1) Principle

We take the protection of your privacy seriously. We collect and process personal data only as needed to provide our services, in compliance with applicable laws including the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP). We store data only for as long as necessary to deliver services or as required by law and safeguard it with appropriate technical and organizational measures.

2) Data Protection Officer

Legal Services – General Law, Designs, and Enforcement

Email: info@adbounty.com

3) What Data We Collect

We may collect the following categories of data:

• Website and service usage data (cookies, device/browser information, IP address).
• Contact and account information you provide (e.g., name, email).
• Google OAuth data received with your consent:
  • openid, profile, email: Google Account ID (subject), basic profile information (name, avatar URL if available), and email address.
  • YouTube Data API (read-only): channel identifiers, basic channel metadata, subscriptions list visibility (if applicable), playlists metadata, public video metadata, watch history visibility (if applicable), and other read-only YouTube resources permitted by youtube.readonly.
  • YouTube Analytics API (read-only): aggregated analytics metrics (views, watch time, audience demographics, traffic sources, retention, revenue metrics if applicable) permitted by yt-analytics.readonly.

We do not request or store your Google password.

4) Purpose and Legal Basis of Processing

We process your data for the following purposes:

• To authenticate you and create/manage your account using Google Sign-In (openid, profile, email).
• To display and analyze your YouTube channel performance using read-only access to YouTube Data and YouTube Analytics APIs.
• To provide dashboards, insights, and reports to you based on your channels' data. YouTube audience demographics are stored privately and are not published on public profiles or creator listings.
• When you explicitly approve it, to share a connected channel's current and future audience demographics with a named advertiser until you revoke that advertiser's access in Creator Settings.
• To operate, maintain, secure, and improve our services (including debugging, fraud prevention, and usage analytics).
• To communicate with you regarding service updates, support, and legal notices.

Legal bases under GDPR/FADP may include your consent (for connecting your Google account and channels), performance of a contract (providing features you request), legitimate interests (service improvement and security), and compliance with legal obligations.

5) Limited Use and Data Minimization

We use Google user data only to provide and improve user-facing features described in this policy:

• We request only read-only scopes.
• We do not sell Google user data.
• We do not share Google user data with third parties except:
  • As necessary to provide the service (e.g., secure hosting, analytics processors under contract),
  • To comply with applicable laws or valid legal process,
  • With your explicit consent, including audience-demographics access you grant to a named advertiser through a collaboration request.

We do not use Google user data for serving ads or for targeting unrelated products. We do not transfer Google user data to data brokers or for unrelated purposes.

6) Data Sharing and Transfers

• Service providers (processors) may process data on our behalf under confidentiality and data protection obligations.
• Data may be transferred to countries outside Switzerland/EEA where our providers operate. Where required, we use appropriate safeguards (e.g., standard contractual clauses).
• We may disclose data when legally required or to protect rights, safety, and security.

We do not disclose non-aggregated Google user data to the public. Any analytics shared externally are aggregated or anonymized, except for private audience-demographics access that a creator explicitly grants to a named, authenticated advertiser. We do not currently render this data publicly.

7) Data Retention and Deletion

• We retain Google OAuth tokens and related data only as long as needed to provide the service and for legitimate business needs (e.g., audit, security), then delete or irreversibly anonymize them.
• If you disconnect your Google account or request deletion:
  • We revoke tokens and stop data collection.
  • We delete associated Google user data from our systems within 30 days, unless retention is required by law or to resolve disputes.
  • After confirmed Google authorization revocation, we clear the stored YouTube audience-demographics snapshot. Access records may remain so that the creator can review and revoke prior grants.
• Cached reports and logs are purged on scheduled cycles consistent with the above.

You can request deletion at any time via info@adbounty.com or within the product (if a disconnect/remove account option is provided).

8) Your Controls and Choices

• Consent and Access: You decide whether to connect your Google account and which channels to include.
• Withdrawal: You may withdraw consent by disconnecting your Google account or emailing us. This will revoke access and initiate deletion of Google user data per Section 7.
• Demographics sharing: Sharing with an advertiser is optional and separate from accepting a collaboration. You can revoke an advertiser's ongoing access at any time under Creator Settings → Demographics Access.
• Rights: Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, and object to processing. We may request proof of identity to process your request.

9) Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, secure key management, least-privilege access, monitoring, and regular security reviews.

10) Cookies and Tracking

We use cookies and similar technologies to operate our website, keep our services secure, remember your preferences, and improve user experience. Functional cookies are required for security and basic functionality. Analytics cookies are optional and are only used when you allow analytics cookies through our cookie consent banner.

Your cookie preference is stored in your browser's local storage under adbounty_cookie_consent. You can also manage cookies via your browser settings. See "Third-Party Cookies and Tracking Technologies" for details about the analytics providers we use.

11) Google APIs and YouTube Developer Policies

Our use of information obtained via Google APIs, including YouTube Data and YouTube Analytics APIs, adheres to:

• Google API Services User Data Policy, including the Limited Use requirements.
• YouTube Terms of Service and YouTube API Services Policies.

We do not exceed read-only operations for the scopes requested and do not perform actions on your behalf (no uploads, edits, or deletions).

12) Children's Data

Anyone may browse Adbounty's public pages regardless of age. Adbounty's account and collaboration features are not directed to children. When an influencer under 18 participates through Adbounty, their parent or legal guardian must own and manage the account, provide any personal data associated with the minor, and manage collaborations on the minor's behalf. If we learn that a child provided personal data directly without appropriate parental or legal authorization, we will take reasonable steps to delete it.

13) Contact

For privacy questions, requests, or complaints:

Email: info@adbounty.com

Data Protection Authority (Switzerland): Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch)

14) Changes to This Policy

We may update this policy from time to time. The version published on our website is the current version. Where appropriate, we will notify you of significant changes via email or within the service.

Third-Party Cookies and Tracking Technologies

The following technologies are used on our website. Follow the links for details:

• Solution: Google Analytics
  Category/Purpose: Analytics
  Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  Use: Google Analytics loads with analytics storage denied until you accept analytics cookies. In this mode, it does not use analytics cookies and receives limited cookieless measurement data. If you accept analytics cookies, we send Google Analytics an analytics consent signal.
  Links: Privacy Policy | Opt-out
• Solution: Microsoft Clarity
  Category/Purpose: Analytics
  Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA
  Use: Clarity runs in cookieless mode before you make a cookie choice and after you reject analytics cookies. If you accept analytics cookies, we send Clarity an analytics consent signal so it may use analytics cookies according to your consent choice.
  Links: Privacy Policy | Opt-out