Privacy policy

Last updated: 31 October 2026

This policy explains how Lynch 369 Ltd ("we", "us"), company number 17522352, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, ICO registration ZC275882, handles personal data in Lynch 369 Connect (the "Service"). We are the data controller. You must agree to this policy before using the Service.

YouTube API Services

The Service uses YouTube API Services. By connecting YouTube you also agree to be bound by the YouTube Terms of Service. Google's handling of your data is covered by the Google Privacy Policy.

What we access and collect

• Account details you give us: name, email address, business name, logo and colour choices.
• With your permission, read-only YouTube data for your own channel: channel details (name, ID, images), your video list and video statistics, and YouTube Analytics reports for your channel (such as views, watch time and subscribers gained).
• If you choose to connect other services (for example Twitch, merch, membership or email tools), the data those services share with us for your account.
• Basic technical logs (IP address, browser type, time of request) for security.

We never ask for or store your Google or YouTube password.

How we use it

• Only to show your figures to you, and to people you invite, in your own dashboard.
• YouTube figures are shown as YouTube reports them. We do not calculate new metrics from YouTube data and we never combine your YouTube data with any other creator's data.
• To keep the Service secure and to meet our legal duties.

We do not sell your data, use it for advertising, or share it with data brokers. Our staff do not read your data unless you ask us to for support, it is needed for security, or the law requires it. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Who we share it with

Only service providers that run the Service for us under contract: Cloudflare (hosting and storage). They may not use your data for their own purposes. We do not allow third parties to serve ads in the Service.

Cookies

We use essential cookies only: one to keep your dashboard session, and one short-lived cookie to protect the connection process. We do not use advertising or tracking cookies.

How long we keep it and how we refresh it

• What we store about your YouTube connection: your channel ID and channel name, an encrypted refresh token, and the date you last used the Service. Your YouTube statistics and Analytics figures are fetched live from YouTube each time you open your dashboard and are not stored.
• We check at least every 30 days that we still have your permission to access your YouTube data. If we can no longer refresh your access, we delete the YouTube data we hold about you.
• Other stored YouTube data is refreshed or deleted within 30 days.
• If you do not use the Service for 30 days, we revoke our access and delete your YouTube data.
• Account details are kept while you have an account, then deleted within 30 days of closing it, unless the law requires longer (for example invoices).

Disconnecting and deleting your data

• You can disconnect YouTube at any time from Settings in your dashboard. We revoke our access with Google and delete all YouTube data we stored straight away (and in every case within 7 days).
• You can also remove our access from your Google Account at https://security.google.com/settings/security/permissions. When we detect this, we delete your YouTube data within 7 days, and in every case within 30 days.
• You can ask us to delete your stored data at any time using the "Disconnect and delete my data" button or by emailing us. We do this within 7 days.
• Deleting data from our Service does not delete anything on YouTube. To delete data on YouTube itself, use YouTube.

Security

Data is encrypted in transit (HTTPS) and stored with access limited to the account holder and invited users. Refresh tokens are encrypted with AES-GCM, and the key is held separately as a protected secret.

Your rights

Under UK GDPR you can ask to see, correct, delete, or move your data, and object to or limit how we use it. Our lawful basis is performing our contract with you and, for security logs, our legitimate interests. You can complain to the Information Commissioner's Office at ico.org.uk.

Contact

Questions or complaints about privacy: hello@lynch369.co.uk, 020 3856 3694, or post to 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.

Changes

If we change how we use your data, we will update this page and ask you to accept the new policy before continuing.