Frame 117 operates Metarch at frame117.com/metarch. For the purposes of the GDPR, the data controller is Frame 117, Virkayu Creative S.R.L, Boulevard de France, 9, 1420 Braine-l'Alleud, Belgium, reachable at creative@frame117.com.

What we collect

• Account: your name, email address and Google account identifier, received from Google Sign-In.
• YouTube data, read-only, with your consent: through Google OAuth we request two scopes: youtube.readonly (your channel list, your videos and their public statistics) and yt-analytics.readonly (aggregate analytics for channels you own, such as views and watch time). Both are read-only. Metarch cannot post, edit or delete anything on your channel.
• Public YouTube data about the channels and videos you research, retrieved through the YouTube Data API with our own API key. This is public platform data, not personal data about you.
• What you create: tracked channels, ideas, notes, watchlists, uploaded thumbnails, and any Strategist figures you type in.
• Technical: IP address, browser user agent and timestamps in server logs, kept for security and abuse prevention. A session token stored in your browser's local storage so you stay signed in.
• Billing: handled by Stripe. We never see or store your card number. We store your Stripe customer identifier, your plan, and your invoice history.

Why we are allowed to hold it

Performance of our contract with you (running the account you signed up for), your consent (the Google scopes, which you can withdraw at any time), our legitimate interest in keeping the service secure, and legal obligation (invoices and tax records).

How we use it

To run the service, compute outlier scores, keep you signed in, bill you, answer your support messages, and detect abuse. That is the whole list. We do not advertise, we do not sell data, we do not share it with third parties for their marketing, and we do not use your data or your Google data to train machine-learning models.

YouTube API Services

Metarch uses YouTube API Services. By using Metarch you are also agreeing to the YouTube Terms of Service. Google's own handling of any personal data you provide to it is described in the Google Privacy Policy.

Metarch does not allow any third party to serve content or advertisements inside the product, and carries no advertising of any kind.

Google user data

Metarch's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We access your Google and YouTube data only to display it back to you inside Metarch and to compute the metrics you asked for.
• We do not transfer it to others except as necessary to provide the service (our hosting provider), to comply with applicable law, or with your explicit consent.
• We do not use it for advertising, and we do not allow humans to read it, except with your explicit consent for a support request you raised, where necessary for security purposes, or where required by law.
• You can revoke Metarch's access to your data at any time from the Google security settings page at security.google.com/settings/security/permissions, also reachable at myaccount.google.com/permissions. Disconnecting a channel inside Metarch deletes the YouTube data cached for it.
• Cached YouTube data is refreshed and overwritten as part of normal operation, and is deleted within 30 days of you disconnecting a channel or deleting your account. If our access to YouTube API Services ends, we delete all stored API data.

Who else processes it

• Google: YouTube Data API and YouTube Analytics API, and Google Sign-In.
• Stripe: payments and invoicing.
• MailerLite: product and account email.
• Hostinger: servers and database.

Each is bound by its own data processing terms. Where data leaves the EEA it does so under the European Commission's Standard Contractual Clauses.

How long we keep it

• Account and content data: for as long as your account exists, then deleted within 30 days of a deletion request.
• Invoices and payment records: seven years, as Belgian tax law requires.
• Server logs: 90 days.

Your rights

You have the right to access your data, correct it, delete it, restrict or object to processing, and receive a portable copy. For any question or complaint about how Metarch handles your data, including anything on this page, email creative@frame117.com and we will answer within 30 days. You also have the right to complain to the Belgian Data Protection Authority, the Gegevensbeschermingsautoriteit.

Cookies

Metarch uses no advertising or tracking cookies and runs no third-party analytics on the app. A single session token is kept in your browser's local storage; it is strictly necessary to keep you signed in and is removed when you sign out.

Children

Metarch is not intended for anyone under 16. We do not knowingly collect data from children.

Changes

We update the date at the top. Material changes are emailed to registered users before they take effect.

Frame 117 ("we", "us") operates frame117.com. This policy explains how we handle your data.

What we collect

We collect your email address when you sign up for our newsletter. We collect your name, email, and message when you contact us via our contact form.

How we use it

Your email is used solely to send you updates and content from Frame 117 via MailerLite. Contact form submissions are used only to respond to your inquiry. We do not sell, rent, or share your data with third parties for marketing purposes.

Third-party services

We use MailerLite for email delivery and EmailJS to process contact form submissions. These services process data in accordance with their own privacy policies.

Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, correct, or delete your personal data at any time. To unsubscribe from emails, use the unsubscribe link in any email. To request data deletion, email us at creative@frame117.com.

Cookies

This site does not use tracking or advertising cookies.

Contact

Questions? Email creative@frame117.com