Privacy Policy

1. About ProdBeast

ProdBeast is a private, invite-only video review and publishing platform that helps content teams manage vendor video submissions, review them collaboratively, and publish approved videos to YouTube. ProdBeast is operated by Yadav Narayan (yadavnarayann@gmail.com).

2. Information We Collect

• Account information: Your name and email address provided during invitation or sign-up.
• Organisation profile: Your organisation's name and logo, uploaded during onboarding and stored to identify your team within the platform.
• Comments and feedback: Text comments and timestamped notes left during the video review process.
• YouTube publish metadata: Titles, descriptions, tags, and scheduling details you provide when publishing a video.
• Usage data: Basic analytics via Vercel Analytics (page views, performance metrics — no personal identifiers).

3. Organisation Structure and Access Control

ProdBeast operates on an organisation-level model. Each company (organisation) has its own isolated workspace — members of one organisation cannot access another organisation's files, comments, or data.

• Invite-only access: ProdBeast does not offer open registration. Accounts are created only by the ProdBeast platform administrator or by designated organisation administrators (org admins).
• Organisation administrators: Org admins may invite new members, update member names and roles, and remove members from their own organisation. They cannot access other organisations' data.
• Organisation data: Organisation name and logo are stored in Supabase (PostgreSQL and Supabase Storage respectively). Logos are stored in a public storage bucket to enable display within the platform.

4. Google Drive and YouTube — Your Own Accounts

ProdBeast does not store or hold copies of your Google Drive files or YouTube data. When you connect Google Drive or YouTube, you are granting ProdBeast temporary, scoped access to your own Google account via OAuth 2.0. Before access is granted, Google's OAuth consent screen will display the exact permissions being requested so you can review and approve them. Your files remain in your own Google Drive at all times.

ProdBeast uses this access solely to:

• Google Drive API: Read and stream video files from your Drive so team members can review them inside the platform. No files are copied or stored by ProdBeast.
• YouTube Data API: Publish approved videos from your Drive to your YouTube channel on your behalf, using metadata you provide.

For in-platform video playback, ProdBeast uses Mux — a third-party video streaming service. During the review period, a temporary transcoded copy of the video may be held by Mux to enable smooth HLS playback. This copy is deleted from Mux when the video is published to YouTube or when the file is removed from the platform.

5. Google API Limited Use Disclosure

ProdBeast's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:

• Google user data is used only to provide the video review and publishing features described in this policy — for no other purpose.
• We do not use Google data to serve advertising.
• We do not sell or transfer Google user data to third parties, except as necessary to operate the platform (e.g. streaming via Mux).
• We do not allow humans to read your Google data without your explicit request for support, or unless required by law.
• We do not use Google data to train AI or machine learning models.

6. Data Storage and Security

Account and application data (user profiles, comments, status history, organisation records) are stored in Supabase (PostgreSQL) with encryption at rest and in transit. Organisation logos are stored in Supabase Storage (public bucket, accessible only via permanent URL). Video files are never copied to ProdBeast servers — they stay in your Google Drive. Mux holds temporary transcoded copies during the review lifecycle only. Email notifications are sent via Resend. The platform is hosted on Vercel. We take reasonable technical measures to protect your data.

7. Data Sharing

We do not sell or rent your personal information. Data is shared only with the third-party services required to operate the platform — Supabase, Google, Mux, Resend, and Vercel — each under their own terms and privacy policies. We may disclose data if required by applicable law.

8. Data Retention

Account data is retained for as long as your account is active. Organisation data (name, logo, member list) is retained for as long as the organisation is active on the platform. You may request deletion of your account and associated data by contacting us. Org admins may remove members at any time; the ProdBeast administrator can remove an entire organisation on request. Mux video copies are deleted on publish or file removal. We do not retain any Google Drive or YouTube data beyond what is needed to complete the action you requested.

9. Your Rights

You may access, correct, or request deletion of your personal data at any time by contacting us. You can also revoke ProdBeast's access to your Google account at any time through your Google Account permissions.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the platform. Continued use of ProdBeast after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or data requests, contact:
Yadav Narayan
yadavnarayann@gmail.com