Privacy policy
Last updated 2026-10-13
Seraphim Insights is an internal analytics tool operated by the agency that operates this tool. This policy explains what it does with information from YouTube, TikTok, Instagram and Facebook and from visitors of tracked links.
YouTube API Services
Seraphim Insights uses YouTube API Services. By connecting a channel you also agree to the YouTube Terms of Service, and Google's handling of your information is described in the Google Privacy Policy.
What we read from YouTube, with the channel owner's permission
- The channel's ID and name, and its uploaded videos: titles, thumbnails, publish dates, durations and view counts.
- Video descriptions, only to check whether the agency's tracking links appear in them. Only which links were found is kept, never the description text.
- If the owner allows YouTube Analytics: views, watch time, average view duration, likes, comments, shares, subscribers gained and lost, traffic sources, audience retention, audience country, age, gender and device, and thumbnail impressions and click-through rate (YouTube Reporting API).
- Only if the owner separately allows description edits: the agency can add or tag its links in video descriptions, always after previewing the exact change, and can undo it. Nothing else on the channel is ever changed.
How it is used
Only to produce reports for the work the agency does for that channel owner: which videos bring views, clicks, sign-ups and sales. It is not sold, not used for advertising, not shared with other companies, and not sent to AI services.Seraphim Insights's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and security
The data is stored in a database on the agency's own computer, not on a public website. Google access tokens are stored encrypted. Only people with an account in the agency's Seraphim Insights can see the reports. Channel owners do not get, and do not need, an account.
How long it is kept
YouTube information is refreshed once a day while the channel is connected. Detailed report results are deleted after 48 hours; channel totals and video lists are kept while the channel stays connected. When access is removed, all stored YouTube information for that channel is deleted.
Removing access and deleting your data
- After connecting, the channel owner receives a private link that removes the access and deletes the stored YouTube information immediately.
- Access can also be removed at any time in your Google Account's third-party connections. Seraphim Insightsthen deletes the stored YouTube information at its next daily refresh (when the agency's computer is next on).
TikTok, Instagram and Facebook
A client can also connect these accounts from the same link, through each platform's own sign-in (no password is shared with the agency). By connecting you also agree to that platform's terms. Only read-only permissions are requested, and nothing is ever posted or changed:
- TikTok (Login Kit): your display name and account id, and permission to read your public videos with their view, like, comment and share counts.
- Instagram (professional accounts): your username and account id, and permission to read your posts and reels with their counts.
- Facebook: your account id, the names and ids of the Pages you choose to share, and permission to read those Pages' posts, reels and insights.
Today Seraphim Insights stores only the account's id and name and the platform's access token (encrypted), to confirm the connection; it does not yet read your videos, posts or insights. It is used only for the agency's reports about your accounts, never sold, shared or used for advertising.
Removing access and deleting your data: ask the agency to disconnect the account (this revokes the access at TikTok or Facebook and deletes everything stored from it), or remove Seraphim Insights yourself in the platform's settings (TikTok: Settings and privacy, Security and permissions, Apps and services permissions; Instagram: Settings, Website permissions, Apps and websites; Facebook: Settings, Apps and websites). When the agency disconnects an account, its stored information is deleted immediately.
Visitors of tracked links and pages
When someone opens one of the agency's tracking links, the click is counted with a random identifier stored in a first-party cookie, and the visitor is sent on to the destination. On pages where a client has installed the Seraphim Insights snippet, visits and sales are recorded with a random browser identifier and a one-way hashed network address, to credit sales to the video that brought the visitor. Raw IP addresses are not stored, and nothing is used for advertising.
Changes
If this policy changes, the date at the top changes too.