ACT2VEX Privacy Policy

1. Scope

This policy applies to ACT2VEX’s website, creator and brand workspaces, campaign marketplace, sign-in services, and connected content-account features. ACT2VEX helps brands fund creator campaigns and helps creators submit content for eligibility, ownership, and performance verification.

2. Information we collect

• Account information: name, email address, account role, organization, country, profile information, authentication identifiers, and account preferences.
• Campaign and creator activity: campaign briefs, applications, submissions, public post URLs, content identifiers, review decisions, eligibility evidence, reward calculations, and related communications.
• Payment and compliance records: funding references, uploaded payment evidence, payout instructions, transaction records, acceptance records, audit events, fraud and security signals.
• Technical information: session and security data, timestamps, request metadata, error records, and information needed to protect the service.

3. Google Sign-In data

If you choose Google Sign-In, ACT2VEX requests your basic Google profile and email address. We use this information to create or authenticate your ACT2VEX account, identify the account to you, and protect access. Google Sign-In tokens are not used to access your YouTube content.

4. YouTube data we access

Connecting YouTube is optional and separate from Google Sign-In. ACT2VEX requests the read-only YouTube scope youtube.readonly. With your authorization, ACT2VEX may access and store:

• your YouTube channel ID and channel name;
• OAuth access and refresh tokens, stored in encrypted form;
• submitted video ID, title, description, channel ID, publication date, duration, privacy and upload status;
• available public statistics such as views, likes, and comments. YouTube does not provide share counts through the integration used by ACT2VEX.

ACT2VEX does not request your Google or YouTube password, upload or modify videos, manage comments or playlists, or change video visibility.

5. How Google and YouTube data is used

Google data is used only for user-facing ACT2VEX features: account authentication, confirming that a submitted YouTube video belongs to the connected creator channel, retrieving eligible video information and statistics, evaluating campaign requirements, preventing duplicate or fraudulent submissions, and supporting reward review. ACT2VEX does not sell Google user data or use it for advertising.

Google API data and Limited Use

ACT2VEX's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used for personalized advertising, sold to data brokers, or used to train generalized artificial intelligence or machine learning models.

When you submit a video to a campaign, its identifier, title, description, channel identity, available engagement counts, and verification results can be accessed by the relevant brand's authorized team and ACT2VEX reviewers to assess that submission. Other creators do not receive your private authorization credentials. Authorized staff may review submission evidence to provide the campaign review and support services you request.

6. When information is shared

Campaign information and approved verification results may be shown to the creator, the relevant brand organization, and authorized ACT2VEX reviewers or Accounting personnel as needed to operate the campaign. Service providers may process information only to host, secure, maintain, or support ACT2VEX. Information may also be disclosed when required by law, to protect users and the service, or as part of a corporate transaction subject to appropriate safeguards. OAuth tokens are stored on the backend and are not displayed to creators or brands.

7. Storage, security, and retention

ACT2VEX uses access controls, encrypted token storage, scoped permissions, audit records, and transport security intended to protect information. No system is completely secure. Information is retained only as long as reasonably needed for the purposes described here, campaign and payment reconciliation, security, disputes, and legal obligations. Retention periods differ by record type. Account records support your active account; submitted video metadata and observations support campaign reviews and their history. Disconnecting a content account removes its stored tokens but does not automatically delete previously saved submission observations or financial records. Request deletion of those records using the contact below; any records retained for reconciliation, disputes, or legal obligations are handled separately from the removed authorization credentials.

8. Your controls and deletion

You can disconnect YouTube under Creator Settings → Social Accounts. Disconnecting immediately disables the connection and removes the stored OAuth token envelope from ACT2VEX. You can also revoke ACT2VEX through Google’s third-party connections page.

To request deletion of remaining Google/YouTube data or your ACT2VEX personal data, contact luisa.gonzales@actech2.com from the email associated with your account. ACT2VEX will verify and process valid requests within the period required by applicable policy or law. Deleting ACT2VEX data does not delete data held by YouTube; manage or delete YouTube content directly through YouTube.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or obtain a copy of personal data, or object to certain processing. You may withdraw an OAuth authorization at any time. Withdrawal does not affect processing already completed before withdrawal.

10. Third-party services

Use of Google and YouTube is also governed by the Google Privacy Policy and YouTube Terms of Service.

11. Changes and contact

Material changes will be posted on this page with an updated date and, where required, additional notice or consent. Privacy questions and deletion requests may be sent to luisa.gonzales@actech2.com.