Privacy Policy

1. Introduction

Welcome to Export Venue. This Privacy Policy explains how Export Venue ("we," "us," or "our") collects, uses, stores, and discloses information about you when you use our website (https://www.exportvenue.com/) and services (collectively, the "Service"). This policy is prominently linked on our app homepage and is hosted on our verified domain.

This policy applies specifically to Export Venue and includes information required by Google for applications accessing Google user data through OAuth.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

• Email address
• Password (hashed and stored securely)

2.2 YouTube & Google Data Access via OAuth

For core functionality and secure authentication, Export Venue requests the following permissions via Google OAuth 2.0:

• https://www.googleapis.com/auth/youtube.readonly
  Read-only access to YouTube resources. Essential for fetching your playlists, subscriptions, and liked videos to generate your export. We cannot manage, modify, or delete your YouTube content.
• openid
  Secure Authentication. Used to securely identify you and ensure you are logging into the correct account.
• https://www.googleapis.com/auth/userinfo.email
  Email Verification. Used to associate your YouTube data with your Export Venue account and for account recovery/communication purposes.

Google User Data Accessed (for Export only):
The following data is accessed temporarily via the YouTube API solely to generate your export file. We do not store, save, or retain this data on our servers.

• Subscription information: Channel titles, IDs, descriptions, and thumbnails
• Playlist information: Liked videos, Liked music details
• Video metadata: titles, IDs, thumbnails, published dates, and channel details

Google User Data Not Collected:

• We do not collect, modify, or access your YouTube content (outside metadata described above)
• We do not upload, edit, or delete videos
• We do not manage account settings, post comments, or view private messages
• We do not access your watch history or unrelated account data

We strictly adhere to Google API Services User Data Policy (including Limited Use requirements). Data collected is only as described above, and only within the explicitly granted scope.

2.3 Usage and Technical Data

We automatically collect:

• Pages visited, timestamps, and session duration
• Service usage patterns and feature interactions

2.4 Analytics Data

We use Google Analytics to understand user behavior and improve our Service, including:

• Page views and user flow analysis
• Session duration and engagement metrics
• Geographic distribution of users
• Device and browser analytics

3. How We Use Your Information

3.1 Core Service Functionality

• Fetch your YouTube data (subscriptions, liked videos, liked music) to display and export
• Format the data into your chosen file format (CSV, Excel, JSON, etc.)

Your Google user data is exclusively used to provide Export Venue’s data export features. We do not use Google user data for advertising, profiling, AI training, creditworthiness, or any unrelated analytics.

3.2 Account Management

• Manage your secure login and authentication
• Maintain your connected accounts

3.3 Communications

Transactional Emails:

• Account activation, password resets, and critical updates including (but not limited to) change of privacy policy & terms and conditions.

3.4 Service Improvement

• Analyze usage patterns to optimize user experience and identify popular features
• Monitor performance and implement functionality improvements

3.5 Legal, Security, and Compliance

• Prevent fraud/abuse and ensure compliance with laws
• Protect quality, reliability, and safety of service
• Maintain audit trails for compliance and legal requirements

4. Data Sharing and Third-Party Services

4.1 Service Providers

We share limited information with essential, trusted third-party providers strictly necessary for service operation:

• Google Analytics: Website usage analysis (anonymized aggregate data only)
• Cloud infrastructure providers: Secure hosting and storage
• Email Service Providers: To send transactional emails

We do not share, transfer, or disclose your Google user data to any third parties for advertising, marketing, or analytics unrelated to Export Venue’s functionality. No Google user data is sold or used by data brokers, ad networks, or for credit scoring, AI training, or any other unrelated purposes.

4.2 Google API Services

All Google user data access is explicitly controlled via OAuth consent and limited to the read-only scope you grant.

• We do not share your YouTube data with any third parties except where required to operate core Export Venue features (only as described above)
• Data access is strictly limited to providing the export service
• Usage of data complies with Google’s Limited Use and API Services User Data Policy

4.3 Legal Requirements and Protection

We may disclose information only as required by explicit legal, court, or governmental mandate, or for safety, rights, or fraud investigations.

• Legal rights and Terms enforcement
• Investigation of fraud or abuse
• Regulatory compliance
• User/public safety

4.4 Business Transfers

In event of merger, acquisition, or sale, information may transfer to the acquiring entity and remain subject to the protections of this policy.

5. Data Security and Protection

We implement industry-standard security protocols:

• Encryption: All data (including Google user data) is protected by SSL/TLS in transit, and sensitive data is encrypted at rest
• Strict access controls and authentication for all data storage
• OAuth tokens and Google user data stored securely and deleted immediately upon account closure or revocation

We have security procedures and encryption in place specifically to protect the confidentiality and integrity of your Google user data.

6. Data Retention and Deletion

6.1 Account and Personal Data

Personal information is retained while your account is active. Upon account deletion, all personal data is removed within 30 days unless legal retention is required.

6.2 YouTube & Google User Data

We never store your YouTube data (subscriptions, liked videos, music) on our servers. The data is fetched directly from the YouTube Official API, processed in real-time solely for the purpose of generating your export file, and then discarded. We solely retain OAuth tokens to facilitate your future export requests without re-authentication, until you disconnect or delete your account. Upon account closure or by request, all associated data is deleted within 30 days. You may also request deletion of account at any time by contacting support. OAuth access tokens are revoked and deleted immediately if you remove access or delete your account.

6.3 OAuth Access Tokens

Google OAuth access and refresh tokens are stored securely with encryption, deleted upon account deletion or access revocation by the user.

7. Your Rights and Control Over Your Data

7.1 Access and Correction

• View and update your account information through your account settings
• Request a copy of the personal data we maintain about you

7.2 Data Deletion and Account Closure

• Delete your account and associated Google user data by contacting support
• All deletion requests are processed within 30 days

7.3 Google Data Access Management

• Disconnect anytime: You can disconnect your YouTube account from Export Venue at any time via your Profile page.
• Revoke access anytime by removing Export Venue's authorization from your Google Account settings (myaccount.google.com/permissions)
• Scope limitation: We only access data within the scopes you grant

7.4 Cookies and Tracking

• Cookie control through browser settings
• Opt-out options for Google Analytics data collection

8. International Data Transfers and Regional Compliance

Your data may be processed and stored in countries outside your residence, subject to appropriate safeguards and compliance with applicable laws.

9. Children's Privacy

Our service is not directed to individuals under 18 years of age. We do not knowingly collect information from minors.

Parents may contact support if they believe we have collected information from a child, and we will delete such data immediately.

10. Changes to This Privacy Policy

Updates to this policy due to changes in practices, legal requirements, or product improvements will be clearly posted with a new “Effective Date”. You will be notified by email for material changes, and prominent website notices will be displayed.

11. Contact Information

For questions, concerns, or requests about this Privacy Policy or our data practices: