Privacy Policy

YouTube API Services
Subsig uses the YouTube API Services to retrieve publicly available video and comment data related to brands and products tracked by our users. We do not connect to or access any individual YouTube user's account. All data retrieved is limited to public content queried by product or brand keyword.
By using these features, you agree to be bound by the YouTube Terms of Service: youtube.com/t/terms.

Credential handling
YouTube API requests are made using a secure server-side API key. No user credentials or OAuth tokens are used or stored. The API key is never exposed to the client and is rotated on a regular basis.

How we use and share YouTube data
YouTube data is used solely to generate brand sentiment scores, visibility reports, and competitor benchmarks for Subsig users. This data is never sold, rented, or used for advertising targeting. YouTube-sourced data may be processed by Subsig's infrastructure providers (cloud hosting, data pipelines) and delivered via integrations you configure, such as Slack, webhooks, or email alerts. These processors operate solely on Subsig's behalf under confidentiality obligations

Deleting your YouTube data
Users can request the removal of all data collected by Subsig, including mentions, comments, and any other content sourced from YouTube and other platforms, in two ways:

Delete a Competitor: Navigate to Settings → Competitors List → Edit Competitor → Delete Competitor. This will permanently remove all data collected for that specific competitor across all platforms including YouTube.

Delete Workspace: Navigate to Settings → Delete Workspace. This will permanently remove all data across all brands, competitors, and platforms associated with your account.

Note that these actions are permanent and cannot be undone.

Google Privacy Policy
Data retrieved via YouTube API Services is also subject to Google's Privacy Policy: google.com/policies/privacy

Google Analytics API Services

Subsig integrates with Google Analytics 4 (GA4) so users can connect their
own Analytics property and view how traffic from AI assistants performs on
their website.

What we access
When you connect your Google Analytics account, we request the read-only
scope https://www.googleapis.com/auth/analytics.readonly. This permits us
to read reporting data from Analytics properties you select. We read
session counts, traffic source and referrer, landing page paths, country,
device category, engagement metrics, and key event (conversion) counts. We
do not request or hold write access. We cannot modify, delete, or create
anything in your Analytics account, and we do not access your Google
account beyond this scope.

How we use it
Data retrieved from Google Analytics is used solely to render your own
Subsig dashboard and reports, and to deliver alerts and integrations you
configure. It is not used for any other purpose.

Limited Use
Subsig's use and transfer of information received from Google APIs to any
other app will adhere to the Google API Services User Data Policy,
including the Limited Use requirements. See
https://developers.google.com/terms/api-services-user-data-policy

Specifically, we do not:

• sell, rent, or license Google user data

• transfer Google user data to third parties, except to service providers
  acting on our behalf under confidentiality obligations, or where required
  by law

• use Google user data for advertising, retargeting, or audience building

• use Google user data to train, fine-tune, or improve any artificial
  intelligence or machine learning model, whether ours or a third party's

• allow humans to read Google user data, except with your explicit consent
  for a specific support request, for security purposes, to comply with
  applicable law, or where the data has been aggregated and anonymised

Credential handling
OAuth access and refresh tokens issued when you connect Google Analytics
are stored encrypted at rest and are used only to make read requests on
your behalf. Tokens are never exposed to the client.

Retention and deletion
Google Analytics data is retained for the life of your connection plus
12 months. You may disconnect at any time via Settings → Integrations →
Disconnect Google Analytics, which revokes our access and deletes the
stored tokens and the Analytics-derived data. You may also revoke access
directly at https://myaccount.google.com/permissions