Privacy Policy

Effective Date: October 26, 2026

‍

1. Introduction and Scope

Dragonfruit Media Co ("Dragonfruit Media," "we," "us," or "our") operates a YouTube analytics platform that helps YouTube channel owners track and understand the performance of their video content. Our platform collects YouTube channel and video data through Google's APIs, stores it in a secure database, and displays it in a private analytics dashboard.

‍

This Privacy Policy describes how we collect, use, share, and protect personal data in connection with our platform and services. It applies to YouTube channel owners who connect their channels to our platform through Google's OAuth authorization process, to people who give us their contact details through a sign-up form we provide (for example, one reached by scanning a QR code), and to any visitors to our website at dragonfruitmedia.co.

‍

By authorizing access to your YouTube channel data through our OAuth flow, you acknowledge that you have read and understand this Privacy Policy.

‍

2. What Data We Collect

When a YouTube channel owner connects their channel to our platform through Google's OAuth authorization process, we request access to the following data through Google's APIs:

‍

YouTube Data API (youtube.readonly scope): Channel metadata and video metadata, including channel names, video titles, publish dates, durations, tags, descriptions, and visibility status.

YouTube Analytics API (yt-analytics.readonly scope): Video and channel performance analytics, including viewership, engagement, audience, traffic, and subscriber metrics as made available through the YouTube Analytics API.

‍

We collect this data on a recurring, automated basis to track channel performance over time.

‍

OAuth Credentials: We store an OAuth refresh token for each connected channel. This token allows our platform to continue accessing the channel's analytics data without requiring the channel owner to re-authorize each time. We do not store your Google account password. We never have access to your Google account password.

‍

Information You Provide Directly: If you contact us by email, we collect the information you include in that correspondence, such as your name and email address.

‍

Sign-Up Form Information: If you complete our sign-up form, we collect your name, email address, and phone number, and we record whether you told us you have a YouTube channel. We store these details in our project-management system, ClickUp. We use them to contact you by phone call, text message, and email about Dragonfruit Media Co's services and about connecting your channel. Message and data rates may apply. You can reply STOP to any text message, or tell us in any call or email, that you do not want to be contacted, and we will stop. If you answer yes to having a YouTube channel, you are then taken to Google's own permission screen, where you choose whether to share read-only access to your channel data. The Google data we collect after that is described above.

‍

Automatically Collected Information: Our analytics dashboard may collect basic usage data such as IP address, browser type, and access times through standard web server logs. We do not use tracking pixels, advertising cookies, or behavioral analytics on our platform.

‍

3. How We Use Your Data

We use the data described to provide and improve our analytics service. We display YouTube channel analytics in a private dashboard accessible only to the channel owner and authorized members of the Dragonfruit Media team.

‍

Specifically, we use the data to:

* Provide per-video and channel-level performance metrics over time
* Help channel owners and their teams understand content performance trends
* Maintain and improve the reliability and security of our platform
* Respond to support requests and communications from channel owners
* Analyze aggregated and anonymized data across channels to develop benchmarks and improve the accuracy and usefulness of the platform
* Contact people who submit our sign-up form, by phone call, text message, and email, about our services and about connecting their channel

‍

We do not use your Google user data for advertising, marketing, profiling, sale to third parties, credit assessment, or any purpose other than providing analytics services to you. We do not use the contact details you give us through our sign-up form for any purpose other than contacting you about our services and responding to your request.

‍

4. Legal Bases for Processing

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

* Contractual Necessity: We process your YouTube channel data and OAuth credentials because it is necessary to perform the analytics service you authorized when you connected your channel. Without this data, we cannot provide the service.
* Legitimate Interest: We process basic usage data (such as server logs) and maintain the security of our platform based on our legitimate interest in operating a secure and reliable service.
* Consent: Where required by applicable law, we rely on your consent, which you provide when you authorize access to your YouTube data through Google's OAuth flow, and, for the contact details you give us through our sign-up form, when you submit that form. You may withdraw consent at any time by revoking access (see Section 7) or by telling us you no longer wish to be contacted.

‍

5. We Do Not Share Your Data

We do not sell, rent, license, or trade your personal data or your Google user data to any third party.

‍

We do not share your data with third parties for their own independent purposes, including advertising or marketing.

‍

We use a limited number of third-party service providers for database hosting, application hosting, project management, and access to Google's YouTube APIs. Our project-management provider, ClickUp, stores the contact details you give us through our sign-up form. These providers process data on our behalf and under our instructions and do not have independent rights to use your data. We do not use advertising networks, behavioral analytics providers, or data brokers.

‍

We do not share your phone number or your text-message consent with any third party or affiliate for their own marketing purposes.

Your data is accessible only to authorized Dragonfruit Media team members who are directly involved in managing your channel analytics.

‍

We may disclose your data if required to do so by law, regulation, court order, or other legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of Dragonfruit Media, our users, or the public.

‍

6. YouTube API Services Compliance

Our platform uses YouTube API Services provided by Google LLC. By connecting your YouTube channel to our platform, you also agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms) and acknowledge Google's Privacy Policy (https://policies.google.com/privacy).

‍

Google API Services User Data Policy: Dragonfruit Media's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can review this policy at https://developers.google.com/terms/api-services-user-data-policy.

‍

Revoking Access: You may revoke Dragonfruit Media's access to your YouTube data at any time through your Google Account security settings at https://myaccount.google.com/connections. Revoking access will immediately stop all future data collection from your channel. To request deletion of data already collected, see Section 7.

‍

7. Data Retention and Deletion

We retain your channel analytics data for as long as your channel is connected to our platform. This allows us to provide historical performance comparisons over time.

‍

Retention After Service Period: When a channel is no longer actively managed by Dragonfruit Media, we retain all analytics data that was collected during the service period. This data was collected with your authorization while the channel was connected to our platform and is retained for historical reference purposes. No new data is collected after the service relationship ends or after OAuth access is revoked.

‍

Sign-Up Form Contact Details: We keep the name, email address, and phone number you give us through our sign-up form for as long as we are in touch with you about our services. You can ask us to delete them at any time by emailing admin@dragonfruitmedia.co, and we will delete them within 30 calendar days of receiving your request.

‍

Requesting Deletion: You may request full deletion of your data at any time, whether during or after the service period, by emailing us at clients@dragonfruitmedia.co. Upon receiving your request, we will:

* Remove your OAuth refresh token, stopping all future data collection
* Delete all stored analytics data associated with your channel
* Confirm deletion to you by email

‍

We will complete this process within 30 calendar days of receiving your request. Once deleted, your data cannot be recovered. We may retain data in aggregated and anonymized form that cannot be linked back to your channel, for purposes of maintaining and improving the platform.

‍

Revoking Access via Google: You can also revoke our access at any time directly through your Google Account at https://myaccount.google.com/connections. Revoking access through Google immediately stops all future data collection but does not automatically delete data already collected. To delete previously collected data, please email us as described above.

‍

8. How We Protect Your Data

We implement industry-standard security measures to protect your data from unauthorized access, alteration, disclosure, or destruction:

* Encryption in Transit: All connections to our database, APIs, and dashboard use HTTPS/TLS encryption.
* Encryption at Rest: OAuth refresh tokens and analytics data are stored in an encrypted, access-controlled database that requires authentication to access.
* Access Controls: Only authorized Dragonfruit Media team members have access to the database and hosting infrastructure. Access is limited to personnel who require it to operate and maintain the platform.
* Read-Only Access: Our platform accesses YouTube data in read-only mode. The platform cannot modify, delete, or post content to your YouTube channel.

‍

No method of transmission over the internet or electronic storage is completely secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security.

‍

9. International Data Transfer

Our platform and service providers are based in the United States. If you are located outside of the United States, your data will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

‍

By connecting your YouTube channel to our platform, you consent to the transfer of your data to the United States for processing as described in this Privacy Policy.

‍

If you are located in the EEA, UK, or Switzerland, we rely on your explicit consent and, where applicable, standard contractual clauses or other approved transfer mechanisms to lawfully transfer your data to the United States.

‍

10. Your Rights

All Users

Regardless of your location, you have the right to:

* Access: Request information about what personal data we hold about you.
* Deletion: Request that we delete your personal data and disconnect your channel from our platform.
* Revocation: Revoke our access to your YouTube data at any time through your Google Account settings.

‍

To exercise any of these rights, email us at admin@dragonfruitmedia.co. We will respond to your request within 30 days.

‍

European Economic Area, United Kingdom, and Swiss Residents

If you are located in the EEA, UK, or Switzerland, you have additional rights under the GDPR, including:

* Rectification: Request correction of inaccurate personal data.
* Restriction: Request that we restrict the processing of your personal data under certain circumstances.
* Data Portability: Request a copy of your personal data in a structured, commonly used, machine-readable format.
* Objection: Object to the processing of your personal data based on legitimate interests.
* Withdrawal of Consent: Withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing that occurred before withdrawal.
* Complaint: Lodge a complaint with your local data protection authority. A list of EEA supervisory authorities is available at https://edpb.europa.eu/about-edpb/board/members_en. UK residents may contact the Information Commissioner's Office (ICO) at https://ico.org.uk.

‍

To exercise any of these rights, email us at admin@dragonfruitmedia.co.

‍

11. Third-Party Links

Our platform or website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third-party sites. We encourage you to review the privacy policy of any third-party site you visit.

‍

12. Intellectual Property

All data collected from your YouTube channel remains your data. We do not claim ownership of your YouTube channel data, video content, or any intellectual property associated with your channel.

‍

The Dragonfruit Media platform, including its design, code, and interface, is the property of Dragonfruit Media Co and is protected by applicable intellectual property laws. You may not copy, modify, distribute, or reverse-engineer any part of the platform.

‍

If you provide us with feedback, suggestions, or ideas about the platform, you grant us the right to use that feedback for any purpose, including improving the platform, without any obligation or compensation to you.

‍

13. Children's Privacy

Our platform is not directed at children under the age of 13 (or under the age of 16 in the EEA/UK). We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child, we will take steps to delete that data promptly. If you believe we have inadvertently collected data from a child, please contact us at clients@dragonfruitmedia.co.

‍

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. If we make material changes, we will update the "Effective Date" at the top of this page and, where required by law, notify affected users by email.

We encourage you to review this Privacy Policy periodically.

‍

15. Contact Us

If you have questions about this Privacy Policy, your data, or wish to exercise any of the rights described above, contact us at:

Dragonfruit Media Co

‍
Email: admin@dragonfruitmedia.co
Website: https://dragonfruitmedia.co

‍