Privacy Policy

1. About this policy

This Privacy Policy applies to NextTake’s creator intelligence tools, marketplace, websites, and related services (collectively, the “Service”). NextTake (“we,” “us,” or “our”) is responsible for the personal information described here.

NextTake helps YouTube creators understand channel and video performance, compare uploads, review title and thumbnail packaging, and hire independent video editors and thumbnail designers. This policy explains what information we collect, why we collect it, how we use and share it, how long we retain it, and how you can control or delete it.

2. Information we collect

• Account information. Your email address, display name, profile image, authentication method, account preferences, and creator profile information. If you sign in with Google, we receive the identity information you authorize, such as your name, email address, and profile image.
• YouTube channel and video information. Channel identifiers, channel name, handle, description, thumbnail, subscriber and video counts, and video identifiers, titles, descriptions, thumbnails, publication dates, duration, privacy status, and public engagement counts.
• YouTube Analytics information. Creator-authorized measurements such as views, watch time, average view duration, average percentage viewed, audience-retention measurements, traffic sources, impressions, click-through rate, likes, comments, shares, and subscriber gains or losses where Google makes those measurements available.
• Google authorization information. The permissions you granted, connection status, authorization timestamps, and an encrypted refresh token that allows scheduled read-only synchronization after you leave the Service. We never receive or store your Google password.
• Marketplace information. Provider applications and profiles, portfolio samples, specialties, pricing and turnaround summaries, project briefs, messages, attachments, custom offers, order activity, deliveries, revision requests, and other content you submit.
• Payment and payout records. Stripe processes payment methods, identity verification, and bank details. We receive limited records such as Stripe account identifiers, transaction amounts, payment status, charge identifiers, and transfer status. NextTake does not store complete card numbers, bank-account numbers, or identity documents submitted to Stripe.
• Technical and usage information. Essential session identifiers, browser and device information, IP address, request timestamps, feature usage, diagnostic logs, and security events.

3. Google OAuth permissions and their purposes

Creator analytics, new YouTube connections, and channel synchronization are temporarily paused while NextTake focuses on the marketplace. Previously imported data and encrypted connection records are retained under this policy. Google sign-in remains available and does not request YouTube access.

Google sign-in and connecting a YouTube channel are separate actions. Signing in does not automatically connect a YouTube channel. We request only the permissions needed for the feature you choose.

These are read-only permissions. NextTake cannot use them to upload, edit, publish, or delete YouTube videos; manage comments; or change your YouTube account. We request offline access so scheduled synchronization can keep the workspace current. The resulting refresh token is encrypted before storage and never sent to the browser or an analysis provider.

4. How we use information

• Authenticate you, secure your session, and maintain your account.
• Connect the YouTube channel you select and import authorized channel, video, and analytics information.
• Create performance summaries, creator-specific baselines, comparisons, packaging reviews, Channel Memory, release context, and other features you request.
• Operate provider profiles, private conversations, project files, offers, orders, delivery, revisions, payments, and payouts.
• Send account, transaction, security, support, and important Service communications.
• Diagnose errors, prevent fraud and abuse, protect users, enforce our Terms, and comply with law.

5. Specific commitments for Google and YouTube user data

We use information received from Google APIs only to provide or improve user-facing NextTake features that are visible and requested by the user. We do not sell Google user data, rent it, use it for targeted advertising, or use it to determine creditworthiness or lending decisions.

We may transfer limited Google user data to service providers only where necessary to operate a requested feature. For example, secure cloud infrastructure stores and processes the data. Certain evidence-based analysis and thumbnail-review features may send limited video titles, thumbnails, and structured performance measurements to a model-service provider to generate the requested explanation. We do not send Google passwords, access tokens, or refresh tokens to that provider, and we do not use Google user data to train NextTake models.

Human access to Google user data is prohibited except when you provide affirmative permission for support, access is necessary to investigate security or abuse, access is required by applicable law, or the information has been aggregated or de-identified for internal operations.

