This Privacy Policy explains what information Vertflow (the "Service") collects, how we use and protect it, and the choices you have. Vertflow connects to your YouTube account(s) to show your channel statistics and revenue. By using the Service you agree to this Policy. It works together with our Terms of Service.
Account information. When you register we store your email address, a securely hashed password (bcrypt), and a hashed recovery phrase. We never store your password or recovery phrase in plain text.
Google / YouTube data. When you connect a Google account, you grant Vertflow read-only access to your YouTube data via Google OAuth. We retrieve, from the YouTube Data API and YouTube Analytics API: your channels and basic profile (title, handle, thumbnail, subscriber/view/video counts), your videos and their statistics, and analytics including views, watch time, and estimated revenue (the YouTube Analytics monetary data). Vertflow never posts, edits, or deletes anything on your channels.
Data you enter. Revenue figures you add manually (for example sponsorships or other platforms) and any settings you configure.
Technical data. To keep the Service secure we process limited technical data such as your IP address (stored only as a salted hash, used for sign-in rate-limiting) and a session cookie that keeps you logged in.
We use your information solely to operate the features you use: to authenticate you, to display your channel statistics and revenue, to keep your data in sync, and to secure your account. We do not sell your data, we do not use it for advertising, and we do not use it to build profiles unrelated to the Service.
Vertflow's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, the YouTube data we access is used only to provide and improve the user-facing features you request, is not transferred to others except as needed to provide those features or as required by law, is not used for advertising, and is not sold. Google's own use of any information it receives is governed by the Google Privacy Policy.
Your Google OAuth tokens are encrypted at rest using AES-256-GCM; we decrypt them only to refresh your data on your behalf. Passwords and recovery phrases are stored only as one-way hashes. The Service is served over HTTPS, and access to your data is restricted to your authenticated account. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your information.
We do not sell your personal information. We share data only with the infrastructure providers required to run the Service (for example our hosting and network providers), and with Google as the source of your YouTube data. We may disclose information if required by law or to protect the rights, safety, and security of our users or the Service.
We keep your data while your account is active. You can delete your account at any time from the dashboard Settings page; deleting your account permanently removes your account and all associated data — your connected accounts, channels, statistics, revenue records, and stored OAuth tokens — and this cannot be undone. You can also disconnect an individual Google account inside Vertflow, or revoke Vertflow's access entirely from your Google Account permissions.
You can access and update your information in the app, disconnect Google accounts, revoke access through Google, and delete your account and all associated data at any time. Depending on where you live, you may have additional rights over your personal data; to exercise them, contact us at the address below.
We use a single essential cookie to keep you signed in (a secure, httpOnly session token). We do not use advertising or third-party tracking cookies.
The Service is not directed to children under 13 (or the minimum age to hold a Google account in your country), and we do not knowingly collect their data.
Your information is processed on the infrastructure that runs the Service, which may be located in a different country from where you live. By using the Service you consent to that processing.
We may update this Policy from time to time. If we make material changes we will update the "Last updated" date above and, where appropriate, notify you. Continuing to use the Service after changes take effect means you accept the updated Policy.
Questions about this Privacy Policy or your data? Contact us at [email protected].