Privacy Policy

How Younalyse collects, uses, and protects your personal data.

1. Who We Are

Younalyse is a YouTube analytics SaaS platform operated by:

• Controller: Ilia Udalov (Autónomo)
• Address: C/ Inmaculada del Pla 11, P02-D, 03013 Alicante, Spain
• NIF: Z3531265B
• Email: support@younalyse.com
• Website: younalyse.com

As the data controller, we determine the purposes and means of processing your personal data as described in this Privacy Policy.

Payments on Younalyse are processed by Paddle.com Market Limited (Merchant of Record), which has its own Privacy Notice at paddle.com/legal/privacy.

2. Data We Collect

2.1 Account Data

When you register and use Younalyse, we collect:

• Email address — used for login, notifications, and support
• Name (optional) — displayed in your profile
• Password — stored as a bcrypt hash; we never store plaintext passwords
• Subscription tier and status — to deliver the correct plan features
• Date of account creation and last activity

2.2 Usage Data

• YouTube channels and keywords you add to your watchlist
• Analysis runs you launch and their results (cached on our servers)
• Export history (PDF, XLSX, Markdown downloads)
• Subscription add-on purchases and usage counters

2.3 Technical Data

• IP address (used for security and abuse prevention)
• Browser type and version
• Device type and operating system
• Session tokens (stored in your browser)
• Log data: timestamps of API requests, error logs

2.4 Payment Data

We do not store payment card details. All payment processing is handled by Paddle.com Market Limited. We receive only a transaction reference, subscription status, and the amount paid.

2.5 Data You Provide Indirectly

When you use our AI-powered comment analysis feature, the content of YouTube comments from public videos is processed by Anthropic's Claude API. This data belongs to YouTube users and is public; we do not store it beyond the analysis session cache (90-day TTL).

3. How We Use Your Data

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR) — processing necessary to deliver the Younalyse service you subscribed to.
• Legitimate interest (Art. 6(1)(f) GDPR) — security, fraud prevention, service analytics, and improving our product. We conduct balancing tests to ensure our interests do not override your rights.
• Legal obligation (Art. 6(1)(c) GDPR) — retaining transaction records and responding to lawful requests from authorities.
• Consent (Art. 6(1)(a) GDPR) — marketing emails and non-essential cookies. You may withdraw consent at any time.

5. Sharing Your Data

We do not sell your personal data. We share it only with the following sub-processors, under data processing agreements, to the extent necessary to provide the service:

We may also disclose your data where required by law, court order, or to protect the rights and safety of Younalyse, our users, or the public.

6. International Data Transfers

Some of our sub-processors are located outside the EEA (Anthropic, Vercel, Scrape Creators are US-based). Transfers to the US are made under:

• EU Standard Contractual Clauses (SCCs) — pre-approved transfer mechanism under GDPR Art. 46(2)(c).
• EU–US Data Privacy Framework — where the sub-processor is certified.

You may request a copy of the applicable safeguards by contacting us at support@younalyse.com.

7. Data Retention

• Account data — retained for the duration of your account plus 30 days after deletion request, then permanently deleted.
• Analysis cache — YouTube video metadata and transcripts: 90-day TTL, then deleted.
• Transaction records — retained for 7 years as required by Spanish and EU tax law.
• Server logs — retained for 30 days, then deleted.
• Marketing consent records — retained until you withdraw consent, plus 3 years for dispute resolution.

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — request deletion of your data. Note: we may retain data required by law (e.g. transaction records).
• Right to restriction — ask us to limit how we process your data in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests, including profiling.
• Right to withdraw consent — for processing based on consent (marketing, non-essential cookies). Withdrawal does not affect the lawfulness of prior processing.
• Right to lodge a complaint — with the Spanish supervisory authority (Agencia Española de Protección de Datos, aepd.es) or the supervisory authority in your country of residence.

To exercise any of these rights, email us at support@younalyse.com. We will respond within 30 days.

9. Cookies

We use cookies and similar technologies. A detailed breakdown is available in our Cookie Policy. In summary:

• Essential cookies — required for authentication and session management. Cannot be disabled.
• Analytics cookies — used to understand how the service is used. Activated only with your consent via the cookie banner.

You can manage your cookie preferences at any time via the cookie banner on our site or by contacting us.

10. Security

We implement the following technical and organisational measures to protect your data:

• All data in transit is encrypted via TLS 1.2+
• Data at rest is encrypted by Supabase (AES-256)
• Passwords are hashed using bcrypt
• Access to production systems is restricted to authorised personnel only
• Row-Level Security (RLS) enforced at database level

In the event of a data breach that poses a risk to your rights, we will notify the relevant supervisory authority within 72 hours and inform affected users without undue delay.

11. Children

Younalyse is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you by email (at the address associated with your account) at least 14 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the current version.

Continued use of Younalyse after the effective date constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions, requests, or complaints:

• Email: support@younalyse.com
• Controller: Ilia Udalov (Autónomo), C/ Inmaculada del Pla 11, P02-D, 03013 Alicante, Spain

We aim to respond to all requests within 5 business days and in any case within 30 days as required by GDPR.