Privacy Policy

1. Who We Are

Clara Node ("Clara Node", "we", "us") is a social media intelligence platform that helps agencies, brands, creators, and marketing teams turn public social data into actionable insights. Our website and application are operated by Clara Node.

Clara Node is the Controller of all personal data described in this policy, as defined under EU GDPR.

Clara Node, France. privacy@claranode.com

2. What Data We Collect

2.1 Data You Provide

• Account information: Name and email address when you create an account
• Payment information: Processed by our payment provider; we do not store raw card data
• Support communications: Emails or messages you send us

2.2 Data Collected Automatically

• Usage data: Pages visited, features used, session duration
• Device and browser information: Browser type, operating system, IP address
• Cookies and similar technologies: See Section 7

2.3 Public YouTube Data

Clara Node uses YouTube API Services. Clara Node retrieves publicly available YouTube content via the YouTube Data API v3 and, for connected accounts (Section 2.4), channel analytics via the YouTube Analytics API. In addition to Clara Node's privacy practices described in this policy, Google's handling of your data is governed by the Google Privacy Policy. All data in this section is publicly available, not tied to Clara Node user accounts, and handled in accordance with the YouTube Terms of Service and the Google Privacy Policy.

What Clara Node stores:

How public data is used:

• Channel and video data powers creator search, channel analysis, and sponsor intelligence features
• Comment data is enriched with derived analytical outputs - sentiment labels, topic tags, and reaction classifications - and displayed to Clara Node's customers as part of the market intelligence product. This is analytical context, not a raw data export.

Storage and refresh: All public YouTube API data is stored for up to 30 days and then refreshed from YouTube, in line with YouTube API Services Developer Policies Section III.E.4.d. Content deleted on YouTube will not reappear after the next refresh cycle.

Derived metrics: Sentiment scores, topic classifications, engagement rankings, and other computed metrics are calculated by Clara Node. These metrics are not provided by, affiliated with, or endorsed by YouTube or Google.

Legal basis: Legitimate interest (Article 6(1)(f) EU GDPR). All data processed under this section is publicly available on YouTube. Clara Node processes it to provide market intelligence analytics, not to profile or target individuals.

Third-party data subjects: Channel owners and comment authors whose data appears in Clara Node have not registered with Clara Node. Because of the volume of data processed, individual notification is not possible, in accordance with Article 14(5)(b) EU GDPR (gdpr-info.eu/art-14-gdpr).

If you are a YouTube creator or commenter and want your data removed from Clara Node, contact privacy@claranode.com. We will process your request within 30 days.

2.4 Connected YouTube Account Data (Optional)

You may connect one or more YouTube channels to Clara Node via Google OAuth, whether the channel is your own, your employer's, or a client's you are authorized to manage. Connection is voluntary. The channel owner (or a Google Brand Account manager with equivalent rights) must complete the OAuth consent flow. If the channel is not your own, you confirm that you are acting as an agent expressly approved by the channel owner, as contemplated by YouTube API Services Developer Policies Section III.E.3.b.

When a channel is connected, Clara Node requests read-only access to the YouTube Analytics API (yt-analytics.readonly scope) to retrieve:

• Channel performance metrics (views, watch time, impressions, click-through rate)
• Video-level performance data for videos owned by the connected channel
• Audience retention and traffic source data

Clara Node does not access:

• Monetization or revenue data
• Private or unlisted video content
• Data from any channel other than those explicitly connected
• The ability to post, modify, or delete anything on the connected channel

This access is strictly read-only. Clara Node uses this data solely to display analytics to you and any other users within your Clara Node organization who have been granted access. It is not shared with users outside your organization, not sold, not used to serve advertisements, and not transferred to ad networks or data brokers.

No human at Clara Node reads or accesses connected channel data except where you have explicitly consented, where it is necessary to investigate a security incident, where required by law, or in aggregated form for internal operations.

Revoking access - two paths:

• In-app revocation: Disconnect the channel from Clara Node account settings. Clara Node programmatically revokes the OAuth token with Google and deletes all authorized data within 7 days.
• Google security settings revocation: The channel owner can revoke Clara Node's access to their data at any time via the Google security settings page at myaccount.google.com/connections. Clara Node periodically re-validates tokens; upon detecting revocation, all authorized data is deleted within 30 days (Section III.D.2.c.ii).

3. How We Use Your Data

4. Data Retention

• Public YouTube API data (non-authorized): Raw data is refreshed or deleted every 30 calendar days, in line with YouTube API Services Developer Policies Section III.E.4.d
• YouTube comment data: Raw comment text is deleted within 30 days of collection. Derived analytical outputs (sentiment scores, topic labels) may be retained longer as Clara Node's own computed data
• Connected account analytics data: Retained while your YouTube account is connected and re-validated every 30 calendar days in line with YouTube API Services Developer Policies Section III.E.4.b. Deleted within 7 days of in-app revocation, or within 30 days of revocation via Google security settings
• OAuth tokens: Revoked and deleted within 7 days of in-app disconnection
• Account data: Retained for the duration of your account, plus up to 90 days after account deletion
• Usage logs: Retained for up to 12 months

Deletion requests: For YouTube API authorized data deletion requests, Clara Node completes deletion within 7 days (YouTube Developer Policy III.E.4.g). For general GDPR data subject requests, Clara Node responds within 30 days per Article 12 EU GDPR. These are separate obligations and both are honored.

