Privacy Policy

Last updated: 12/7/2025

1) Who We Are

TAP Commerce (“we”, “us”, or “our”) operates the YouTube Stats web application (“the Service”). This Privacy Policy explains how we collect, use, share, and protect personal information when you use the Service. For GDPR, we act as the data controller.

2) Information We Collect

Google account data (OAuth): name, email address, and profile image to create and authenticate your account.
Subscription & billing data: plan, status, and related billing details processed by Stripe. We do not store full card numbers.
Usage data: in-app interactions (e.g., which subniches you view, timestamps) for security, debugging, and product improvements.
Technical data: device/browser info, IP address, and basic logs for security and fraud prevention.
Cookies/Local storage: essential authentication/session cookies and preference storage. (See our Cookie Policy.)

3) How We Use Your Information (Purposes & Legal Bases)

Provide and operate the Service (perform our contract with you).
Authenticate and secure accounts (legitimate interests; legal obligations).
Process subscriptions and payments via Stripe (perform our contract; legitimate interests).
Improve features and performance (legitimate interests—service quality and reliability).
Communicate service updates (perform our contract; legitimate interests). You can manage non-essential emails.
Comply with law (legal obligations).

4) Sharing Your Information

We do not sell your personal data. We share only as needed:

Payments: Stripe processes billing data securely.
Service providers: hosting, monitoring, analytics, and support—bound by confidentiality and data protection terms.
Legal & safety: to comply with law, enforce terms, or protect rights, security, or property.

5) Data Retention

We keep personal data only as long as needed for the purposes above. Typical periods: account and subscription records for the life of the account; billing records as required by tax/accounting law; security logs for a limited period (e.g., up to 12 months) unless needed longer for investigations or legal obligations.

6) International Transfers

We may process data in Germany, the United States, and other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for cross-border transfers under GDPR. By using the Service, you understand your data may be processed outside your country.

7) Security

We use industry-standard technical and organizational measures (TLS in transit, restricted access, logging, and backups) to protect personal data. However, no method of transmission or storage is 100% secure.

8) Your Rights

If you are in the EU/EEA, you have rights under GDPR, including access, rectification, erasure, restriction, portability, and objection (including to processing based on legitimate interests). You may also withdraw consent where processing relies on consent.

If you are a California resident, you may have rights under CCPA/CPRA (e.g., access, deletion, correction). We do not “sell” personal information as defined by CCPA/CPRA.

To exercise rights, contact support@youtubestats.com. We may request information to verify your identity and will respond within the time required by applicable law. You can also lodge a complaint with your local supervisory authority (e.g., an EU Data Protection Authority).

9) Children’s Privacy

The Service is not intended for individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

10) Third-Party Policies

11) Changes to This Policy

We may update this Privacy Policy from time to time. We’ll post the updated version on this page with a revised “last updated” date and, if changes are material, we will provide additional notice.

12) Contact

For privacy inquiries or data-subject requests, contact: support@youtubestats.com