YourLens StudioPrivacy Policy
YourLens Studio ("we", "us") operates yourlenstudio.com and an internal staff dashboard for managing client social media accounts. This Privacy Policy explains what information we collect, how we use it, and your rights.
At a glance
Information We Collect
From clients and contacts: Name, email, phone number, and project details shared during inquiries or contracts.
From connected social accounts (Meta, Instagram, X, LinkedIn, TikTok, YouTube):When an account owner authorizes our internal dashboard via OAuth, we receive and store the open ID / user ID, display name, username, avatar URL, access token, and refresh token. We do not collect followers' personal data, private messages, or content unrelated to publishing.
TikTok specifics: Via the user.info.basic scope, we collect open_id, display_name, and avatar_url. Via video.publish and video.upload scopes, we publish video content the staff explicitly composes. We do not access private inbox, contacts, or any data outside the scopes granted.
Via the youtube.readonly scope we read only the connected channel's ID, title, handle and thumbnail, to show which channel a scheduled post belongs to. Via youtube.upload we upload only the videos the account owner (or staff acting on the owner's instruction) explicitly composes and schedules, with the title, description and privacy setting they choose. We store the channel ID, title, handle, thumbnail URL, an access token and a refresh token. We do not read, download, analyse, sell or share any other YouTube data, and we do not use it for advertising.
You can revoke our access at any time from your Google Account security settings or by removing the channel from the dashboard's Accounts page. Stored YouTube tokens and identifiers are deleted within 30 days of revocation, or immediately on request.
How We Use Information
- →To identify which connected account a scheduled post belongs to in our composer UI
- →To publish video and image content the staff explicitly composes
- →To schedule posts and report success/failure back to staff
- →To send transactional email notifications about publishing outcomes
Data Storage and Security
All data is stored on our private servers located in the United States (GoDaddy infrastructure). Access tokens are stored in an access-restricted database on the same server and are never exposed to the browser. HTTPS (TLS 1.2+) is enforced for all data in transit. Access to the internal dashboard is restricted to authorized staff via session-based authentication.
Data Retention and Deletion
We retain connected-account credentials for as long as the account remains linked. When a user revokes access (via the platform's own settings, e.g., TikTok → Settings → Manage app permissions, or Google → myaccount.google.com/permissions for YouTube), we delete all associated tokens and identifiers within 30 days.
You may also request immediate deletion by emailing yourlenstudio@gmail.com from the email associated with your account.
Your Rights
Third-Party Platforms
Our integrations rely on the official APIs of Meta, Instagram, X, LinkedIn, TikTok, and YouTube (YouTube API Services). Each platform has its own privacy policy:
Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this policy as our practices evolve. Material changes will be reflected in the "Last updated" date above and communicated to active clients.
Contact
Questions about this policy or to exercise your rights: