Privacy Policy

Overview

This Privacy Policy explains how Optofriend ("Optofriend", "we", "our", or "us") collects, uses, shares, and protects information when you use our websites, applications, YouTube optimization tools, analytics reports, content, community, and related services (collectively, the "Services"). This policy applies to visitors, account holders, subscribers, and users who connect a Google or YouTube account to Optofriend.

Optofriend provides AI-assisted YouTube SEO, transcript, keyword, video idea, channel audit, and analytics workflows. To provide those Services, we process information you provide, information generated by your use of the Services, information received from integrated services that you authorize, and limited technical information collected automatically.

Information We Collect

Account information: We collect information needed to create and manage your account, such as your name, email address, authentication identifiers, avatar, account preferences, onboarding answers, subscription status, and support communications.

Google and YouTube account information: If you choose to sign in with Google or connect a YouTube account, we collect information returned by Google and YouTube that is needed to provide the connected features, such as your Google account identifier, Google email address, Google profile name, YouTube channel ID, channel title, channel thumbnail, subscriber count, video count, view count, connected OAuth scopes, token status, token expiry, and synchronization status.

YouTube optimization content: We collect the inputs you submit to the Services, such as YouTube video URLs, channel URLs, titles, descriptions, tags, keywords, transcripts, video ideas, notes, affiliate links, custom links, report goals, and generated outputs. We may also collect public YouTube video, channel, transcript, comment, metadata, and performance information needed to generate requested results.

YouTube Analytics information: If you connect a YouTube account, we request read-only access to YouTube Analytics reports for that account. We use that access to retrieve metrics and dimensions such as views, watch time, average view duration, subscribers gained or lost, traffic sources, geography, videos, dates, and other report fields made available through the YouTube Analytics API for your channel.

Billing information: If you purchase a paid plan, Stripe processes your payment details. We receive and store limited billing records such as Stripe customer identifiers, checkout session identifiers, subscription status, price or plan identifiers, renewal dates, cancellation status, and invoice or portal metadata. We do not store full payment card numbers.

Usage, device, and log information: We collect technical information such as IP address, browser type, device type, operating system, referring pages, pages viewed, dates and times of access, feature usage, error logs, and security events. We use this information to operate, secure, debug, measure, and improve the Services.

How We Use Information

We use information to provide, operate, secure, maintain, and improve the Services; authenticate users; generate YouTube SEO recommendations; create transcripts, timestamps, titles, descriptions, tags, audits, and analytics reports; save user history; process subscriptions; respond to support and privacy requests; detect abuse and security issues; comply with legal obligations; and communicate service, account, billing, and policy updates.

We do not sell personal information. We do not use Google user data or YouTube API Data to serve targeted advertising. We do not use Google user data or YouTube API Data to train generalized AI or machine learning models.

YouTube API Services

Optofriend uses YouTube API Services. By using features that access YouTube content or by connecting a YouTube account, you acknowledge that YouTube API Services data is also governed by the YouTube Terms of Service and the Google Privacy Policy.

Public YouTube tools may use YouTube API Services to retrieve public video and channel information, such as video IDs, channel IDs, titles, descriptions, thumbnails, tags, statistics, comments, transcripts, privacy status, publication dates, and public channel metadata. Connected-account features use Google OAuth and request the following scopes: email, profile, YouTube read-only access, and YouTube Analytics read-only access.

When you connect a YouTube account, we use authorized YouTube data only to provide account-aware Services, including channel connection, YouTube analytics reports, channel audits, owner-only insights, recommendations, dashboard history, account status, and troubleshooting. We store OAuth access and refresh tokens in encrypted form so we can refresh read-only access when needed. We do not use these scopes to upload videos, modify videos, post comments, manage playlists, subscribe to channels, or take other write actions on YouTube.

You may disconnect a YouTube account in Optofriend, delete your Optofriend account, or request deletion by contacting support@optofriend.com. Following any of those actions, we delete stored Authorized Data associated with the connection as soon as reasonably possible and within 7 calendar days, except for information we must retain for legal, security, fraud-prevention, or billing reasons, and except for aggregated or de-identified information that no longer identifies you. You may also revoke Optofriend's access through Google security settings. If you revoke access through Google and we detect or are notified of that revocation, we delete stored Authorized Data associated with the connection as soon as reasonably possible and within 30 calendar days, subject to the same exceptions.

When you request AI-assisted analytics recommendations or similar connected-account features, we send selected Google user data and YouTube API Data to OpenAI to generate the result you requested. Depending on the feature, this data may include channel and video identifiers, video titles, descriptions, tags, transcripts or transcript summaries, views, likes, comments, watch-time and subscriber metrics, traffic and performance information, and the goals or instructions you provide. We send keywords and topics, including keywords or topics derived from that data, to DataForSEO to retrieve search-volume and keyword-research information. By choosing to run those features, you instruct us to make these limited transfers to provide the requested result. These providers process the data on our behalf for the requested feature and may not use it for targeted advertising or to train generalized AI or machine learning models.

Google Analytics

We use Google Analytics to understand how visitors and users interact with the Services and to improve performance, reliability, content, and product decisions. Google Analytics may collect first-party cookies, device and browser information, approximate location derived from IP address, pages visited, referring pages, time spent, interactions, and other usage events. Google states that Google Analytics does not log or store IP addresses when collecting Analytics data.

