Google and YouTube user data

This page explains what data Kolektif Etki receives from Google when an influencer connects their YouTube channel, and how we handle it. Our general privacy notice (Üyelik Aydınlatma Metni) covers all other personal data.

Data we access. Connecting a YouTube channel asks for two read-only permissions:

• YouTube account data (youtube.readonly): the channel's title, ID and custom URL (@handle), subscriber count (not shown if hidden), video count, and the view, like and comment counts of the latest 15 videos. We also read the view, like and comment counts of the videos the influencer submits as publication links for a collaboration.
• YouTube Analytics (yt-analytics.readonly): the age group, gender and country breakdown of the channel's audience, as aggregate percentages only. We never receive data about individual viewers.

We never upload, edit or delete anything on YouTube. We do not access email, contacts, Gmail, Drive or any other Google data.

How we use it. Only to:

• show verified numbers instead of self-reported ones in the influencer's media kit (subscribers, average views, engagement rate);
• show the audience breakdown to signed-in brand accounts;
• report the performance of collaboration videos to the brand of that collaboration;
• rank suggested influencers for brands and compute the account quality indicator.

The data is not used for advertising, lending decisions or any purpose unrelated to these features. It is not used to train AI/ML models and is not sent to AI services.

Sharing.

• Subscriber count, average views and engagement rate appear in the influencer's public media kit.
• The audience breakdown is shown only to signed-in brand accounts and to the influencer.
• Collaboration video performance is shown only to the brand of that collaboration.
• We do not sell Google user data or transfer it to data brokers, advertisers or other third parties.
• It is stored only with the contracted hosting and database providers needed to run the service, and disclosed to authorities only where the law requires it.

Protection.

• Google access and refresh tokens are stored encrypted with AES-256-GCM. They are never shown on any page and never written to logs.
• Access to servers and the database is limited to authorized staff.
• All traffic uses HTTPS.

Retention and deletion.

• While connected, channel data is refreshed about once a day.
• Daily readings for the account quality indicator are kept for at most one year and then deleted automatically.
• When the influencer disconnects (Profil → Sosyal hesaplar → Bağlantıyı kes):
• we revoke the grant with Google;
• we delete the tokens, the audience breakdown, the daily readings and the verified statistics.
• Only self-declared values the influencer can edit remain on the profile.
• Closing the account deletes all of it.
• Video performance figures in collaboration reports are kept as part of the collaboration record for the periods stated in our privacy notice.
• Access can also be revoked at any time from the Google account: https://myaccount.google.com/connections

Limited Use. Kolektif Etki's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Links:

• YouTube Terms of Service: https://www.youtube.com/t/terms
• Google Privacy Policy: https://policies.google.com/privacy
• Google API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy

Contact: [email protected]