Legal

Privacy Policy

Effective date: February 1, 2025

Popco Media is committed to protecting your privacy. This policy explains what data we collect, why we collect it, how we use it, and your rights regarding that data. We do not sell your personal information to third parties.

1.Data We Collect

We collect the following categories of personal data:

Account Data (Google Sign-In)

  • Name and email address from your Google account
  • Google account profile picture
  • Google account ID (for authentication)

YouTube Data (Optional, only if you connect your channel)

  • YouTube channel ID and display name
  • Video statistics (views, likes, comments) for videos associated with active campaigns
  • Channel subscriber count and aggregate analytics
  • Read-only YouTube Analytics data for campaign reporting

We never access, store, or modify your private messages, playlists, or non-campaign videos.

Payment Data (Stripe)

  • Payment confirmation details (amount, date, status)
  • Stripe Customer ID (a tokenized reference)
  • Billing country and postal code (for tax purposes)

We never store your full card number, CVV, or raw payment credentials. All payment processing is handled by Stripe, Inc. directly.

Campaign Data

  • YouTube video URL submitted for promotion
  • Selected campaign tier, genres, and geographies
  • Campaign status history and delivery metrics

Usage and Technical Data

  • IP address and approximate geolocation
  • Browser type, operating system, device type
  • Pages visited and actions taken on our platform
  • Session cookies for authentication

2.How We Use Your Data

We use the data we collect for the following purposes:

  • Account management: To create and maintain your account, authenticate your sessions, and send transactional emails.
  • Campaign delivery: To set up, launch, and manage your Google Ads campaign using the video URL and targeting preferences you provide.
  • Analytics and reporting: To populate your dashboard with real-time view counts, subscriber growth, and campaign metrics from the YouTube Data API.
  • Payment processing: To process campaign payments and issue refunds through Stripe.
  • Guarantee calculations: To determine whether your campaign qualifies for a pro-rata refund under our money-back guarantee.
  • Service improvement: To analyze aggregate platform usage patterns and improve our campaign management tools.
  • Legal compliance: To comply with applicable laws, regulations, and legal processes.

We do not use your data to train machine learning models, build advertising profiles, or sell to third-party data brokers.

3.YouTube API Data: Special Disclosures

Popco Media uses the YouTube Data API v3 and YouTube Analytics API to provide campaign analytics. Our use of YouTube API data is governed by the YouTube API Services Terms of Service and Google's Privacy Policy.

What we access:

  • Public video statistics for campaign videos (read-only)
  • Channel-level analytics for channels associated with active campaigns

What we never access:

  • Private videos or unlisted content
  • YouTube inbox or community posts
  • Videos not associated with active campaigns
  • Account billing or financial information

You can revoke Popco Media's access to your YouTube data at any time by visiting Google Account Security Settings. Revoking access disables real-time dashboard analytics but does not cancel any active campaigns.

YouTube API data stored in our system is retained only for the duration of the associated campaign plus 90 days for reporting purposes, after which it is deleted.

4.Data Sharing and Third Parties

We share your data with the following service providers only to the extent necessary to deliver our service:

Stripe, Inc.

Payment processing

Google LLC

Google Ads campaign delivery and YouTube API access

Resend

Transactional email delivery

Railway / Neon

Cloud infrastructure and database hosting

We do not sell, rent, or trade your personal information to any third party for marketing, advertising, or any other commercial purpose.

5.Cookies and Tracking

Popco Media uses the following cookies and storage mechanisms:

Session Cookie (next-auth.session-token)

Essential

Maintains your authenticated session. Required to use the platform.

CSRF Token Cookie

Essential

Prevents cross-site request forgery attacks.

We do not use third-party tracking cookies, advertising pixels, or behavioral analytics tools (e.g., Google Analytics, Facebook Pixel) on our platform.

6.Data Retention

We retain your data for the following periods:

  • Account data: Retained until you delete your account
  • Campaign data: Retained indefinitely for billing and dispute resolution
  • YouTube API data: 90 days after campaign completion, then deleted
  • Payment records: 7 years (legal requirement for financial records)
  • Server logs: 30 days, then automatically purged

7.Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you have the following rights regarding your personal data:

  • Access: Request a copy of all personal data we hold about you.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your account and associated data (subject to legal retention requirements).
  • Portability: Request your data in a machine-readable format.
  • Objection: Object to processing based on our legitimate interests.
  • Opt-Out of Sale: We do not sell personal data. This right is therefore always satisfied.

To exercise any of these rights, email privacy@popco.media. We will respond within 30 days for GDPR requests and 45 days for CCPA requests. You will not be required to pay a fee to exercise your rights.

8.Data Security

Popco Media implements industry-standard security measures to protect your data:

  • All data is transmitted over TLS 1.2+ encrypted connections
  • Database access is restricted to authenticated application servers
  • Payment data is handled entirely by Stripe and never touches our servers
  • OAuth tokens are stored encrypted at rest
  • Access to production systems is restricted to authorized team members with MFA

In the event of a data breach affecting your personal data, we will notify affected users within 72 hours of discovery, as required by GDPR Article 33.

9.Children's Privacy

Popco Media is not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a user is under 18, we will promptly delete their account and associated data. If you believe a minor has created an account, please contact privacy@popco.media.

10.Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email at least 14 days before taking effect. The effective date at the top of this page will always reflect the most recent version.

Continued use of Popco Media after the effective date of a revised policy constitutes your acceptance of the changes.

11.Contact

For privacy questions, data requests, or to report a concern, contact our Privacy team:

Popco Media, Inc. Privacy Team
Email: privacy@popco.media