Privacy Policy

1. Who We Are

The Application is developed and operated solely by Elkira Studio for internal business purposes. It is used exclusively by our team to monitor the performance of YouTube channels that we own and manage. The Application is not distributed to or used by any third parties.

2. What Data We Collect

When a team member authorizes a YouTube channel via Google OAuth 2.0, the Application collects the following data through the Google API:

3. How We Use the Data

All data collected is used solely for the following internal purposes:

• • Display real-time and historical performance metrics (views, watch time, subscribers) on our internal dashboard.
• • Display revenue estimates to authorized admin team members for internal business reporting.
• • Alert the team to unusual channel activity (e.g., suspected demonetization).
• • Automatically refresh analytics data every 30 minutes via scheduled background sync.

We do not: sell, share, rent, or transmit any collected data to any third party. We do not use the data for advertising, marketing, or any purpose outside of internal operations.

4. Data Storage & Security

All data is stored on a private VPS server (Windows Server 2019) operated solely by Elkira Studio. The server is not accessible to the public on the application port. Access to the Application is protected by username/password authentication with role-based access control.

• • Data is stored in a PostgreSQL 16 database accessible only on localhost.
• • HTTPS is enforced via TLS (Let's Encrypt certificate through Caddy).
• • OAuth client secrets are stored as files on the server with restricted access.
• • Only authorized Elkira Studio team members have login access to the Application.
• • Revenue data is visible only to users with the "admin" role.

5. Data Retention

Analytics snapshots (views, revenue, subscriber data) are retained for up to 90 days of daily history per channel. Aggregated monthly revenue data is retained for up to 35 months. OAuth tokens are retained as long as the channel is registered in the Application. When a channel is removed from the Application, all associated tokens and metrics data are permanently deleted from our database.

6. Access to Data

Access to the Application is limited exclusively to authorized members of Elkira Studio's internal team. No external users, clients, or third parties have access. The Application is not open for public registration — accounts are created only through an internal invitation system controlled by the admin.

7. Google API Services

This Application uses Google API Services. Our use of information received from Google APIs adheres to the Google API Services User Data Policy , including the Limited Use requirements.

Data obtained through Google APIs is used only for the purposes described in this Privacy Policy. We do not use Google user data for serving advertisements, nor do we allow humans to read user data unless it is necessary for security purposes, to comply with applicable law, or when the user has given explicit permission.

8. Your Rights & Revoking Access

As this Application is restricted to internal team members, data subject rights are managed directly by the Elkira Studio admin. If you wish to revoke the Application's access to your YouTube channel data, you may do so at any time by:

• • Visiting Google Account Permissions and revoking access for "Elkira YT Channel Analytic".
• • Contacting us at elkirastudio@gmail.com to have your channel and all associated data removed from our system.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the effective date at the top of this page. Continued use of the Application after any changes constitutes acceptance of the new policy.

10. Contact

For any questions or concerns about this Privacy Policy or our data practices, please contact us: