Privacy Policy

1. Introduction

TriplePoint ("we," "us," or "our") operates the Creator Verification Portal (the "Service"). This Privacy Policy explains how we collect, use, and protect information when you use our Service to verify your YouTube or Twitch channel for campaign qualification purposes.

2. Information We Collect

When you use our Service to verify your channel, we collect the following information through OAuth authorization:

YouTube (via Google OAuth 2.0)

We use Google's OAuth 2.0 protocol to verify your YouTube channel. When you authorize our application, we request access to the following scopes:

• YouTube read-only access — to retrieve your channel name, subscriber count, video upload history, view statistics, channel profile image, banner image, channel description, country, creation date, total view count, and recent video data (titles, view counts, and publish dates)
• Basic profile information — your name and email address associated with your Google account

We do not request write access to your YouTube account. We cannot post, modify, or delete any content on your behalf. The data retrieved is used solely to evaluate your channel's eligibility for campaign qualification and to display relevant channel details to authorized campaign managers.

Twitch (via Twitch OAuth 2.0)

We use Twitch's OAuth 2.0 protocol to verify your Twitch channel. When you authorize our application, we request access to the following:

• User read access — to retrieve your Twitch display name, user ID, channel URL, profile image, channel description, broadcaster type, and account creation date
• Channel information — follower count and recent VOD (Video on Demand) data, including stream titles and game names, to estimate average concurrent viewership

We do not request permission to perform any actions on your Twitch account. We cannot stream, chat, modify channel settings, or access private messages on your behalf.

Email Address

We collect your email address during the verification process. This is used to associate your channel verification with a contact email for campaign communication purposes.

3. How We Use Your Information

We use the information collected to:

• Verify your YouTube or Twitch channel meets the minimum requirements for specific campaigns
• Calculate channel performance metrics (average views, estimated concurrent viewership) at the time of verification
• Store a snapshot of your channel statistics and recent content data for campaign reporting purposes
• Display channel details (profile image, banner, description, recent content) to authorized campaign managers for review
• Provide campaign managers with a list of qualified creators and their contact information

Our use of Google user data is limited exclusively to providing and improving the user-facing features of this Service as described above. We do not use Google user data for serving advertisements, for training machine-learning or AI models, or for any purpose unrelated to the core functionality of the Service.

4. Data Storage and Retention

Your channel data and qualification results are stored securely in our database, which is hosted by Supabase with row-level security and encrypted at rest. We retain this data for the duration of the campaign plus twelve (12) months after the campaign ends for record-keeping and auditing purposes. After this retention period, data is permanently deleted from our systems.

OAuth access tokens are encrypted and temporary. We use short-lived session tokens (15-minute expiry) during the verification process and do not store long-term access to your YouTube or Twitch accounts. After verification is complete, we do not retain the ability to access your accounts.

Deletion requests: You may request deletion of your data at any time by emailing privacy@triplepointpr.com. We will process deletion requests within thirty (30) days and confirm completion to you via email. Deletion includes all channel metadata, qualification records, recent content data, and contact information associated with your account.

5. Third-Party Services

Our Service integrates with the following third-party platforms:

Google API Services

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data for the purpose of verifying YouTube channel eligibility for campaigns
• We do not transfer Google user data to third parties except as necessary to provide the Service
• We do not use Google user data for advertising purposes
• We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes, or it is required by law

Twitch API Services

Our use of the Twitch API complies with the Twitch Developer Services Agreement. We only access publicly available channel data and user-authorized information necessary for the verification process.

Infrastructure Providers

Our Service uses the following infrastructure providers to operate. These providers may process your data solely on our behalf and under our instructions:

• Supabase — database hosting, with data encrypted at rest and in transit
• Vercel — application hosting and content delivery

6. Data Sharing

Your verification data (channel name, profile image, channel description, statistics snapshot, recent content data, email address, and qualification status) is shared only with the following parties:

• TriplePoint campaign managers — authorized employees who administer the campaign you are applying to, for the purpose of reviewing your channel eligibility
• Infrastructure providers — Supabase and Vercel, acting as data processors on our behalf (see Section 5)

We do not sell, rent, trade, or otherwise transfer Google user data or any other personal information to third parties. We do not share your data with advertisers, data brokers, or any parties not listed above.

We may disclose your information only if required by law, legal process, or a valid governmental request. We will notify you of such disclosure to the extent permitted by law.

7. Your Rights

You have the right to:

• Revoke OAuth access at any time by visiting your Google Account permissions or Twitch Connections settings
• Request deletion of your data by contacting us
• Request access to the personal data we hold about you

8. Security

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS) for all connections
• Encrypted session tokens (AES-256-GCM) with automatic expiry
• Database encryption at rest with row-level security policies
• Role-based access controls limiting data access to authorized campaign managers
• Service-role authentication for all backend database operations

However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. If you become aware of any unauthorized access to your data, please contact us immediately at privacy@triplepointpr.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

TriplePoint
privacy@triplepointpr.com