Privacy Policy

ChannelWhisper is a B2B SaaS product that helps content teams monitor competitor YouTube channels and identify high-value topic gaps. We are the data controller for personal data processed through our service.

Questions? Email us at privacy@channelwhisper.com.

• Account data: Your email address and hashed password when you sign up. If you sign in via a social provider (e.g. Google), we receive only the email and profile name they share with us.
• Usage data: The YouTube channel URLs you add, the analyses you run, the briefs you generate, and the Slack webhook URLs you configure. This data is required to provide the service.
• Billing data: Payment is handled entirely by Paddle. We store only a Paddle customer ID and subscription status — never your card number or payment details.
• YouTube data: We fetch publicly available data (video titles, thumbnails, view counts, auto-generated transcripts) from the YouTube Data API on your behalf. We do not access private video content or your personal Google account data.
• Technical logs: Standard server logs including IP address, browser type, and page requests. Retained for 30 days for security and debugging purposes only.

• To provide the service: Running competitor analyses, generating content briefs, sending Slack alerts.
• To manage your account: Authentication, plan enforcement, and billing via Paddle.
• To improve ChannelWhisper: Aggregated, anonymised usage patterns to understand which features are most valuable. We never sell individual data.
• To communicate with you: Transactional emails (password reset, billing receipts). We will only send product news if you opt in.

If you are in the European Economic Area, UK, or Switzerland, we process your data on the following bases:

• Contract — processing necessary to deliver the service you signed up for.
• Legitimate interests — security monitoring, fraud prevention, product analytics.
• Consent — optional marketing emails (you can withdraw at any time).
• Legal obligation — retaining billing records as required by law.

We do not sell your data. We share it only with:

• Paddle: Our billing provider. Processes payments and manages subscription state. Paddle is GDPR-compliant and acts as merchant of record.
• YouTube / Google APIs: We make requests to the YouTube Data API to fetch publicly available channel data on your behalf.
• Infrastructure providers: Our hosting provider processes data on servers in the EU. All providers are bound by Data Processing Agreements.
• Law enforcement: We may disclose data where required by law, court order, or to protect the rights and safety of our users.

We retain your account data for as long as your account is active. If you delete your account, we delete all associated personal data within 30 days, except where we are legally required to retain it (e.g. billing records for 7 years under UK/EU accounting rules).

YouTube channel data (video titles, transcripts, stats) is deleted when you remove a competitor or close your account.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

To exercise any right, email privacy@channelwhisper.com. We respond within 30 days.

We use a session cookie to keep you logged in — this is strictly necessary and is always set. If you consent, we may also use analytics cookies (to understand how ChannelWhisper is used) and marketing cookies (to show relevant updates). On your first visit you'll see a consent banner where you can accept all, decline all, or customize your preferences per category. Your choice is stored locally for 180 days and you can change it at any time via the "Cookie settings" link in the footer. We do not use tracking pixels or third-party advertising cookies.

Passwords are hashed using bcrypt and never stored in plaintext. All data in transit is encrypted via TLS 1.2+. We apply the principle of least-privilege access to our database. If you discover a vulnerability, please disclose it responsibly to privacy@channelwhisper.com.

We will notify you of material changes by email at least 14 days before they take effect. Minor updates (typo fixes, clarifications) will be reflected here with an updated “Last updated” date. Continued use of the service after changes take effect constitutes acceptance.