Privacy Policy

This policy explains how ChannelOrbit collects, uses, and protects your personal data in compliance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679).

Data controller: ChannelOrbit, Clément Senac, 26 rue Bosquet, 75007 Paris.

Email: legal@channelorbit.online

We collect the following categories of personal data:

• Account data: email address, password (hashed), display name.
• Channel data: YouTube channel URL, channel description, content language preference.
• Usage data: analysis history, dashboard preferences, favorites.
• Payment data: processed by Stripe. We do not store credit card numbers.
• Technical data: IP address, browser type, access logs (for security purposes).

Your data is processed for the following purposes:

• Provide the analytics service (legal basis: contract performance).
• Process payments (legal basis: contract performance).
• Send service notifications (legal basis: legitimate interest).
• Improve the service (legal basis: legitimate interest).

We do NOT sell your data. We do NOT use your data for advertising.

We share data only with the following service providers:

• Supabase (database hosting, EU region) — Data Processing Agreement in place.
• Vercel (application hosting) — Data Processing Agreement in place.
• Stripe (payment processing) — Data Processing Agreement in place.
• OpenAI (AI analysis; data sent: anonymized channel metrics and comments) — Data Processing Agreement in place.
• YouTube Data API (public video data retrieval).

No other third parties receive your data.

• Account data: retained while your account is active + 30 days after deletion.
• Analysis data: retained while your account is active.
• Payment records: retained for 10 years (French accounting obligation).
• Logs: retained for 12 months.

Under the GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Delete your account and data (“right to be forgotten”).
• Export your data (portability).
• Object to processing.
• Withdraw consent.

Contact: legal@channelorbit.online. We respond within 30 days.

If unsatisfied, you may contact the CNIL (French data protection authority).

We use only strictly necessary cookies for authentication and session management. No advertising or tracking cookies are used.

No cookie consent banner is required for strictly necessary cookies under GDPR.

We implement appropriate technical and organizational measures to protect your data:

• Encrypted connections (HTTPS/TLS).
• Hashed passwords.
• Row Level Security on database.
• Access controls and least-privilege principles.

In case of a data breach, we will notify affected users and the CNIL within 72 hours as required by GDPR.

Some data may be processed outside the EU (Vercel, OpenAI, Stripe). These transfers are protected by Standard Contractual Clauses (SCCs) or adequacy decisions as required by GDPR.

ChannelOrbit is not intended for users under 18 years of age. We do not knowingly collect data from minors.

We may update this privacy policy from time to time. Material changes will be communicated via email with 30 days notice before they take effect.

For any questions or requests regarding this privacy policy, contact us at legal@channelorbit.online.