Privacy Policy

1. Introduction

ForSubs ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use our service.

2. Information We Collect

For Creators:

• Google account information (name, email, profile picture)
• YouTube channel information (channel ID, name, subscriber count)
• OAuth tokens for YouTube API access (stored encrypted)
• Perk configuration data
• Billing information (processed by Stripe)

For Subscribers:

• Verification status (subscribed/not subscribed) - stored as anonymous hash
• Email address (only if voluntarily provided)
• We do NOT store your YouTube subscription list

3. How We Use Information

• To verify YouTube subscription status
• To deliver perks to verified subscribers
• To provide analytics to creators (aggregate, anonymized data)
• To process payments and manage subscriptions
• To communicate important service updates

4. YouTube API Services

ForSubs uses YouTube API Services. By using our service, you also agree to be bound by the YouTube Terms of Service and Google Privacy Policy.

We only request read-only access to your YouTube data. We never post, modify, or delete anything on your YouTube account.

5. Use of YouTube API Services and Restricted Data

This section details how we access, use, and protect data obtained via the Google YouTube API Services, including Restricted Scope data.

Adherence to Google Policies:

Notwithstanding anything else in this Privacy Policy, our use of data obtained from Google's YouTube API Services will adhere strictly to the Google API Services User Data Policy, including the Restricted Scope and Limited Use requirements.

Specific Data Accessed:

We access the following data points using the respective scopes, and use them solely for providing the exclusive perk verification service:

1. Sensitive Data (youtube.readonly): Creator Channel Metadata (Channel ID, Name, Thumbnail, Subscriber Count) and Viewer Subscription Status (Yes/No status of a viewer being subscribed to a specific creator's channel).
2. Restricted Data (youtube.channel-memberships.creator): Viewer Paid Channel Membership Status, Membership Tier Level, and Member Since Date. This data is used exclusively to gate access to creator perks based on membership level.

Data Transfer and Sharing Restrictions:

We will not transfer, sell, or sublicense data obtained through the YouTube API Services to third parties. Transfers of data are limited strictly to providing the prominent, user-facing feature of verifying paid channel membership status within the app and are not extended for any other purpose, including advertising or marketing.

No Human Review of Data:

We strictly prohibit human access to your private YouTube data. No human will read this YouTube data (including subscription status or Paid Membership Tier/Status) unless: (a) it is absolutely necessary for security purposes (e.g., investigating a security incident or fixing a system-breaking bug); or (b) it is required to comply with applicable law.

Data Retention and Deletion:

We do not store viewer subscription or paid membership verification data persistently, only caching the verification result in-memory for a maximum of 5 minutes and then discarding it. We store creator channel information and encrypted refresh tokens only as long as your ForSubs.com account is active. Users may request full account and data deletion at any time. We will delete all user data, including stored creator tokens and channel information, within 30 days of a deletion request or account closure.

6. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers (Supabase for database, Stripe for payments, Vercel for hosting)
• Creators (only aggregate analytics and voluntarily provided emails)
• Legal authorities when required by law

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your data at any time.

8. Your Rights (GDPR)

If you are in the European Union, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Object to data processing
• Data portability

To exercise these rights, contact us at privacy@forsubs.com

9. Security

We implement industry-standard security measures including encryption of sensitive data, secure HTTPS connections, and regular security audits.

10. Contact Us

For privacy-related questions, contact us at: privacy@forsubs.com