Privacy Policy

1. Introduction & Overview

At BehaveIQ (operated by BehaveIQ Creator Intelligence Technologies, "we", "us", "our"), we respect your privacy and are committed to safeguarding your personal data. This Privacy Policy describes how we collect, use, store, share, and protect your information when you access https://www.behaveiq.in and use our YouTube growth analytics platform.

This policy complies with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, and the Google API Services User Data Policy.

2. YouTube™ API Services & Google User Data Policy

BehaveIQ uses the YouTube Data API v3 to provide channel audits, competitor benchmarking, outlier video detection, and audience comment mining.

3. Information We Collect

A. Account Information (via Google OAuth / Firebase)

When you sign in using Google OAuth, Firebase securely transmits your primary account details:

• Full Name and Display Name
• Verified Email Address
• Google Profile Picture Avatar URL
• Unique Firebase User Identifier (UID)

We do not receive or store your Google account password.

B. Payment & Billing Data (via Razorpay)

When you upgrade to a paid subscription (Pro Growth or Enterprise Studio), billing details are handled directly by our PCI-DSS Level 1 compliant gateway partner, Razorpay Software Private Limited.

• We receive: Razorpay Order ID, Payment ID, Signature, payment timestamp, and plan tier.
• We NEVER see, store, or log your credit card numbers, CVVs, debit card credentials, or bank UPI PINs.

C. Analytical Input & Creator Preferences

• YouTube channel links and competitor channel handles submitted for analysis.
• Optional custom YouTube Data API v3 keys provided in Settings. (Custom keys are encrypted and stored in your isolated database record).
• Custom filters, date range selections, and saved competitor lists.

D. Technical & Device Logs

• IP address, browser type and version, operating system, and session timestamps used for security telemetry and rate limiting.

4. How We Use Your Information

We use collected data solely for the following legitimate business purposes:

• To authenticate you and maintain your authenticated session.
• To compute statistical metrics (e.g. view velocity, outlier ratios, title length correlations).
• To generate AI title suggestions and audience comment summaries using Mistral AI models.
• To manage subscription quotas, track audits used, and process billing renewals through Razorpay.
• To notify you about critical service changes, security alerts, and billing receipts.
• To prevent fraudulent payments, quota abuse, and automated system attacks.

5. Data Storage, Security & Retention

Security: All communication between your browser and our servers is encrypted using Transport Layer Security (TLS 1.3 / SSL). Sensitive data is stored in dedicated, row-level-secured PostgreSQL databases hosted on Supabase with encryption at rest (AES-256).

Data Retention: We retain your account data and analytical history for as long as your account remains active. If you delete your account, all associated personal identifiers and cached audit queries are permanently purged from our active databases within thirty (30) days.

6. Third-Party Service Providers

We share minimal necessary data with vetted third-party infrastructure providers:

• Google LLC / Firebase: Authentication, Google OAuth, and YouTube Data API v3.
• Razorpay Software Pvt. Ltd.: Secure PCI-compliant subscription payment processing.
• Supabase Inc.: Encrypted cloud database storage and row-level authorization.
• Mistral AI: Large language models for processing anonymized video titles and comments. (No personal user identifiers are sent to Mistral).
• Vercel & Render: Application hosting and Content Delivery Network (CDN) edge routing.

7. Your Privacy Rights

Under the DPDP Act and global data regulations, you have the following rights:

• Right to Access: You can review your profile and audit records at any time in the dashboard.
• Right to Rectification: You can update your API keys and channel preferences directly in Settings.
• Right to Erasure / Deletion: You may request complete erasure of your account and analytical data by emailing support@behaveiq.in.
• Right to Revoke Permissions: You can revoke YouTube API permissions via your Google Account Security page.

8. Grievance Officer & Contact Details

In accordance with the Information Technology Act, 2000 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the contact details of our designated Grievance Officer are: