Privacy & data use
This notice explains what we collect when you request a Brand Channel Audit, why we collect it, how long we keep it, and the rights you have over it.
[REVIEW] items below are placeholders.Who we are
The data controller is Humble & Brag [REVIEW: full legal entity name], a YouTube content agency based in Berlin [REVIEW: registered address]. You can reach us about your data at [REVIEW: privacy@humbleandbrag.com].
What we collect
When you submit the audit form we collect:
- Your name and email address.
- The YouTube channel you want audited (name, URL or @handle) and, optionally, the company website.
- Any competitors and free-text notes you choose to add.
- A record of your consent (that you agreed to this notice, and whether you opted in to marketing) with a timestamp.
We do not ask for special-category data, and please don’t enter any in the free-text fields.
Why we use it, and our lawful basis
- To produce and deliver your audit. Lawful basis: performance of a contract / steps taken at your request (UK-GDPR Art. 6(1)(b)). Without these details we can’t run the audit.
- To run our service and prevent abuse. Lawful basis: legitimate interests (Art. 6(1)(f)) in operating, securing and improving the tool.
- To send you marketing, only if you ticked the optional box. Lawful basis: consent (Art. 6(1)(a)), which you can withdraw at any time.
How the audit works (third parties)
To build the audit we analyse public data about the channel you give us. The channel’s public stats, videos and transcripts are processed through tools including YouTube Data API, vidIQ, Ahrefs and Google Search Console, and an AI analysis step [REVIEW: Anthropic / model provider]. Your contact details are stored in our submissions database and used by Google Workspace (email) to deliver the finished report. These providers act as our processors under data-processing terms; we don’t sell your data to anyone.
Where it’s stored
Submissions are stored in our own database [REVIEW: hosting region / provider]. Some processors may transfer data outside the UK/EEA; where they do, appropriate safeguards (such as Standard Contractual Clauses) apply.
How long we keep it
We keep your submission and the resulting audit for as long as needed to deliver and support it, and then for a limited period for our records [REVIEW: e.g. 24 months], after which it is deleted or anonymised. If you only requested an audit and not marketing, we won’t add you to a marketing list.
Your rights
Under UK/EU data protection law you can ask us to:
- access the personal data we hold about you;
- correct it if it’s wrong;
- delete it (“right to erasure”);
- restrict or object to how we use it;
- receive a copy in a portable format;
- withdraw marketing consent at any time — via the unsubscribe link in any email, or by contacting us.
To exercise any of these, email [REVIEW: privacy@humbleandbrag.com]. If you’re unhappy with our response you can complain to the UK Information Commissioner’s Office (ico.org.uk) or your local supervisory authority.
Changes
We may update this notice as the tool develops. The current version always lives at this page.