Last updated: 6 October 2026
1. Who we are
Connecsi (the "Service") is operated by Oxalier Digital Sp. z o.o. ("Connecsi", "we", "us"), a company registered in Poland.
- Registered address: Opoczyńska 9/5, 02-522 Warszawa, Poland
- VAT ID: PL5213973261
- Contact: privacy@connecsi.net
For the purposes of the EU General Data Protection Regulation (GDPR), Oxalier Digital Sp. z o.o. is the data controller of personal data processed through the Service.
2. Scope
This Policy explains what personal data we collect when you use connecsi.net, app.connecsi.net, and related services, why we process it, the legal bases we rely on, who we share it with, and the rights you have. It applies to brands, creators, and visitors.
3. Information we collect
Information you provide
- Account & profile: name, email address, password (stored hashed by our authentication provider), account role (brand or creator), and any profile details you add.
- Communications: messages, proposals, and content you exchange with other users through the Service, and any correspondence you send us.
- Payment information: when paid features are enabled, billing details are processed by our payment provider; we do not store full card numbers.
Creator channel data (creators who connect a channel)
- When you connect a YouTube channel via Google OAuth, we receive and store your channel identifier, handle, and public channel statistics (e.g., subscriber count, view counts, engagement metrics), and an OAuth refresh token held in encrypted form so the connection can be maintained. You grant only read access (
youtube.readonly).
Public creator data (non-members)
- To operate the discovery marketplace, we collect and store publicly available information about creators who have not registered (e.g., public YouTube channel data). If you are such a creator, you can ask us to access or remove this data — see Section 11.
Information collected automatically
- Usage and device data: log data, IP address, browser/device type, and interactions with the Service.
- Cookies and analytics: see Section 7 and our Cookie Policy.
AI feature inputs
- When you use AI-assisted drafting, the relevant conversation and campaign context is sent to our AI provider to generate a draft. See Section 6.
4. How we use your data and our legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Provide, operate, and maintain the Service and your account | Performance of a contract |
| Operate the two-sided marketplace (discovery, offers, packages, messaging, campaigns, reporting) | Performance of a contract; legitimate interests |
| Process public creator data to power discovery | Legitimate interests (with a balancing test) |
| Analytics and improving the Service | Consent (analytics cookies); legitimate interests |
| Security, fraud prevention, and protecting the Service | Legitimate interests |
| Communications and support | Performance of a contract; legitimate interests |
| Billing, tax, and accounting (where applicable) | Legal obligation; performance of a contract |
| Marketing communications (if any) | Consent |
Where we rely on legitimate interests, you may object (Section 11).
5. YouTube API Services and Google user data
Connecsi uses YouTube API Services. When you choose to connect your YouTube channel to your Connecsi account, you authorize Connecsi, through Google's OAuth consent flow, to access certain data from your YouTube account on a read-only basis using the https://www.googleapis.com/auth/youtube.readonly scope.
What we access. With your authorization we access only your own YouTube channel's information — including your channel identity (to confirm you own the channel you are connecting), your channel statistics (such as subscriber count and view and engagement metrics), and data about your recent videos. This access is read-only: we never create, upload, modify, delete, or post anything on your YouTube account, and we never request, collect, or store your YouTube or Google login credentials.
How we use it. We use this data solely to provide the Connecsi features you signed up for: verifying that you own the connected channel, building and displaying your creator profile, generating your Aura Score, displaying your collaboration packages, and producing your campaign performance reports.
How we store and share it. Your authorization token is stored encrypted and access-restricted. We do not sell your YouTube data, do not use it for advertising, and do not transfer it to third parties except service providers strictly necessary to operate Connecsi (such as our hosting and database provider). Connecsi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Your control and deletion. You can disconnect your YouTube channel at any time from within Connecsi; when you do, we revoke Connecsi's access with Google and delete the stored authorization token. You can also review and revoke Connecsi's access directly in your Google Account's security settings at https://myaccount.google.com/permissions. If you revoke access or disconnect your channel, we remove your access tokens within 1 day.
