Standing Brief — Privacy Policy

Effective date: 24 September 2026 Who we are: Standing Brief is run by Yehuda Meshulam, an individual based in Israel. Contact: privacy@standingbrief.com

The short version

• We read your YouTube channel data read-only. We can't change, post or delete anything on your channel.
• We never ask for your password, and never ask for a role on your channel.
• We don't sell your data, show ads, or use your data to train AI models.
• You can disconnect at any time, and we delete your YouTube data within 30 days.

1. What we collect

When you sign in with Google - Your name, email address and profile picture (Google's openid, email, profile).

When you connect your channel (Google permissions you approve) - Your YouTube account (youtube.readonly): your channel's name, handle, picture, description and links; your videos (including private and unlisted) with their titles, descriptions, status, age restriction and country blocks. - Your YouTube Analytics (yt-analytics.readonly): views, watch time and traffic sources, per video and per day. - Your YouTube revenue — optional (yt-analytics-monetary.readonly): estimated revenue and revenue per view, per video. You can say no; the rest of the service still works, but we can't show you which videos earn less than they should.

What you give us - A phone number, for alerts by text and call. - An email address outside Google, for alerts, your weekly record, and signing in if you lose your Google account. - Answers to our readiness questions. We keep the findings, and delete the raw answers after your report is made. - Emails from YouTube that you choose to forward to us with a Gmail filter. We never read your Gmail ourselves. - Optionally, a backup contact person's name and phone number, with their agreement.

Payments - Handled by Paddle, which sells Standing Brief on our behalf as the merchant of record. We never see your full card number.

Public data - If you use the free scan, we read public data about the channel you enter, through the YouTube Data API.

Technical data - Basic logs (IP address, browser, time of request) for security, kept 30 days. - One cookie to keep you signed in. No advertising or tracking cookies.

2. What we use it for

Only to run the service you signed up for: - watch your channel and tell you when something changes or looks wrong; - show you what a restriction, claim or drop is costing you, and draft your response; - send alerts by text, call and email; - build your record and send it to you every week; - keep the service secure, and bill you.

3. Google user data: our commitments

• Standing Brief's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• We don't use Google user data for advertising, don't sell it, and don't use it to train AI or machine-learning models.
• People at Standing Brief don't read your Google data, except with your permission, for security, or where the law requires it.

4. YouTube API Services

• Standing Brief uses YouTube API Services. By using Standing Brief you agree to the YouTube Terms of Service.
• Google's handling of data is covered by the Google Privacy Policy.
• You can remove our access at any time at Google security settings, or in your Standing Brief settings.

5. How long we keep it

• Analytics numbers: while your channel is connected.
• Other YouTube data (channel and video details, status): refreshed or deleted every 30 days.
• Public data from a free scan: not kept. Deleted when the scan ends.
• After you disconnect, or our access stops working: all YouTube data deleted within 30 days.
• Account details (phone, backup email): until you delete your account.
• Billing records: as long as tax law requires.
• Your record is sent to you every week, so you have it even after we delete ours.

6. Who we share it with

Only the service providers we need to run Standing Brief, each bound to use the data only for us: - Cloudflare (hosting and storage) - Twilio (texts and calls) - Paddle (payments) - Postmark (sending email) - Google Workspace (our email)

We share data with others only if the law requires it, or to stop fraud or abuse. If Standing Brief is sold, we tell you before your data moves, and you can delete it first.

7. How we protect it

• Read-only access. Nothing a thief could take from us lets them change your channel.
• Access tokens encrypted at rest; we can cut all access in one step.
• Hardware security keys on our own admin accounts.
• Alerts never include a sign-in link. We will never ask you to sign in from a text message.
• If we have a breach, we tell you within 72 hours by text and non-Google email: what was taken, and what it couldn't touch.

8. Your rights

You can see, download, correct or delete your data at any time, in settings or by emailing privacy@standingbrief.com. We answer within 30 days. If you're in the EU or UK, you can also complain to your local data protection authority.

9. Where data is stored

Your data is stored with Cloudflare. Our providers may process it in other countries under standard safeguards.

10. Children

Standing Brief is not for anyone under 16. If you think a child has signed up, tell us and we'll delete the account.

11. Changes

If we change this policy, we email you before the change takes effect. Material changes to how we use Google data will ask for your consent again.