Privacy Policy
Last updated: 19 October 2026
This notice explains what personal data YPP Ready Team ("YPP Ready", "we") processes, why, and your rights. We act as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025, and follow the Information Technology Act, 2000 and the rules made under it.
1. What we collect and why
| Data | When | Purpose | Kept for |
|---|---|---|---|
| Email, optional name, password (stored only as a one-way hash) | You create an account | Providing your account and sign-in | Until you delete your account |
| Google account ID, email, name, profile photo URL | You use “Continue with Google” | Signing you in | Until you delete your account |
| Two-factor secret (encrypted) and recovery codes (hashed) | You turn on two-factor | Securing your account | Until you turn it off or delete your account |
| Saved channel checks (public channel handle, name, subscriber count, score) | You check a channel while logged in | Showing your history | Latest 25 checks, until you delete your account |
| YouTube channel data (read-only): channel name and ID, video titles, thumbnails, views, watch time, average view duration, impressions and click-through rate | You click “Connect with Google” on My Stats | Showing your own channel statistics to you | Fetched on request and cached in memory for up to 6 hours; only an encrypted access token and your channel ID are stored, until you disconnect |
| Name, email, message | You use the contact form | Replying and handling grievances | Up to 2 years, then deleted |
| IP address, time, pages requested | Every visit (server logs) | Security, preventing abuse, rate limiting | Up to 180 days, by our hosting provider |
| Channel handle you type | You use the Monetization Checker | Fetching that channel's public YouTube data | Cached in memory up to 15 minutes, not stored |
What we never receive: your video files, thumbnails or audio. The Video Review, Thumbnail Checker and speech check run entirely on your device. We don't access your YouTube Studio or Google data beyond the basic sign-in details listed above.
2. Legal basis
We process account data on the basis of your consent, given when you sign up (DPDP Act, Section 6), and server logs for legitimate uses permitted under Section 7, such as security. You can withdraw consent at any time by deleting your account in My account. Withdrawal doesn't affect processing already done.
3. Who we share data with
- Hosting provider: runs our servers and stores account data, as our Data Processor.
- Google: only if you choose Google sign-in.
- AI provider (Anthropic): only if you click “Get AI review”, and only the text report (statistics, title, description, transcript excerpt), never the video.
- Authorities: when required by law or a lawful order.
We don't sell or rent personal data, and we don't share it for advertising. Some processors may store data outside India, where permitted under the DPDP Act.
YouTube API Services
The My Stats feature uses YouTube API Services. By connecting your channel you agree to be bound by the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. We request read-only access (youtube.readonly and yt-analytics.readonly), use it only to show you your own statistics, never share it with anyone else, and never use it for advertising. You can disconnect on the My Stats page, and revoke YPP Ready's access at any time from your Google Account's security settings. When you disconnect or delete your account, we revoke the token and delete the stored data.
4. Cookies and local storage
We use only essential cookies: a signed session cookie to keep you logged in, a short-lived cookie during two-factor and Google sign-in, and your light/dark theme choice in your browser's local storage. No analytics, advertising or cross-site tracking cookies.
5. Security
Passwords are hashed with scrypt; two-factor secrets are encrypted at rest; sessions use signed, HttpOnly cookies over HTTPS; sign-in attempts are rate-limited. If a personal data breach occurs, we will inform affected users and the Data Protection Board of India as the DPDP Act and Rules require.
6. Your rights
Under the DPDP Act you have the right to:
- Access a summary of your personal data and how it's processed: My account → Download my data.
- Correct and update your data: edit your name or password in My account, or contact us.
- Erase your data: My account → Delete account deletes it immediately.
- Withdraw consent at any time, as easily as you gave it.
- Nominate another person to exercise your rights in case of death or incapacity: email us.
- Grievance redressal: contact our Grievance Officer below. If unresolved, you may complain to the Data Protection Board of India.
We respond to rights requests within the time required by the DPDP Rules (and in any case within 90 days).
7. Children
Accounts are for people 18 and older. We don't knowingly process children's personal data without verifiable parental consent, and we don't track or target advertising at children. If you believe a child has created an account, contact us and we'll delete it.
8. Contact and Grievance Officer
YPP Ready, Grievance Officer
YPP Ready Team, [Your postal address, City, State, PIN, India]
Email: contact@yppready.com
You can also use the contact form and choose “Privacy / my data”.
9. Changes
If we change this policy we'll update the date above and, for material changes, tell account holders by email or on the website before the change takes effect.