Public YouTube channel data. To help brands discover creators, Connecsi uses YouTube API Services to collect publicly available information about YouTube channels, including channels whose owners have not signed up to Connecsi. This includes the channel name, handle, description, profile image, country, subscriber, view and video counts, and details of recent public videos (titles, publish dates, and view, like and comment counts). We do not access private data.
How we use and share this data. We use this data to build creator profiles that brands using Connecsi can search and view, to calculate the Aura Score, and to show how a channel's statistics change over time. Creator profiles, including public channel data and the Aura Score, are visible to brand users of Connecsi, and Aura Scores can also be checked through our public Aura Scan tool. We do not sell YouTube data or share it with third parties for their own use.
The Aura Score. The Aura Score is Connecsi's own score, calculated by us from public channel statistics. It is not provided, verified or endorsed by YouTube.
How long we keep YouTube data. We refresh or delete stored YouTube data at least every 30 days. Where YouTube's API policies permit, we keep statistics (such as subscriber and view counts) and scores calculated from them for up to 36 months to show trends over time, after which they are deleted.
Removing your channel. If you are a creator and want your channel removed from Connecsi, contact us at privacy@connecsi.net and we will remove your data within 30 days.
Applicable Google terms. By connecting your YouTube channel and using these features, you agree to be bound by the YouTube Terms of Service. Google's handling of your data is governed by the Google Privacy Policy.
If you have questions about how Connecsi handles data accessed through YouTube API Services, contact us at privacy@connecsi.net.
6. AI features
Some features use a third-party AI provider (Anthropic) to generate draft text from the conversation and campaign context you supply. This content is processed solely to return your draft. Drafts are assistive and should be reviewed before use. We do not use this content to train third-party models.
7. Cookies and analytics
We use strictly necessary cookies to run the Service and, with your consent, Google Analytics to understand usage. Non-essential cookies are not set until you consent via our cookie banner. Full details and controls are in our Cookie Policy.
8. Who we share data with (processors)
We share data with vetted service providers who process it on our behalf under data-processing agreements:
- Supabase — database, authentication, and storage
- Resend — transactional email
- Hostinger — hosting
- Cloudflare — content delivery and security
- Google LLC — YouTube Data API and Google Analytics
- Anthropic — AI drafting
- Stripe — payment processing (when paid features are enabled)
We may also disclose data where required by law or to protect our rights and users. We do not sell personal data.
9. International transfers
Some processors are located outside the European Economic Area. Where data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
10. Data retention
We keep personal data only as long as necessary for the purposes above:
- Account and profile data: for the life of your account and a reasonable period afterwards. (Confirm exact period with counsel.)
- Connected-channel tokens: until you disconnect the channel or delete your account.
- Public creator data (including YouTube data): we refresh or delete stored YouTube data at least every 30 days. Where YouTube's API policies permit, we keep statistics (such as subscriber and view counts) and scores calculated from them for up to 36 months to show trends over time, after which they are deleted. Creators can ask us to remove their data at any time (see Section 5).
- Billing records: as required by Polish tax and accounting law.
11. Your rights
Under the GDPR you have the right to: access your data; rectify inaccurate data; erase data ("right to be forgotten"); restrict or object to processing; data portability; and to withdraw consent at any time (without affecting prior processing).
You can delete your account yourself at any time from Settings → Danger zone → Delete account in the app. This permanently erases your profile, connected channels, and personal data, revokes our access to your Google account, and removes your favorites, alerts, notifications, AI credits, and the offers/packages/campaigns you posted. Records shared with another party (messages, proposals, agreements, campaign participation) are retained for that other party but anonymized so you are no longer identifiable.
Alternatively, to exercise any right — or to request deletion — email privacy@connecsi.net. We will respond within the timeframes required by law.
You also have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland.
12. Data security
We apply technical and organisational measures appropriate to the risk, including encryption in transit, hashed credentials, encryption at rest of sensitive credentials such as OAuth refresh tokens, role-based access controls, and row-level data isolation between accounts. No method of transmission or storage is completely secure, but we work to protect your data and to address any incident responsibly.
13. Children
The Service is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.
14. Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where appropriate, notify you.
15. Contact
Questions or requests: privacy@connecsi.net — Oxalier Digital Sp. z o.o., Opoczyńska 9/5, 02-522 Warszawa, Poland.