Privacy Policy

1. Information we collect

When you use BeyondClip Labs, we may collect:

• YouTube channel URL you submit for an audit
• Form responses — target audience, content goals, market/city, role (Realtor / Agent / Broker / Investor)
• Account email if you sign up (via Google or email/password)
• YouTube OAuth tokens if you opt to connect your channel for auto-refresh — stored securely and used only to fetch your channel's public stats
• Audit and idea pack data — the AI-generated reports tied to your account
• Basic technical data — IP address, browser type, page load times (standard for any web service)

2. How we use your data

• To generate your YouTube channel audit
• To produce weekly competitor analysis and ranked video ideas in your market
• To send you the weekly idea pack via email (only if you sign up)
• To respond to your support requests
• To improve the Service's accuracy and reliability

We do not sell your data, share it with advertisers, or use it for any purpose outside of running the Service.

3. Third-party services we use

To deliver the Service, we rely on:

• YouTube Data API (Google) — to read public channel statistics and video data. Your YouTube usage is also bound by Google's Privacy Policy
• Anthropic Claude — to generate the AI audit and idea recommendations. Channel data is sent to Claude only for the purpose of generating your report
• Supabase — authentication and database storage
• Vercel — web hosting
• Google OAuth — if you sign in with Google or connect your YouTube

4. YouTube data handling

We use YouTube's public APIs to pull channel and video data. If you connect your YouTube account via OAuth:

• We request read-only scopes — we never post, modify, or delete content
• OAuth refresh tokens are stored encrypted in our database
• You can revoke access at any time via your Google Account permissions page
• Our use of YouTube data conforms to the YouTube API Services Terms of Service and the YouTube Terms of Service

BeyondClip Labs' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data solely to provide and improve the audit and recommendation features you request, and we do not transfer or sell this data to third parties, use it for advertising, or allow humans to read it except where required for security, to comply with applicable law, or with your explicit consent.

5. Cookies and sessions

We use essential cookies to keep you signed in and remember your session. We don't run third-party advertising or tracking cookies. We may use minimal analytics to count page visits and detect errors.

6. How we protect your data

We apply industry-standard safeguards to protect the data we hold, with additional measures for sensitive data such as your Google/YouTube OAuth tokens:

• Encryption in transit — all traffic between your browser and our servers is protected with TLS (HTTPS); we do not serve any part of the Service over an unencrypted connection
• Encryption at rest — data stored in our database is encrypted at rest. Sensitive credentials, including YouTube OAuth refresh tokens, are additionally encrypted at the application layer and decrypted only in memory when needed to refresh your channel data
• Trusted infrastructure — we host on Vercel and store data with Supabase, both of which operate SOC 2 Type II audited infrastructure with encryption and network isolation
• Access controls — access to production data is limited to authorized personnel on a least-privilege basis and protected by multi-factor authentication
• Data minimization — we request only read-only scopes, collect only what the Service needs, and never store full YouTube API responses indefinitely; cached snapshots expire and are re-fetched after 7 days
• Monitoring — we maintain logging and monitoring to help detect and respond to unauthorized access
• Revocation — you can revoke our access to your Google/YouTube data at any time via your Google Account permissions page, after which we stop accessing it and delete the associated tokens

No method of transmission or storage is ever completely secure, but we work to protect your data using the measures above and review them as the Service grows.

7. Data retention

We keep your audits and idea packs as long as your account is active. If you delete your account, we remove your personal data — including any stored YouTube-derived data and OAuth tokens — within 30 days. Anonymous aggregate statistics may be retained.

8. Your rights

You can request to access, correct, or delete your data at any time by emailing contact@beyondcliplabs.com. We'll respond within 30 days.

9. Children

The Service is not intended for users under 18. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this policy as the Service evolves. Material changes will be reflected by updating the “Last updated” date above. Continued use after a change means you accept the revised policy.

11. Contact

Privacy questions or data requests? Email contact@beyondcliplabs.com.