Creatix YT is a suite of free and premium tools for analyzing YouTube content and channels. We take our users' privacy very seriously. This policy describes what data we collect, how we use it, and your rights over it. We are committed to complying with applicable privacy regulations including GDPR (EU), CCPA (California), and PIPEDA (Canada).

Data we collect

We collect the following data to provide our services:

•Authentication data: Email, name, and profile picture (if using Google OAuth).
•Usage data: Search history of YouTube channels and channels saved as favorites.
•Session data: Cookies necessary to keep your session active.
•Subscription data: If you make a donation, we store your membership level and expiration date. Payment data is processed by Ko-fi and we never have access to it.
•IP address: We temporarily store your IP address for rate limiting and security purposes.

Tool-specific data processing

Our analytics tools process YouTube data in real-time. Most tool data is NOT stored on our servers - it is fetched directly from YouTube's API and displayed to you:

•Channel Analyzer: Fetches public channel statistics. Only search history is stored for registered users.
•Description SEO Analyzer: Analyzes video descriptions for SEO optimization. Data is processed in real-time and not stored.
•Comments Analyzer: Analyzes public video comments for sentiment and patterns. Comments are processed in real-time and not stored.
•Tags Extractor: Extracts video tags. Data is fetched in real-time and not stored.
•Title Generator: Analyzes title patterns. Data is processed in real-time and not stored.
•Revenue Calculator: Estimates earnings based on public view counts. No data is stored.
•Thumbnail Previewer: Displays thumbnails for preview. No data is stored.
•Trending Thumbnails: Shows trending video thumbnails. No data is stored.
•Ads Analyzer: Analyzes videos for ad suitability. Data is processed in real-time and not stored.
•Channel Compare: Compares public statistics of multiple channels. No data is stored.

Legal basis for processing (GDPR)

Under GDPR Article 6, we process your data based on the following legal grounds:

•Consent: For non-essential cookies, advertising, and marketing communications. You can withdraw consent at any time.
•Contract performance: To provide account services, analyze channels, and manage premium subscriptions.
•Legitimate interest: For security, fraud prevention, service improvement, and rate limiting.

Data retention

We retain your data for different periods based on its purpose:

Account data: Until you delete your account.

Search history: 2 years or until manual deletion.

IP addresses: 30 days (automatically anonymized after this period).

Verification codes: 10 minutes.

System logs: 90 days.

Donation records: Required for tax purposes, retained as per legal requirements.

International data transfers

Your data may be processed in countries outside your location. We use the following service providers:

•Supabase: Data hosted in secure cloud infrastructure with appropriate safeguards.
•Resend: Email service based in the USA, operating under Standard Contractual Clauses (SCCs).
•Ko-fi: Based in the UK (EU adequacy decision applies).
•Adsterra: Advertising network with global presence.
•YouTube API: Subject to Google's privacy policies and data processing terms.

How we use your data

We use your data exclusively to:

•Allow you to access your account and maintain your session.
•Save your search history so you can review it later.
•Improve the user experience on the platform.
•Manage your premium subscription if you have made a donation.

We do not sell your personal data. California residents: see 'Your Rights by Region' below for CCPA-specific information.

Third-party services

We use the following third-party services. Click the links to view their privacy policies:

•
Adsterra: Advertising provider that may use cookies to show relevant ads.Adsterra Privacy Policy →
•
Ko-fi: Donation platform that processes payments securely. We do not have access to your payment data.Ko-fi Privacy Policy →
•
Supabase: Authentication and database platform where we securely store your information.Supabase Privacy Policy →
•
Resend: Transactional email service for account verification and notifications.Resend Privacy Policy →
•
YouTube API: Used to fetch public channel data for analysis.Google Privacy Policy →

Affiliate links

Some links on our Partners page are affiliate links. This means we may receive a commission if you make a purchase or registration through them, at no additional cost to you. These links are clearly identified on the Partners page.

Storage and security

Your data is securely stored on Supabase, a platform that meets industry security standards. Passwords are stored encrypted and we never have access to them in plain text.

Your rights

You have the right to:

✓Access all your stored personal data.
✓Request correction of incorrect data.
✓Request complete deletion of your account and data.
✓Export your data in a readable format.
✓Withdraw consent for non-essential data processing.
✓Object to processing based on legitimate interest.

Your rights by region

European Union (GDPR)

EU residents have additional rights under GDPR:

•Right to data portability in a machine-readable format.
•Right to lodge a complaint with your local supervisory authority.
•Right to restrict processing in certain circumstances.

You may contact your local Data Protection Authority. For reference, the lead supervisory authority list is available at the European Data Protection Board website.

California (CCPA/CPRA)

California residents have specific rights under CCPA:

•Right to know what personal information is collected, used, and shared.
•Right to delete personal information.
•Right to opt-out of the sale of personal information.
•Right to non-discrimination for exercising your privacy rights.

We do not sell your personal information. To exercise your CCPA rights, contact us or use the 'Do Not Sell My Personal Information' link in our footer.

Canada (PIPEDA)

Canadian residents have rights under PIPEDA:

•Right to access your personal information.
•Right to challenge the accuracy of your information.
•Right to withdraw consent (with certain exceptions).

You may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

Data breach notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours (as required by GDPR) and affected users without undue delay. We maintain incident response procedures to detect, report, and investigate security breaches.

Children's privacy

Our service is not directed to children under 16 years of age. We do not knowingly collect personal information from children. If we discover that a child has provided us with personal data, we will delete it promptly.

Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated 'Last updated' date. We encourage you to review this policy periodically.

Contact

If you have questions about this policy or want to exercise your rights, contact us at:

contact@youtube-analytics.com

For privacy-related inquiries, you may also contact our designated privacy representative.

Privacy Policy