Privacy Policy
Last updated: 29 July 2026
Klyf provides YouTube channel diagnostics. You connect your YouTube channel and we analyze your own Studio data to tell you which of your videos to fix first and why. This policy explains what we access, why, how long we keep it, and how to remove it.
Google / YouTube data we access
When you connect your channel, you grant us access through Google’s OAuth consent screen. By default we request two read-only scopes:
- youtube.readonly: to list your videos and read their public metadata (titles, publish dates, durations).
- yt-analytics.readonly: to read your channel’s analytics, including impressions, click-through rate, audience retention, watch time, views, and subscribers gained.
We access only your own channel’s data, and we never access other people’s channels. Unless you explicitly turn on auto-reply (see below), Klyf holds read-only access and never posts, edits, or deletes anything on your channel.
Posting replies (optional, Pro only)
If you are on Klyf Pro and choose to turn on auto-reply, we ask for one additional Google scope, youtube.force-ssl, so Klyf can post comment replies for you. This is entirely opt-in: you grant it through a separate Google consent screen, and only after you ask to enable auto-reply. We use it for a single purpose, to post replies you have explicitly approved. We never edit or delete comments, we never post anything without showing you the exact text first, and we never use this access to read or change anything else on your channel. You can revoke it at any time from your Google Account permissions page, which turns auto-reply off while leaving your read-only diagnostics working.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. YouTube analytics you authorize are handled in accordance with the YouTube Terms of Service and the Google Privacy Policy.
Public comments
To tell you what your audience keeps asking for, Klyf also reads the public comments on your recent videos using a YouTube Data API key. These are comments already visible to anyone on YouTube; reading them does not use your account’s authorization. We summarize the themes for you and do not sell or share this data. Posting replies is a separate, opt-in step described above under “Posting replies”, and only ever posts text you have approved.
How we use it
We use your channel data solely to generate your diagnostics: a ranked list of your videos, the funnel stage where each is underperforming (distribution, click-through, retention, or subscriber conversion), and the estimated cost of each gap. We do not use your data to train machine-learning models, and we do not sell it or share it with advertisers or data brokers.
Access tokens
Your Google refresh token is stored encrypted at rest and is used only to retrieve your analytics on your behalf. You can revoke our access at any time from your Google Account permissions page, or by disconnecting Klyf. On revocation we stop all access immediately.
Data retention and deletion
- Raw YouTube data (daily metrics, impressions, click-through rate) is retained for a maximum of 30 days, consistent with the YouTube API Services Terms of Service, then deleted.
- Derived statistics (medians, funnel diagnoses, retention summaries) that we compute from your data may be retained longer to show you trends over time.
When you disconnect your channel, or on request to privacy@klyf.ai, we delete your stored data, both raw and derived, and revoke and destroy your stored tokens. Deletion is complete and permanent.
Sharing
We do not share your channel data with third parties except infrastructure providers strictly necessary to operate the service (our database and hosting providers), who process it under contract on our behalf. We disclose data if required by law.
Changes
We’ll update this page and the “last updated” date when this policy changes.