GDPR guidelines.
Frequently Asked Questions
How do I export my data?
You can export all your data at any time from your account settings. Navigate to Settings → Data Management → Export Data to download a complete copy of your analytics data in JSON or CSV format. The export includes all channel data, video metrics, audience insights, and report configurations.
Where is my data stored?
Your data is stored in secure data centers located in the United States, which has an adequacy decision from the EU Commission under GDPR. We also maintain backup facilities in European data centers for disaster recovery purposes. All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.2 or higher.
How long does data deletion take?
Under GDPR, we must complete deletion requests within 30 days. Upon account closure or data deletion request, we delete all personal data within 30 days. This includes account information, analytics history, and any stored preferences.
Can I request access to my personal data?
Yes, you have the right to access all personal data we hold about you. Use the data export feature in your account settings or contact our support team to request a data subject access request (DSAR). We'll provide a comprehensive report within 30 days.
Do you share my data with third parties?
We do not sell your personal data to third parties. We only share data with service providers who help us operate our platform (such as cloud hosting and support tools) and when required by law. All third-party processors are contractually bound by GDPR data processing agreements.
What happens to my data if I cancel my subscription?
Upon subscription cancellation, your account enters a grace period where you can reactivate. If you do not reactivate within 30 days, your account is closed and all personal data is deleted within 30 days of closure, in compliance with GDPR requirements.
How do I withdraw consent for data processing?
You can withdraw consent at any time through your account settings under Privacy Preferences. For marketing communications, use the unsubscribe link in any email. If you withdraw consent for core service processing, we may no longer be able to provide our services.