Privacy Policy

Information we collect

We collect only the information needed to operate and improve NinesFlow YT Intelligence.

• Account information: name, email address, profile image, team or company, and the use case submitted during registration.
• Authentication information: password hashes, session identifiers, and basic Google profile claims when you choose Google sign-in. We never receive your Google password.
• Workspace information: competitor channels, niche labels, saved ideas, alert preferences, dashboard settings, and usage counts.
• Service and diagnostic information: request logs, device or browser information, and security events processed by our infrastructure providers.
• Public YouTube information: public channel, video, and performance statistics collected through the YouTube Data API. This is separate from your Google account data.

How we use information

• Create, approve, authenticate, and secure accounts.
• Provide competitor monitoring, rankings, saved ideas, alerts, and personalized workspace features.
• Enforce plan limits, prevent abuse, diagnose failures, and improve service reliability.
• Respond to support, privacy, security, and administrative requests.

Google data and YouTube data

Google sign-in requests only the OpenID, email, and profile scopes needed to identify you and create your account. It does not grant NinesFlow access to your private YouTube channel, videos, analytics, Gmail, Drive, or other Google services.

Our handling and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

NinesFlow browser extension

The NinesFlow browser extension lets you add the public YouTube channel shown on the current supported page to your competitor workspace. Administrators can instead collect it into the shared platform channel pool.

The extension processes the current public YouTube page URL and channel information only when needed to show its channel actions or when you choose one. It sends the channel identifier and, when adding a competitor, your selected niche label to NinesFlow over HTTPS.

Our use and transfer of information received from Chrome APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

• The identity permission is used only to complete the secure browser-extension connection to your NinesFlow account.
• The storage permission is used only to keep the NinesFlow authorization token, its expiry time, and minimal extension state in Chrome local storage.
• Host access is limited to supported YouTube pages and the NinesFlow service at ytb.ninesflow.com. It is used to identify the public channel on the page and communicate with NinesFlow.
• The extension does not collect your Google or YouTube password, cookies, private videos, watch history, messages, or private YouTube Analytics data.
• The extension does not use remotely hosted executable code. All executable extension code is included in the published extension package; network requests exchange data with the NinesFlow service only.

When information is shared

We do not sell personal information. We may share the minimum information necessary with service providers that host or support the service, including Google, YouTube, Railway, and database infrastructure providers. We may also disclose information when required by law, to protect users, or in connection with a business reorganization subject to appropriate safeguards.

Cookies and sessions

We use essential cookies to maintain signed-in sessions, protect authentication flows, remember necessary preferences, and prevent unauthorized access. The core service does not use advertising cookies.

Retention and deletion

We retain information while your account is active and as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, and maintain security. You may request account or personal data deletion by emailing jiuyue9927@gmail.com. Some records may remain in limited backups or where retention is legally required.

Security and international processing

We use reasonable technical and organizational safeguards, including hashed passwords, protected sessions, access controls, and encrypted network connections. Our providers may process information in countries other than yours, subject to their safeguards and applicable law. No online service can guarantee absolute security.

Your choices and rights

Depending on applicable law, you may request access, correction, export, restriction, objection, or deletion of personal information. You may also disconnect NinesFlow from your Google Account security settings. Contact us to exercise a request; we may need to verify your identity first.

Children, changes, and contact

The service is not directed to children under 16. We may update this policy as the product or legal requirements change and will post the revised date on this page.

For privacy questions or requests, contact jiuyue9927@gmail.com.