Privacy Policy

Account details (email, name, hashed password), billing status from our payment provider, your activity in the product (searches, lists, pipeline items) so the product works, and technical logs (IP address, browser) for security and rate limiting. If you connect a YouTube channel or upload analytics exports, we store what you provide to power those features.

We don't sell your data. We don't share your keyword research, lists, or channel analytics with other customers. Your workspace is scoped to your account.

Stripe (payments — we never see your card number), Resend (transactional email), Klaviyo (marketing email, only if you joined the waitlist or opted in), OpenAI (portions of public search data are processed to score keywords; your personal data is not sent), and Hostinger (hosting, EU region). Each processes data only to provide their service to us.

We use a session cookie to keep you signed in and a preference cookie for your theme. No third-party advertising cookies.

Account data is kept while your subscription is active. Contact us to delete your account and its data; we'll complete deletion within 30 days, except records we must keep for tax or fraud purposes.

Passwords are stored hashed, sensitive secrets are encrypted at rest, connections are encrypted in transit, and optional two-factor authentication is available on every account.

Privacy questions or requests: harvey@yta-agency.com.