5. Data Sharing and Third Parties

We do not sell your personal data. We do not share OAuth-authorized data with ad networks, data brokers, or any third party except as listed below.

Service providers (processors):

• Infrastructure and hosting: Cloud servers and storage, located within the EEA
• Payment processing: To handle subscription billing - they receive only what is necessary to process payment
• Analytics tools: To understand aggregate product usage via aggregate counters and anonymized usage data
• Email and support tools: To communicate with users and handle support requests

We have Data Processing Agreements in place with all processors.

Other cases:

• Legal requirements: When required by law, court order, or to protect rights and safety
• Business transfers: In the event of a merger or acquisition, with advance notice to users

Third-party content and cookies: Clara Node does not currently serve third-party advertisements. Some third-party tools (analytics, support) may set cookies or access data on your device. See Section 7 for details.

6. International Data Transfers

All Clara Node servers and infrastructure are located within the European Economic Area (EEA). Personal data collected by Clara Node is stored and processed within the EEA and is not transferred to third countries.

If this changes in the future, we will update this policy and ensure appropriate safeguards (such as Standard Contractual Clauses) are in place before any transfer takes place.

7. Cookies

Clara Node stores and accesses information on your device, including cookies and similar technologies, in connection with its use of YouTube API Services. Specifically:

• Authentication cookies: Required for session management and to keep you signed in. These are essential and cannot be disabled without affecting core functionality
• Preference storage: Cookies and browser storage remember your language choice and interface settings (such as sidebar layout and search state). These contain no tracking identifiers
• Analytics: Clara Node uses a cookieless analytics service to measure aggregate usage. It does not set cookies and does not track you across sites

When YouTube content (such as video thumbnails) is displayed in Clara Node, Google and YouTube may store, read, or access information on your device, including cookies and similar technologies, under the Google Privacy Policy.

You can manage or delete cookies at any time via your browser settings. Blocking essential cookies will prevent you from signing in to Clara Node.

8. Automated Decision-Making

Clara Node uses automated processing (AI and algorithms) to derive sentiment scores, topic classifications, and engagement metrics from YouTube data. This processing is applied to public YouTube content.

Clara Node does not use automated decision-making to make decisions about individual users that produce legal or similarly significant effects. All analytical outputs are informational tools - business decisions based on Clara Node's data remain the responsibility of the user.

9. Your Rights

Under EU GDPR you have the right to:

• Access: receive information about the personal data we hold about you
• Rectification: correct inaccurate data
• Erasure: request deletion of your data when processing is no longer necessary
• Objection: object to processing based on legitimate interest, including direct marketing
• Restriction: limit how we process your data in certain circumstances
• Portability: receive your data in a machine-readable format
• Withdraw consent: where processing is based on consent (e.g. connected YouTube account), you may withdraw at any time without affecting prior processing
• Not to be subject to automated decision-making: you have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects (Art. 22 EU GDPR). As described in Section 8, Clara Node does not make such decisions about individuals

To exercise any of these rights, contact privacy@claranode.com.

Deleting stored data and revoking Google access:

• Stored data deletion: You can request deletion of any data Clara Node has stored about you, including data obtained through YouTube API Services, by contacting privacy@claranode.com or by deleting your account in account settings. Disconnecting a connected YouTube channel in account settings deletes its authorized data within 7 days
• Revoking access via Google: In addition to Clara Node's in-app controls, you can revoke Clara Node's access to your data at any time via the Google security settings page at myaccount.google.com/connections

Response times:

• YouTube API authorized data deletion: completed within 7 days (YouTube Developer Policy III.E.4.g)
• All other GDPR data subject requests: responded to within 30 days (EU GDPR Article 12)

If you believe we are not processing your data correctly, you have the right to lodge a complaint with the French data protection authority: CNIL (Commission Nationale de l'Informatique et des Libertés), cnil.fr, +33 1 53 73 22 22.

10. Data Security

We use industry-standard security measures including:

• Encryption in transit (TLS) and at rest
• Access controls and role-based permissions
• Regular security reviews
• Administrative and organizational controls limiting access to personal data

No system is completely secure. We cannot guarantee absolute security but will notify affected users without undue delay in the event of a data breach that poses a high risk to their rights and freedoms.

11. Children and Made For Kids Content

Clara Node is not directed at anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact privacy@claranode.com and we will delete it.

Where Clara Node processes YouTube videos designated as Made For Kids, behavioral tracking is disabled for that content and data collection conforms to COPPA and GDPR requirements applicable to content directed at children.

12. Google API Services User Data Policy

Clara Node's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• OAuth data received from Google APIs is used only to provide and improve Clara Node's analytics features to the user who granted access
• OAuth data is not used to serve advertisements or for ad targeting or retargeting
• OAuth data is not transferred to or shared with ad networks, data brokers, or any third party except as described in Section 5
• Human access to OAuth data is restricted as described in Section 2.4

13. Changes to This Policy

We may update this policy. We will notify registered users by email for material changes. The "Last updated" date at the top reflects the current version.

14. Contact

Clara Node, France

privacy@claranode.com