Privacy Policy

1. Introduction

CTR Studio ("we," "our," or "us") operates the CTR Studio web platform at ctr.studio and the CTR Studio Chrome extension. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

By using CTR Studio, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Profile picture (if provided via Google sign-in)
• Account credentials (securely hashed)

2.2 YouTube Channel Data

When you connect your YouTube channel, we access and store:

• YouTube channel ID and name
• Channel profile picture
• Video metadata (titles, descriptions, tags, thumbnails)
• Video analytics (views, impressions, click-through rates, watch time, RPM)
• Audience retention data
• OAuth tokens for YouTube API access (encrypted)

2.3 Chrome Extension Data

Our Chrome extension collects data only when you are on YouTube Studio (studio.youtube.com):

• YouTube Studio authentication context (used temporarily to fetch analytics)
• Video analytics for channels connected to your CTR Studio account
• Audience retention curves
• A/B test performance metrics during active tests

The extension does not collect browsing history, personal files, or data from any website other than YouTube Studio. Authentication tokens are used only during active sync operations and are not stored by the extension.

2.4 Payment Information

Payment processing is handled entirely by Stripe. We do not store credit card numbers or bank account details. We receive from Stripe:

• Subscription status and plan type
• Payment history and invoice records
• Billing address (if provided)

2.5 Usage Data

We automatically collect:

• Pages visited and features used
• Browser type and version
• Device information
• IP address (anonymized for analytics)
• Referring URLs

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the CTR Studio service
• Identify videos with optimization opportunities based on analytics
• Execute A/B tests by updating video thumbnails and titles via YouTube API
• Calculate test results and determine winning variants
• Send transactional emails (account verification, team invitations, password resets)
• Process payments and manage subscriptions
• Improve our services based on usage patterns
• Respond to support requests
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We share data only with:

4.1 Service Providers

• Stripe - Payment processing
• Google/YouTube - YouTube Data API for video management
• Cloud hosting and database providers
• Email delivery services
• Analytics providers

4.2 Team Members

If you join or create a workspace with team members, those members may see:

• Your name and profile picture
• Your role in the workspace
• Work you've been assigned or completed
• Comments and messages within the platform

4.3 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights, privacy, safety, or property.

5. Data Storage and Security

Your data is stored on secure servers provided by Supabase (AWS infrastructure). We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest for sensitive data
• Row-level security policies on database tables
• Secure OAuth token storage with encryption
• Regular security audits

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Account data - Retained until account deletion
• Video analytics - Retained for historical analysis while account is active
• A/B test results - Retained indefinitely for your reference
• Chat messages - Retained while workspace is active
• Payment records - Retained as required by tax and accounting laws

After account deletion, we may retain anonymized, aggregated data for analytics purposes.

7. Your Rights

Depending on your location, you may have the following rights:

• Access - Request a copy of your personal data
• Correction - Request correction of inaccurate data
• Deletion - Request deletion of your data
• Portability - Request your data in a portable format
• Objection - Object to certain processing activities
• Withdrawal - Withdraw consent where processing is based on consent

To exercise these rights, contact us at support@ctr.studio. We will respond within 30 days.

8. YouTube API Services

CTR Studio uses YouTube API Services. By using our service, you also agree to be bound by the YouTube Terms of Service and Google Privacy Policy.

You can revoke CTR Studio's access to your YouTube data at any time through your Google Security Settings.

9. Cookies and Tracking

We use cookies and similar technologies for:

• Essential cookies - Required for authentication and security
• Analytics cookies - To understand how users interact with our service

You can control cookies through your browser settings, though disabling essential cookies may prevent you from using the service.

10. Children's Privacy

CTR Studio is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own. Our service providers maintain appropriate safeguards for international data transfers in compliance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: support@ctr.studio