Addictd Enterprise

Privacy Policy

This policy explains how the private, invitation-only Addictd Enterprise workspace handles client and Google data. It is separate from the consumer Addictd product.

1. Scope

This Privacy Policy applies to Addictd Enterprise, an invitation-only service operated by addictd, Inc. for brand and agency consulting engagements. It covers the public Enterprise site, client sign-in, the private workspace, and its YouTube connection. Enterprise workspace data is not shared with the consumer Addictd product.

2. Data we collect

We collect only information needed to operate an invited engagement:

  • Account and organization data: work email, display name, optional avatar, organization membership, role, authentication events, and engagement status.
  • Google authorization data: the Google account email and identifier that authorized access, the read-only permissions granted, connection status, and the credentials needed to keep the connection working. Those credentials are encrypted and are never shown in the browser.
  • YouTube channel data: channel identity, video titles, descriptions, thumbnails, publication dates, duration, privacy status, and available view, like, and comment counts.
  • YouTube Analytics data: available audience-retention and relative- retention points for videos in the connected channel.
  • Service and security data: connection and upload status, relevant dates, and security records needed to operate and protect the workspace. Security records exclude Google credentials and other secret values.

3. How we use Google user data

Addictd Enterprise requests only account identity, email, read-only YouTube, and read-only YouTube Analytics access. We use that access to identify the account that connected the channel, automatically import the organization's own videos and available audience-retention data, show them in the client workspace, and deliver the consulting engagement.

The connection is read-only. Addictd Enterprise cannot publish, edit, rate, comment on, or delete anything on a client's YouTube channel. It does not request revenue data, Google Drive access, or a YouTube write scope.

We do not sell Google user data, use it for advertising, transfer it to data brokers, or use it to determine eligibility for credit or other high-impact decisions. Enterprise Google data is not shared with or used by the consumer Addictd product. Its use is limited to the client workspace and consulting services the organization authorized.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can review theGoogle Privacy Policyand manage connected applications inGoogle Account security settings.

4. Access and sharing

Organization members see only data belonging to organizations in which they hold a membership. Addictd's authorized operator may access a client's data when necessary to deliver the consulting engagement, answer a support request, investigate a security issue, or comply with law. That access is limited to those purposes and applicable confidentiality obligations.

We use outside services to host the Enterprise application, authenticate invited users, store client data, and keep the service available. They may process data only as needed to provide those services to us and under contractual or comparable confidentiality and security obligations. We may also disclose information when required by law, to protect the service or its users, or as part of a corporate transaction subject to appropriate notice and safeguards.

5. Retention, revocation, and deletion

While an engagement and its authorization remain active, we retain imported YouTube data only as needed to provide the authorized workspace and consulting service. We check that the Google connection remains valid and stop using it when access is no longer available.

  • An organization owner or administrator can disconnect YouTube in the workspace. The service asks Google to revoke access and removes the local connection, its protected credentials, and the YouTube data imported through that connection.
  • If access is revoked through Google, becomes invalid, or a client requests deletion, related Google data is deleted as soon as possible and within seven calendar days.
  • When Addictd closes an engagement, its workspace immediately becomes read-only and shows the date when its content will be deleted. Until that deadline, the client can still view the video analysis, delivered report, and advisory history. By the shown deadline, we delete the engagement's delivered report, advisory history, and engagement-specific access records. Closing or deleting one engagement does not delete the organization, its team memberships, sign-in accounts, or unrelated YouTube data. An earlier Google revocation or deletion deadline still takes priority.

Deleting data from Addictd Enterprise does not delete videos or other information held by YouTube. Clients must use YouTube itself to delete content from their channel. Limited account, security, tax, and contractual records may be retained where reasonably necessary to comply with law, resolve disputes, or enforce an agreement, but revoked YouTube Authorized Data is not retained for those purposes.

6. Security

Enterprise uses a separate application, sign-in system, Google connection, and data environment from the consumer Addictd product. Google credentials are encrypted, access is checked against the signed-in user's organization, and secret values are excluded from security records. More detail is available on our Security page.

No method of transmission or storage is perfectly secure. If we learn of a security incident affecting client data, we will investigate, contain it, and provide notice as required by applicable law and the relevant engagement agreement.

7. Your choices and rights

Depending on location, an individual may have rights to request access, correction, deletion, restriction, objection, or a portable copy of personal information. An organization owner or administrator can disconnect YouTube directly. Other requests can be sent to support@addictd.ai. We may verify the requester's identity and authority before acting on a request.

8. International processing

Addictd is based in the United States. Data may be processed in the United States and in other locations where our service providers operate, subject to the protections described in this policy and any safeguards required by applicable law or contract.

9. Changes to this policy

We may update this policy when the Enterprise service or legal requirements change. If a change materially expands how Google user data is used, we will update the disclosure and obtain any renewed consent required before using that data for the new purpose.

10. Contact

Questions, complaints, export requests, and deletion requests can be sent tosupport@addictd.ai or mailed to addictd, Inc., 1451 SW 52nd Way, Plantation, Florida 33317, United States.