Privacy Policy

VIS Integrated ("VIS Integrated," "we," "us," or "our") provides a creator analytics platform for YouTube content creators. This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data.

By using VIS Integrated (the "Service"), available at https://www.visintegrated.app, you agree to the collection and use of information in accordance with this policy.

We collect three categories of information:

2.1 Account information

When you sign in with Google, we receive your name, email address, profile picture, and a verified user ID from Google. We store these in order to identify your account and personalize the application.

2.2 YouTube account data (only if you authorize it)

When you connect your YouTube channel, you grant us read-only access via Google OAuth with the following scopes:

• youtube.readonly — read your channel metadata, video lists, and public statistics
• yt-analytics.readonly — read your channel-level analytics (views, watch time, retention, CTR, subs gained/lost, revenue)

We store the resulting OAuth access and refresh tokens in our database, encrypted at rest using AES-256-GCM. We never request, receive, or store your Google account password.

2.3 Usage information

We log standard request metadata (IP address, user agent, timestamps) for security, abuse prevention, and debugging. We do not use this data for advertising or sell it to third parties.

We use the data we collect to:

• Provide the Service — show you analytics for your own YouTube channel and for competitor channels you have explicitly added to your workspace
• Refresh your dashboard automatically by polling the YouTube Data API and YouTube Analytics API on a schedule
• Authenticate you on each visit, maintain your session, and apply role-based access within your workspace
• Process payments via our payment processor (Stripe) when you subscribe to a paid plan — we do not see or store your full card number
• Investigate abuse, comply with legal obligations, and protect the rights and safety of our users

We do not use YouTube data to train machine-learning models, sell raw or anonymized data to third parties, or display one user's data to another user.

VIS Integrated's use of YouTube data is subject to the following:

• YouTube API Services — VIS Integrated uses YouTube API Services (specifically YouTube Data API v3 and YouTube Analytics API v2) to fetch the data shown in your dashboard.
• By using VIS Integrated, you also agree to be bound by YouTube's Terms of Service.
• Our use, display, and handling of YouTube data is also governed by Google's Privacy Policy.
• You can revoke VIS Integrated's access to your YouTube account at any time via Google's security permissions page or by clicking Disconnect under Settings → Integrations inside VIS Integrated. Disconnecting revokes the Google OAuth grant and deletes the associated tokens from our database.
• We refresh your stored YouTube data on a maximum cadence of every 12 hours unless you manually trigger an earlier sync. We do not retain YouTube content beyond what is reasonably necessary to display your analytics, and we delete cached YouTube content that is older than 30 days unless you have an active session in which it is being displayed.

We do not sell your personal data. We share information only in the following limited circumstances:

• Service providers — we use Supabase (auth + database), Railway (hosting), Stripe (payments), Upstash (rate limiting), and Sentry (error monitoring). These providers process data on our behalf under their own contractual obligations.
• Legal requirements — we may disclose data if required by a valid legal request or to investigate fraud, security threats, or violations of our Terms of Service.
• Aggregated, anonymized statistics — we may publish aggregate metrics (e.g., total active users) that cannot be linked back to any individual.

We protect your data with industry-standard security practices:

• OAuth tokens encrypted at rest with AES-256-GCM, with the encryption key stored separately from the database
• TLS 1.2+ for all data in transit between your browser and our servers
• Workspace-scoped access controls (your data is only visible to your workspace members)
• Per-user OAuth — every user authorizes us individually
• Soft-delete + 30-day retention on workspaces (you can recover accidentally deleted workspaces; permanent deletion happens after the grace window)
• Audit log of sensitive actions (sign-in, disconnect, billing changes)

No system is perfectly secure. If we become aware of a security incident that affects your data, we will notify you in accordance with applicable law.

You have the right to:

• Access and export your personal data — contact us to request a copy
• Correct inaccurate information in your profile
• Disconnect YouTube at any time — revokes the OAuth grant at Google and clears the stored tokens
• Delete your account — email us and we will delete your data within 30 days, except where we are required to retain it for legal or fraud-prevention purposes
• Object to processing or restrict our use of your data

VIS Integrated uses essential cookies for authentication (session cookies set by Supabase Auth) and a small number of preference cookies (sidebar collapsed state, theme). We do not use third-party advertising cookies. You can clear cookies via your browser settings, though this will sign you out.

VIS Integrated is not intended for users under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

Our infrastructure is hosted in the United States. By using the Service, you consent to the transfer and processing of your data in the United States, which may have data protection laws different from your country of residence.

We may update this Privacy Policy from time to time. Material changes will be communicated via email to active users at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

For privacy questions, data access requests, or account deletion, email us at oliver@visintegrated.com.