Privacy Policy
Last updated: February 9, 2026
The In short lines are plain-English summaries provided for convenience only. They are not part of this agreement and do not modify it. If a summary and the section text differ, the section text governs.
On this page
About this Policy
In short: This page explains what we do with your data. Using the Service counts as agreeing to it, so stop using it if you do not.
This Privacy Policy describes how VIS Integrated ("we," "us," "our") collects, uses, processes, shares, and protects your personal information when you use the Service. By using the Service, you agree to the practices described here. If you do not agree, do not use the Service.
YouTube API Services and Google Account Data
In short: We pull YouTube data through Google's APIs, you are bound by YouTube's terms too, you can revoke our access any time, and we delete that data within 30 days unless you say otherwise.
The Service uses YouTube API Services. Specifically, we use the YouTube Data API v3, the YouTube Analytics API, and the YouTube Reporting API to retrieve channel information, video metadata, public statistics, and (if you authorize it via OAuth) your own channel's analytics.
By using the Service, you agree to be bound by the YouTube Terms of Service and acknowledge the Google Privacy Policy.
You may revoke our access to your Google account data at any time via https://security.google.com/settings/security/permissions. We retain YouTube API data we have collected for no longer than 30 days unless you have explicitly authorized longer retention. We do not sell YouTube API data to third parties; we do not transfer YouTube API data to any third-party advertising service.
Information We Collect
In short: We collect what you type in, what you upload, how you use the app, your device and IP details, and data from YouTube, Stripe, and your login provider.
3.1 Information you provide directly:
- Account data - name, email address, password (or OAuth identity), workspace name, billing contact;
- Payment data - handled by our payment processor (Stripe). We do not store full payment-card numbers. We receive and store the last four digits, card brand, expiration, and a payment-processor token;
- Customer Content - any text, scripts, ideations, uploaded files, prompts, or other information you submit to the Service;
- Communications - email correspondence with support and any feedback you send us.
3.2 Information collected automatically:
- Usage data - pages visited, features used, session duration, click events, search terms, error logs;
- Device data - IP address, browser type, operating system, device identifiers, language preference;
- Cookies and similar technologies - session cookies (for authentication), preference cookies (for UI state), and limited first-party analytics. See Section 9.
3.3 Information from third parties:
- YouTube / Google - channel data, video metadata, and (with your authorization) channel analytics. See Section 2;
- Stripe - payment status and limited payment-method metadata;
- Email / authentication providers - verified email address, name, profile picture.
How We Use Your Information
In short: We use your data to run and improve the Service, log you in, bill you, generate your AI outputs, stop fraud, follow the law, and message you about your account.
We process your information to:
- Provide, operate, maintain, and improve the Service;
- Authenticate you and prevent unauthorized access;
- Process subscriptions, billing, and communications related to your account;
- Generate AI-assisted analytics, ideations, scripts, and recommendations based on data you and your workspace members provide;
- Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms;
- Comply with legal obligations, respond to lawful requests, and enforce our agreements;
- Communicate with you about product updates, support, billing, and (with your consent where required) marketing.
Legal Basis for Processing (GDPR / UK GDPR)
In short: If you are in the EEA, UK, or Switzerland, we rely on your contract with us, our legitimate interests, your consent, or the law, depending on the purpose.
If you are in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing are:
- Contractual necessity - to provide the Service you have requested;
- Legitimate interests - to maintain and improve the Service, prevent fraud, and operate our business, balanced against your rights;
- Consent - for non-essential cookies and certain marketing communications, which you may withdraw at any time;
- Legal obligation - to comply with applicable law.
International Data Transfers
In short: Your data can be stored and processed outside your country, including in the United States, using standard legal transfer safeguards.
We may transfer your information to, and store and process it in, countries outside your country of residence, including the United States. When we do, we rely on lawful transfer mechanisms such as the European Commission's Standard Contractual Clauses or the UK Addendum, as applicable.
Data Retention
In short: YouTube data goes within 30 days, but account records can stay for the life of your account plus up to seven years for financial reasons.
We retain your personal information only as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. YouTube API data is retained for no longer than 30 days unless you explicitly authorize longer retention. Account data is retained for the life of your account plus the time required by law (typically up to seven years for financial records).
Your Privacy Rights
In short: You can ask to see, fix, delete, export, or restrict your data by emailing privacy@visintegrated.com, and we usually reply within 30 days after verifying who you are.
Subject to applicable law, you have the right to:
- Access the personal information we hold about you;
- Correct inaccurate or incomplete information;
- Delete your personal information (subject to retention obligations);
- Object to or restrict certain processing;
- Receive your information in a portable format;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with your local data protection authority.
To exercise these rights, email privacy@visintegrated.com. We will respond within the timeframe required by applicable law (typically 30 days). We may need to verify your identity before acting on your request.
California Residents (CCPA / CPRA)
In short: Californians get extra rights to know, delete, correct, and opt out, and we will not treat you worse for using them. Email privacy@visintegrated.com.
California residents have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. These include the right to know what personal information we collect, to delete it, to correct it, to opt out of any "sale" or "sharing" (we do neither), and to limit the use of sensitive personal information. To exercise these rights, email privacy@visintegrated.com. We do not discriminate against you for exercising your rights.
Children
In short: This is not for kids under 13, or under 16 in the EEA and UK. Tell us if a child signed up and we will delete their data.
The Service is not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect personal information from them. If you believe a child has provided us with information, contact privacy@visintegrated.com and we will delete it.
Security
In short: We encrypt and monitor your data, but we do not promise it can never be breached, and keeping your login details secret is on you.
We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (TLS), encryption at rest for sensitive fields, least-privilege access, audit logging, and regular security review. No system can be made entirely secure; we cannot guarantee that information will never be accessed in unauthorized ways. You are responsible for keeping your account credentials confidential.
Changes to this Policy
In short: We can change this policy. Big changes get an email or in-app notice first, and staying on after the effective date means you accept them.
We may update this Policy from time to time. We will update the "Last updated" date and, for material changes, notify you by email or via the Service before the change takes effect. Continued use after the effective date means you accept the updated Policy.
Contact
In short: Email privacy@visintegrated.com with any question about this policy or how we handle your data.
Questions about this Policy or our privacy practices? Email privacy@visintegrated.com.