Privacy Policy

1. Information you give us

When you create an account or subscribe, we collect:

• Account details — your email address and, if you sign up with a password, a securely hashed password. We never store your password in plain text.
• Sign-in with Google — if you choose “Continue with Google”, Google sends us your email address, basic profile information such as your name and picture, and a stable identifier for your Google account. Sign-in requests only the standard sign-in scopes (openid, email, profile); we never receive your password, and signing in grants no access to Gmail, Google Drive, your calendar, your contacts, or your YouTube account. (Connecting your YouTube channel is a separate, optional step described below.) We use sign-in data solely to create and authenticate your vidfora account, and we never use it for advertising or sell it.
• Billing details — handled by our payment processor, Stripe. We receive your subscription status and a customer identifier, but we never see or store your full card number.
• Content you create — research boards, tracked channels, saved filters, and the topics or links you type into the creator tools.
• Support messages — anything you send us by email.

2. Information we collect automatically

When you use the Service, we and our providers collect:

• Usage and product analytics — pages viewed and key funnel events (for example, sign-up, viewing pricing, starting checkout). These are recorded by Google Analytics, by signallark (our own self-hosted analytics, running on our infrastructure rather than a third-party vendor), and by a first-party event log in our own database.
• Cookies and similar technologies — an essential, httpOnly session cookie that keeps you logged in, plus analytics cookies set by Google Analytics. signallark identifies visits without cookies.
• Technical data — IP address (used for security and rate-limiting; stored in hashed form where we retain it), browser and device information, and approximate location derived from your IP.

3. Public YouTube data

vidfora surfaces publicly available YouTube data — video titles, thumbnails, view counts, and channel statistics — to power its research features. When you analyze a channel, we fetch that public data at your request. This information belongs to the respective creators and YouTube; vidfora is not affiliated with, endorsed by, or sponsored by YouTube or Google.

4. Connecting your own YouTube channel (optional)

The Subscriber Insights feature lets you optionally connect the YouTube channel you own. vidfora uses YouTube API Services for this; by connecting, you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms), and Google’s handling of your data is described in the Google Privacy Policy (https://policies.google.com/privacy).

When you connect, we request two read-only Google permissions: youtube.readonly and yt-analytics.readonly. We use them solely to identify the channel you own and to display your own channel’s analytics back to you — daily views, watch time, subscribers gained and lost, and your own videos ranked by subscribers gained. This data is shown only to you, is never shared with other users or third parties, is never used for advertising, and is never sold. vidfora cannot upload, edit, delete, comment, or change anything on your channel — the access is read-only by design.

To provide this feature we store the OAuth tokens Google issues (including a refresh token) and cache your analytics data briefly on our servers. Disconnecting — from the Subscriber Insights page in the app — deletes the stored tokens and revokes vidfora’s access with Google; cached analytics are discarded shortly after. You can also revoke vidfora’s access at any time from your Google security settings at https://myaccount.google.com/permissions.

5. How we use your information

• To provide, maintain, and improve the Service and your account.
• To process subscriptions, payments, and the plan entitlements tied to them.
• To send transactional email — verification, password resets, and billing notices.
• To understand product usage in aggregate so we can improve features.
• To protect the Service — detecting abuse, enforcing rate limits, and preventing fraud.
• To comply with legal obligations.

6. How we share information

We share information only with the service providers that help us run vidfora, and only as needed. These include:

• Stripe — payment processing and subscription management.
• Google Analytics — aggregate product analytics.
• signallark — our own self-hosted analytics, operated by us on our infrastructure. Usage data recorded there is not passed to a third-party analytics vendor.
• Google — as an identity provider, when you choose to sign in with it. Google tells us who you are; we do not send Google your vidfora activity.
• Microsoft Azure Communication Services and sendoramo — sending transactional email such as verification, password-reset, and billing notices.
• Our hosting and infrastructure providers — running and storing the application.
• Google / YouTube — when the Service fetches public YouTube data at your request, and, if you connect your channel, when it fetches your own channel’s analytics via YouTube API Services under the read-only permissions you granted.

7. Legal disclosures

We may also disclose information if required to do so by law, or if we believe in good faith that disclosure is necessary to comply with legal process, enforce our Terms, or protect the rights, property, or safety of vidfora, our users, or others. If Gopherlume LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

8. Data retention

We keep your account information for as long as your account is active. If you delete your account, we delete or anonymize your personal information within a reasonable period, except where we must retain certain records (for example, billing records) to meet legal and accounting obligations. Aggregated or de-identified analytics that cannot reasonably identify you may be retained.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing (for example, under the GDPR or CCPA). To exercise any of these rights, email privacy@vidfora.com and we will respond in line with applicable law. You can also manage your subscription from your account, disconnect a linked Google sign-in by deleting your account, and disable analytics cookies through your browser or an opt-out tool.

10. Data security

We protect your data with industry-standard measures: passwords are hashed, traffic is encrypted in transit over TLS, and access to production systems is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to notify you and the authorities of any breach as required by law. To report a vulnerability or a suspected incident, email security@vidfora.com.

11. International transfers

vidfora and its providers may process and store your information in countries other than the one you live in, including the United States. Where required, we rely on appropriate safeguards for such transfers.

12. Children

The Service is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised policy.

14. Contact us

Privacy requests and questions about this policy: privacy@vidfora.com. Security reports: security@vidfora.com. Everything else: support@vidfora.com. You can also write to us at Gopherlume LLC, 330 2nd Ave S, Ste 200, Minneapolis, MN 55401, USA. The data controller for the purposes of applicable data-protection law is Gopherlume LLC, which operates vidfora.