Trust and data
What vidrev can access, why, how long it keeps it, and how you remove it. Short version: nothing is posted without your approval, YouTube data is deleted within 30 days, nothing is sold, and you can delete everything yourself.
Permissions we ask for, and why
Each permission is the narrowest one that makes a feature work. Google and your CRM show you the permissions again on their own screen when you connect.
YouTube (Google)
- youtube.force-ssl
- Read new comments on your own channel to find your keywords, and post the replies you approve, one by one. YouTube offers no narrower permission that can post a reply. vidrev never likes, subscribes, deletes or changes anything else.
- openid, email, profile
- Know which Google account connected the channel and show it to you.
CRM sub-account (optional)
- contacts.readonly
- Find the tracking id and the buyer tag on contacts created by your own opt-in forms.
- contacts.write
- Create or update the contact of a person who opted in or bought through your tracked link, add the vidrev tags and the optional source note.
- opportunities.readonly
- Count a won opportunity as a buyer. Its value is never counted as revenue.
- payments/transactions.readonly
- Read payments and refunds, so revenue is attributed to the video and keyword that brought it.
- locations.readonly
- Show the name and website of the connected sub-account.
- locations/customFields.readonly, locations/customFields.write
- Create and read the one field "vidrev tracking id" (and, in Beast Mode, "vidrev prospect id").
- conversations.readonly, conversations.write, conversations/message.readonly, conversations/message.write
- Beast Mode only, which you switch on yourself: the comment thread where you approve or write the reply. Clean Mode never uses it.
Stripe (optional)
- Restricted key, read only (Charges, Customers, Invoices)
- Read payments and refunds for attribution. The key cannot change anything in your Stripe account; we store it encrypted and delete it when you disconnect.
YouTube data: the rules we follow
vidrev uses YouTube API Services and follows the YouTube API Services Terms and Developer Policies and the Google API Services User Data Policy, including the Limited Use requirements.
Stored YouTube data is refreshed or deleted within 30 days
A daily job deletes comment text, commenter names and ids, video and channel titles and reply ids once they are 30 days old. A returning commenter's id is checked with YouTube every 30 days and deleted when the comment is gone.
Disconnecting deletes the YouTube data
Disconnect in Settings, or removing access at myaccount.google.com/permissions: we revoke the grant and delete all YouTube data of that channel at once. A refused revoke never blocks the deletion.
You can revoke access at any time
Settings > YouTube channel > Disconnect, or https://myaccount.google.com/permissions.
Links to the YouTube Terms and the Google Privacy Policy
Both are linked in our Terms and Privacy Policy, and connecting a channel binds you to the YouTube Terms of Service.
Nothing is posted without the user's action
Every reply waits in your approval queue; only the reply you approve is posted, and there is a daily safety ceiling per channel.
YouTube data is not sold, shared or used for ads
Viewer data read through YouTube never leaves vidrev: not to you, not to your CRM, not to webhooks. The one exception is Beast Mode, which you switch on after a warning: the commenter's display name and comment reach only your own CRM, and are deleted there on day 29 unless the person opts in.
Limited Use of Google user data
Used only for the features you see, never for advertising, never to train AI models, and read by people only for support you ask for, security or the law.
Quota is used responsibly
New uploads come by push and the free RSS feed, comments are polled often only in the 48 hours after an upload, ids are batched, and the app stops calling when the day's budget is used.
Security
Encryption
All traffic uses TLS. Google tokens, CRM tokens, Stripe keys, AI keys and webhook secrets are encrypted at rest with AES-256-GCM; the key lives only in the server environment.
Sign-in
Magic links or a password stored as an scrypt hash, or Google sign-in. Sessions are server-side and can be ended by signing out.
Rotating tokens
CRM refresh tokens are rotated under a database lock, so two workers can never use the same token. A refused token stops the connection and emails you once.
Verified webhooks
Every incoming CRM webhook is checked against the platform's Ed25519 signature; every outgoing webhook is signed with your own secret.
Least access
We ask only for the permissions listed below, each with its reason. Only the owner can reach production; every admin action is written to an audit log.
Monitoring
The app and the worker are monitored every 5 minutes; failures are logged with a reference you can quote to support.
Where data lives
Railway (hosting and database, United States), Cloudflare (DNS, TLS, links), Resend (email). The full list is in the Privacy Policy.
Found a security issue? Write to me@vidrev.app; we answer within 2 working days.
Questions
Does vidrev post anything without me?
No. Every reply is a draft until you approve that specific reply. vidrev never likes, subscribes, deletes or edits anything on YouTube.
Do you read my viewers' comments?
Only top-level comments on your own videos, to find your keywords. Comments without a keyword are not stored. Comment data is deleted within 30 days.
What goes into my CRM?
In Clean Mode (the default) only people who opted in or bought through your own pages: their email, name, the vidrev tags and the tracking field. In Beast Mode, which you switch on yourself, a commenter's display name and comment also go there, and are deleted on day 29 unless the person opts in.
What happens when I uninstall the app from my CRM?
We delete our copy of the access tokens at once, together with any install still waiting to be claimed, and stop every sync. Contacts and tags we wrote stay in your CRM, because they are yours. The results your campaigns produced (which video and keyword brought an opt-in or a sale) stay in your vidrev reports until you delete your account.
What happens when I disconnect YouTube?
We revoke the access and delete all YouTube data of that channel at once. Your replies, clicks, opt-ins and sales stay in your reports.
How do I delete everything?
Settings > Account > Delete my account. It starts at once, finishes within minutes, and you get a confirmation email. See the Data deletion page for what is deleted.
Do you use my data to train AI?
No. Drafts are written by an AI model under terms that do not allow training on your data; the commenter's name is never sent. If you add your own AI key, your agreement with that provider applies.
Do you sell or share data?
No. We never sell data, never use it for advertising, and never share it except with the providers that run the service.
Can I connect more than one CRM sub-account?
One per vidrev account. To connect another sub-account, use a different vidrev account, or disconnect the current one first.
Anything else: me@vidrev.app.