Privacy Policy

1. Who We Are

This YouTube Dashboard is operated by Aux Mode Inc (the "Tool", "we", "us", "our"). We provide channel and video analysis services using the YouTube Data API. Contact: support@auxmode.com.

2. Data We Collect

2a. YouTube API Data

When you enter a YouTube channel ID, handle, or video ID into this Tool, we access the following publicly-available data via the YouTube Data API v3:

• Channel metadata (name, description, handle, topic categories)
• Channel statistics (subscriber count, total view count, video count)
• Video metadata (title, description, tags, thumbnails, published date)
• Video statistics (view count, like count, comment count)
• Playlist metadata and items

This data is fetched using the YouTube Data API and is governed by Google's Privacy Policy.

2b. Account Data

If you register an account, we collect your name and email address for authentication and communication. API keys you provide under BYOK (Bring Your Own Key) are stored with AES-256 encryption and are never transmitted to third parties.

2c. Usage Data

We log audit activity (channel/video IDs audited, audit type, timestamp) to enforce quota limits and provide usage statistics to account holders.

2d. Channel Prospecting (planned)

We may identify YouTube channels as potential prospects for our services and compile a short profile of them. Any such profile is built only from publicly available information obtained via the YouTube Data API together with our own derived analysis — for example a channel's ID or handle, our optimisation scores and subscriber tier, our content categorisations, and the channel's last-known public counts. We do not use private or owner-only data for this.

Purpose & lawful basis. The purpose is to identify and qualify potential customers for our services. Where EU/UK data-protection law applies, we rely on our legitimate interest in business prospecting, balanced against your rights — and you may object at any time. Because a channel may be operated by an individual, we treat this information as personal data.

Who receives it. Prospect profiles may be exported to a third-party sales/CRM system used by our sales team. Any outreach is carried out in that system in accordance with applicable anti-spam and marketing law — Canada's Anti-Spam Legislation (CASL) and, for recipients in the EU, the ePrivacy rules.

Retention. Derived prospecting data is kept only while a channel remains an active prospect; the underlying public counts are refreshed or removed within 30 days. You can ask us to access, correct, or delete this information, or to stop prospecting you, at any time — see Section 6 (Your Rights) or contact support@auxmode.com.

3. How We Store YouTube API Data

We cache YouTube API data to reduce redundant API calls and improve performance. Our data retention policy complies with the YouTube API Services Terms of Service:

• Audit Cache: Full audit payloads (channel/video data) are stored for a maximum of 30 days, after which they are automatically deleted.
• Channel Metrics (subscriber count, view count, video count) are stored for up to 30 days before automatic expiry and refresh.
• AI-Generated Analysis: Tag analysis and AI-derived insights are stored for up to 30 days before requiring refresh.

We do not store YouTube audiovisual content (video files or audio streams).

4. Cookies & Local Storage

We keep what this Tool stores on your device to the minimum needed to make it work. We use no advertising, analytics, or cross-site tracking cookies, and we do not profile you.

4a. Cookies

• Session cookie (JSESSIONID): a single, strictly-necessary cookie set by our server so the Tool can keep you signed in across pages and protect requests against cross-site request forgery (CSRF). It is HttpOnly, holds only an opaque session identifier, and expires when you close your browser or after 30 minutes of inactivity. This is the only cookie we set.

4b. Local & Session Storage

For features you actively use, the Tool stores small amounts of data in your browser's local and session storage. This stays on your device and is not transmitted to us for tracking:

• Functional preferences — for example your chosen AI engine and dismissed notice flags.
• Your recent-audit history and cached audit / AI results, so the Tool can reload them quickly without re-querying the API.
• Operational state — multi-tab session coordination, draft batch flags, and where to return you after signing in.

You can clear this at any time through your browser settings; doing so only removes local conveniences and does not affect your account.

4c. Consent

Because we rely solely on a strictly-necessary session cookie and functional on-device storage — with no tracking, analytics, or advertising technologies — no cookie-consent banner is required under the EU ePrivacy Directive (and UK PECR). If we ever introduce non-essential cookies (such as analytics or advertising), we will ask for your explicit consent first, and you will be able to change or withdraw that consent at any time.

4d. Third-Party Resources

All code — fonts, icons, charting and export libraries — is served from our own servers. This Tool loads no scripts, styles, or fonts from third-party CDNs. The only content fetched from outside our servers is images: YouTube channel/video thumbnails (served by YouTube's own image hosts) and placeholder graphics. Loading an image necessarily reveals your IP address to that image host, but no tracking cookies are set through this Tool.

5. AI-Generated Content Disclosure

6. Your Rights — Deleting Your Data

You have the right to request deletion of all data stored about you. How you exercise that right depends on whether you have connected your Google account to this Tool:

• Without Google account connection (current default): This Tool only queries publicly available YouTube data and stores activity logs about your queries — it does not hold any personal Google content on your behalf. To request removal of your account and activity records, contact support@auxmode.com. We process all deletion requests within 7 calendar days.
• With Google account connection (future): Once OAuth-based Google sign-in is available, a "Delete My Data" button will appear in your Profile under the "Privacy & Data" tab. This self-service flow will remove your stored OAuth credentials and any private YouTube content fetched on your behalf. We will also continue to honour email-based deletion requests at the same 7-calendar-day commitment.

If we hold a channel-prospecting profile about you (see Section 2d), you also have the right to object to that processing and to ask us to delete the profile — email support@auxmode.com and we will stop and remove it.

Please note: deleting your data from this Tool does not delete any data stored by YouTube. To manage data stored by YouTube, visit your Google Account Data & Privacy settings.

7. Revoking YouTube API Access

This Tool accesses publicly available YouTube data using an API key — it does not request access to your personal Google account. No OAuth tokens are stored for your Google account.

If you have connected any Google account to services associated with this Tool, you can review and revoke access at any time via Google's security settings:

8. Third-Party AI Services

When you trigger an AI Audit, channel and video metadata (titles, descriptions, tags) may be transmitted to one of the following AI providers for analysis:

• Google Gemini (governed by Google Privacy Policy)
• OpenAI (governed by OpenAI Privacy Policy)
• Anthropic Claude (governed by Anthropic Privacy Policy)
• Cohere (governed by Cohere Privacy Policy)

For the end-user AI Audit, no personally identifiable information (names, emails, account credentials) is sent to AI providers — only public YouTube metadata is transmitted.

Operator counterparty research (staff tool). Separately, our administrators have an internal “AI Research” tool that helps complete records about counterparty companies (e.g. other content owners we have rights conflicts or claims with). When an administrator runs it, the counterparty’s company name and website are sent to Google Gemini with Google Search grounding, which returns publicly-available business information — including business contact details (name, job title, business email) of that counterparty’s staff. This is operator tooling for managing business relationships (distinct from the end-user AI Audit above); results are reviewed by an administrator before anything is saved, and we do not scrape LinkedIn. This processing is recorded in our internal Records of Processing and is carried out on a legitimate-interest basis.

9. Security

All data is transmitted over HTTPS/TLS. API keys stored by users are encrypted using AES-256 at rest. We do not share user data with third parties except as required by law or as described in this policy.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the Tool after changes constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions or data deletion requests, contact us at: support@auxmode.com