Data Processing Agreement

1. Introduction

This Data Processing Agreement ("DPA") forms part of the Terms of Service between you ("User") and YTubeGuard ("Processor", "We", "Us", or "Our"). This DPA outlines how we process and protect your personal data in connection with the services we provide.

We are certified by the Rwandan Data Protection Authority and comply with global privacy regulations including those of Rwanda.

2. Types of Data Processed

We process the following types of personal data through YouTube API Services:

• Account Information: YouTube channel ID, channel name, profile picture URL
• Video Metadata: Titles, descriptions, tags, thumbnails, publication dates
• Content Information: Video transcripts (temporary processing only)
• Analytics Data: View counts, like/dislike ratios (aggregated only)

We do not process: Payment information, private messages, or exact location data.

3. Purpose of Data Processing

We process your data solely for the purpose of:

• Providing the YTubeGuard service: Scanning your YouTube videos for policy compliance risks
• Generating compliance reports and recommendations
• Improving our service through aggregated, anonymized analysis

4. Data Collection Methods

We collect data through:

• YouTube API Services: When you connect your account and grant us read-only access
• Direct Input: When you use our services to scan specific videos
• Automated Analysis: Our AI systems process video metadata to generate compliance reports

5. Data Storage & Security

We implement robust security measures to protect your data:

• Encryption: All data in transit uses TLS 1.3; data at rest is AES-256 encrypted
• Access Control: Strict role-based access to production systems
• Infrastructure: Data stored in secure AWS data centers with SOC 2 compliance
• Audits: Regular security assessments and vulnerability scanning

6. Data Retention Policy

We retain your data only as long as necessary:

• Account Data: Retained until account deletion
• Scan Results: Retained for 12 months to provide historical analysis
• Video Content: Transcripts are immediately deleted after processing
• Backups: Encrypted backups retained for 30 days

You can request immediate data deletion at any time through your account settings.

7. User Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for data processing
• Export your data in machine-readable format

To exercise these rights, contact us at privacy@ytubeguard.com.

8. Third-Party Data Sharing

We do not sell or rent your personal data. We may share data with:

• Service Providers: Only to the extent necessary to provide our services (e.g., cloud infrastructure providers)
• Legal Requirements: When required by law or legal process

All third parties are bound by strict confidentiality agreements.

9. International Data Transfers

As a global service, data may be transferred to and processed in countries outside your residence. We ensure all such transfers comply with applicable data protection laws through:

• EU Standard Contractual Clauses
• Adequacy decisions where applicable
• Robust contractual protections

10. Changes to This Agreement

We may update this DPA to reflect changes in our practices. We will notify you of significant changes through our service or via email at least 30 days before they take effect.

11. Contact Information

For questions about this agreement or data practices:

Email: privacy@ytubeguard.com

Mailing Address:
YTubeGuard Data Protection Officer
123 Security Boulevard
San Francisco, CA 94107
United States