Google Analytics data is used for measurement and reporting. We do not send names, email addresses, payment details, or YouTube OAuth tokens to Google Analytics. You can control cookies through your browser settings and may use the Google Analytics Opt-out Browser Add-on where available.

Cookies and Tracking Technologies

Essential Cookies: Required for authentication, session management, and core functionality. These cannot be disabled.

Analytics Cookies: We use analytics services to understand how our Services are used. On our marketing website, we provide a cookie consent banner that requires opt-in consent in GDPR and other privacy-regulated jurisdictions, and provides opt-out capability elsewhere.

Advertising Cookies: We use advertising conversion tracking to measure the effectiveness of our advertising campaigns. The same consent mechanisms apply as for analytics cookies on our marketing website.

How We Share Information

We share information with service providers only as needed to provide, secure, support, measure, and improve the Services. These providers may process information for hosting, storage, backup, authentication, YouTube and Google APIs, analytics, payments, customer support, email, AI processing, transcript retrieval, keyword research, search data, fraud prevention, logging, and security.

We may also disclose information if reasonably necessary to comply with law, regulation, subpoena, court order, or governmental request; enforce our Terms of Service; investigate possible violations; detect, prevent, or address fraud, spam, abuse, security, or technical issues; protect the rights, property, or safety of Optofriend, our users, or the public; or complete a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections for personal information.

Service Providers

We use the following categories of service providers in connection with the Services. Providers may process data in the United States, the European Union, the United Kingdom, or other locations where they or their sub-processors operate.

Security

We use technical and organizational safeguards designed to protect personal information, including HTTPS, access controls, encrypted storage for sensitive OAuth tokens, credential filtering in logs, and monitoring for reliability and security issues. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Retention

We retain information for as long as reasonably needed to provide the Services, maintain account and billing records, preserve user history, comply with legal obligations, resolve disputes, enforce agreements, protect security, prevent fraud or abuse, and improve the Services. We may retain aggregated or de-identified information that no longer identifies you. Authorized Data associated with a connected account is deleted as soon as reasonably possible and within 7 calendar days after you disconnect the account in Optofriend, delete your Optofriend account, or make a verified deletion request. If you revoke access through Google security settings, we delete the associated Authorized Data as soon as reasonably possible and within 30 calendar days after we detect or are notified of the revocation. These periods are subject to legal, security, fraud-prevention, billing, and de-identified data exceptions.

Your Choices and Rights

You can access, update, export, or delete certain information through the Services where those features are available. You can request access, correction, deletion, restriction, portability, or objection by contacting support@optofriend.com. We may need to verify your identity before responding. Some information may be retained where permitted or required by law, including for security, fraud prevention, billing, tax, accounting, legal compliance, dispute resolution, and backup integrity.

You can unsubscribe from marketing emails by using the unsubscribe link in those emails or by contacting us. Service, billing, security, legal, and account messages may still be sent where necessary to provide the Services.

Cookie Preferences: On our marketing website, you can manage your cookie preferences through the cookie settings accessible from the website footer.

You can revoke connected Google or YouTube access through Google security settings. You can control Google Analytics collection through browser settings and the Google Analytics Opt-out Browser Add-on.

European Union, EEA, United Kingdom, and Switzerland

If you are in the EU, EEA, United Kingdom, or Switzerland, our legal bases for processing personal information may include performance of a contract, legitimate interests, consent, and compliance with legal obligations. Legitimate interests include operating, securing, improving, and measuring the Services; communicating with users; preventing fraud and abuse; and developing product features users request or expect.

EEA, UK, and Swiss Users (GDPR): You have the right to withdraw consent at any time, request restriction of processing, object to processing based on legitimate interests, and lodge a complaint with your local data protection supervisory authority. You may also have rights to access, correct, delete, or request portability of your personal information. Withdrawing consent does not affect processing that occurred before withdrawal.

We and our service providers may transfer personal information internationally. Where required, we use appropriate safeguards such as data processing agreements, Standard Contractual Clauses, and other lawful transfer mechanisms.

United States Privacy Rights

California Users (CCPA/CPRA): You have the right to know what personal information we collect and how it is used, the right to request deletion, the right to opt out of the sale of personal information, and the right to opt out of the sharing of personal information for cross-context behavioural advertising. See the How We Share Information and Cookies and Tracking Technologies sections above for details.

Depending on your state of residence, including California and other U.S. states with consumer privacy laws, you may also have rights to access personal information, correct inaccurate personal information, receive a portable copy, opt out of certain processing, and appeal a denied request. We do not sell personal information. We do not share personal information for cross-context behavioral advertising as those terms are used in California privacy law.

We do not knowingly collect sensitive personal information for the purpose of inferring characteristics about you. We do not discriminate against users for exercising privacy rights. To exercise rights, contact support@optofriend.com.

Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact support@optofriend.com and we will take appropriate steps to delete it.

Third-Party Websites and Embeds

The Services may link to or embed third-party websites, videos, APIs, tools, or content, including YouTube videos. This Privacy Policy does not apply to third-party services that we do not own or control. Their privacy practices are governed by their own policies.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you by posting the updated policy through the Services, by email, or by another reasonable method. The updated policy is effective when posted unless it states otherwise.

Contact Us

If you have questions, complaints, or requests about this Privacy Policy or our privacy practices, contact us at support@optofriend.com.