Veraison Labs Client Reports —

Privacy Policy

Effective: May 15, 2026

This policy applies to Veraison Labs Client Reports ("the app"), an internal Veraison Labs tool that aggregates authorized client data (such as YouTube channel performance) into per-client reports. It is operated by Veraison Labs, a sole-operator AI implementation agency based in Vancouver, British Columbia, Canada.

For information about how we handle data collected through our public website (visitor analytics, contact form), see our main privacy policy.

Data Accessed via Client Authorization

When a client engages Veraison Labs and authorizes the app to access their accounts on third-party platforms (such as Google services, including YouTube), we use that access only to produce reports, dashboards, and automation outputs that we deliver to the client who authorized the access. We do not use authorized client data for any other purpose.

Google User Data

When a client authorizes the app to access their Google services, we use these OAuth scopes:

  • https://www.googleapis.com/auth/youtube.readonly — read channel metadata and statistics

  • https://www.googleapis.com/auth/yt-analytics.readonly — read aggregated channel analytics (views, watch time, audience metrics)

What we access. Channel name, subscriber count, video count, aggregated view and watch-time metrics, and similar non-personally-identifying YouTube performance data for channels the client has authorized.

How we use it. Solely to produce reports, dashboards, and automation outputs delivered to the client who authorized the access. No other use.

Storage. Access tokens are stored with restricted file permissions on a workstation protected by full-disk encryption (Apple FileVault). Collected data is stored in a local database on the same workstation.

Retention. Tokens and collected data are retained for as long as needed to fulfill the engagement. Deletion is available at any time upon written request.

Sharing. We do not sell, rent, or share Google user data with third parties. We do not use Google user data to train machine-learning models or to serve advertising.

Revocation. Clients may revoke our access at any time at myaccount.google.com/permissions. On revocation, our access tokens become invalid and further data access stops.

Sub-Processors

In operating the app, the following third-party service providers may process authorized client data:

  • Google — YouTube Data API and YouTube Analytics API (data sources), Gemini API (content processing within the app)

  • Anthropic — Claude API (content processing within the app)

  • Make.com — automation workflows that act on authorized client data

  • n8n Cloud — automation workflows that act on authorized client data

Each receives only the data necessary for the function listed, under their respective terms and privacy practices. We do not share authorized client data with any other third party except as required by law.

Security

Credentials (access tokens) and collected client data are stored on a workstation protected by full-disk encryption (Apple FileVault), with restricted file permissions on access tokens. No system is perfectly secure; we address known risks promptly when identified.

Your Rights

Clients (or individuals whose data is processed by the app under client authorization) may request access to, correction of, or deletion of information we hold, and may withdraw consent for processing at any time. To exercise these rights, contact us at the address below.

Changes to This Policy

We may update this policy. Material changes will be reflected in the Effective date at the top.

Contact

Matt Betker — Veraison Labs
matt@veraisonlabs.com
Vancouver, British Columbia, Canada