Volans Core Privacy Policy

Volans Core is used only by authorized Volans personnel to manage the brands Volans owns and operates. The only Google accounts connected to it are those of the owners of those brands' own YouTube channels, who grant access themselves through Google's consent screen.

With the channel owner's consent, Volans Core requests two read-only scopes: https://www.googleapis.com/auth/youtube.readonly and https://www.googleapis.com/auth/yt-analytics.readonly. Through them it reads:

• the channel's ID, name and handle;
• channel statistics: subscriber count (if public), video count and total views;
• the list of the channel's recent uploads with title, publish date, and view, like and comment counts;
• aggregate analytics for the owner's own channel over recent periods (views, watch time, likes, comments, shares).

We do not access private video files, comment text, viewers' personal information or demographics, or revenue data. We cannot upload, edit, delete or comment on anything.

We use this data only to let the channel's owner and authorized Volans staff review the channel's performance in Volans Core's owner tools. Volans Core shows the figures exactly as YouTube provides them; it does not calculate new or derived metrics from them. We do not use the data for advertising, we do not sell it, and we do not use it for any unrelated purpose.

Volans Core does not send YouTube data to any AI model or AI service. Volans Core's AI-assisted departments are technically blocked from reading it: the block is enforced in the software, before any request to YouTube is made, and is covered by automated tests. As an internal rule, our staff do not enter YouTube data into AI tools. We do not use this data to develop, improve or train generalized artificial intelligence or machine-learning models.

Volans Core's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell, rent, transfer or disclose Google user data to third parties, except when required by law or with the channel owner's consent. It is processed on computers controlled by Volans. Our staff do not read this data except as necessary for security, to comply with law, or for the internal purposes described above.

• YouTube data: Volans Core does not store it. When an authorized person asks to see a channel's data, Volans Core retrieves it from YouTube, shows it in that person's tool, and keeps it in memory only for that request. It is not written to any database, file or log, and this is verified by automated tests that search the database, its files and the logs for any piece of the data.
• Credentials: the authorization credential for a connected channel is kept in the Windows credential store on computers controlled by Volans. It is never written to source code, configuration files or logs. Short-lived access tokens are held in memory only.
• Activity log: our activity log records only that a request was made (when, what kind, its outcome). It contains none of the YouTube data.
• Separation: each brand's data is kept separate from every other brand's, and each connected channel's authorization is used only for that channel.

• Retention: because Volans Core keeps no copy of YouTube data, nothing of that kind expires, needs refreshing or waits to be deleted.
• If you revoke access or ask us to delete: because no YouTube data is stored, there is no stored YouTube data to delete when you revoke access or ask us to delete data. Google's requirement to delete stored data within 7 calendar days is therefore met by design, and it does not depend on any of our computers being switched on. Revoking access at Google stops Volans Core from obtaining new access.
• The stored credential: after you revoke access, the credential kept on our computer no longer works and cannot be used to obtain any data. Volans Core deletes it the next time its software runs and notices that access has ended. While the computer is on, Volans Core checks at least once a day whether each connected channel owner's authorization is still valid, and a separate scheduled task on the same computer repeats the check every day. We cannot give a time for this deletion, because it cannot happen while the computer is switched off, is offline, or no authorized operator is signed in. Any deletion that does not succeed is recorded and reported to us, and is retried on the next run.
• Text written from the data: notes or reports that our staff write from this data are internal records kept outside Volans Core, and the automatic deletion does not reach them. We tell staff to cite the data instead of copying figures into them. If you ask, we search our internal records and remove YouTube figures from them as soon as we can.
• Deleting anything held by Volans Core does not affect data stored by YouTube. To delete data on YouTube, use YouTube or YouTube Studio.

You can revoke Volans Core's access to your Google account data at any time at https://security.google.com/settings/security/permissions. You may also email us to disconnect a channel.

To ask a question, raise a complaint about our privacy practices, ask us to disconnect a channel, or ask us to remove YouTube figures from our internal records, email info@volansjewelry.com with the subject line "Volans Core Data Request."

Volans Core is not directed to children under 13 and does not knowingly collect their information.

We may update this policy; the revision date above will change.

Volans · info@volansjewelry.com · https://volansjewelry.com