NextTake’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

6. How we share information

We disclose information in the following circumstances. The Google and YouTube data restrictions above continue to apply:

• Service providers. Vendors that provide cloud hosting and storage, email delivery, model-assisted analysis, fraud prevention, and payment processing. They may process information only to perform services for us and subject to applicable agreements.
• Marketplace participants. Public provider profile information is visible to visitors. Project briefs, messages, attachments, orders, and deliveries are available to the participants in that project.
• Optional advertising. If you allow advertising cookies, we share limited public-page visit information with Google to measure advertising and with X to measure advertising and build audiences, as described under Cookies.
• At your direction. When you instruct us to share information or connect another service.
• Legal and safety reasons. When reasonably necessary to comply with law, protect rights or safety, investigate fraud or abuse, or enforce our agreements.
• Business changes. In connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections and applicable law.

7. Storage and security

NextTake uses Amazon Web Services for application infrastructure and private storage. Google refresh tokens are encrypted with a dedicated encryption key before storage. Authentication uses HttpOnly session cookies. Stored marketplace files are private and delivered to authorized participants through temporary access links. Connections use HTTPS, and access to production systems is limited to authorized operations.

No system can guarantee absolute security. If we discover a security incident affecting your information, we will provide notice when required by law.

8. Retention, disconnection, and deletion

We retain information while your account is active and as reasonably necessary to provide requested features, preserve your workspace, maintain transaction and security records, resolve disputes, and comply with legal obligations. Retention varies by data type and purpose.

When you disconnect YouTube, NextTake immediately stops future synchronization, removes the encrypted refresh token from the active connection, and attempts to revoke the token with Google. Previously imported channel information, analytics, comparisons, and derived insights may remain in your workspace so you do not lose your history.

You may request deletion of your account, Google user data, previously imported YouTube data, or other personal information by emailing admin@nexttake.app from the address associated with your NextTake account. We may verify your identity before completing the request. After verification, we will delete or de-identify applicable information unless limited retention is required for payment, fraud-prevention, security, dispute, or legal purposes.

You can also revoke NextTake’s Google access at any time through your Google Account connections. Revoking access stops future API access but does not automatically delete information already stored by NextTake; contact us to request deletion of that information.

9. Your choices and privacy rights

• You can revoke NextTake’s YouTube access through your Google Account permissions. Contact support to request removal of a stored connection or retained channel data while creator analytics is paused.
• Manage NextTake’s authorization from your Google Account.
• Delete eligible portfolio samples and marketplace attachments with the controls in the Service.
• Request access to, correction of, export of, or deletion of your personal information by contacting us.
• Appeal a privacy-request decision or ask questions about how your information is handled.

We will not discriminate against you for exercising a privacy right. Some rights depend on where you live, and we may need information to verify and process your request.

10. Cookies

NextTake uses essential cookies to sign you in, maintain a secure session, protect Google authorization flows, and remember necessary account state. These cookies are required for the Service to work and are not used for third-party advertising.

If you choose “Allow advertising,” we load the Google Ads tag and X Pixel on our signed-out homepage and provider-application landing page. Google and X may receive the public page address, advertising click and cookie identifiers, IP address, and browser/device information to measure NextTake ads. X also uses this information to help show you relevant NextTake ads. Google ad personalization and enhanced conversions are disabled in our tag configuration. X may process this information under its Privacy Policy. Google may process this information under its Privacy Policy.

With fresh advertising permission that explicitly names Google Ads and X Ads, we measure your first successfully submitted provider application with both services. An older Google application-measurement permission does not authorize X application tracking. After the application is saved, a separate confirmation page receives a single-use receipt that expires after two minutes, an opaque event identifier to avoid duplicate counting, and any consented Google or X ad-click identifiers. We retain those click identifiers in this browser for up to 30 days to connect an application with the ad that brought you here. Choosing “Essential only” clears them. We send X only the completion event, an opaque deduplication identifier, and a consented X ad-click identifier when available; we do not send names, emails, portfolio details, or other application contents. Opening the application page, creating an account, clicking Submit, failed submissions, retries, and profile edits are not application completions. The confirmation page is isolated from your signed-in session and private browser storage.

We do not load advertising tags in signed-in workspaces, messages, orders, or profile editing, and we do not send Google or YouTube API data, application form contents, or account details to them. Automatic form matching and automatic event collection are disabled for X.

Advertising is off until you allow it. Choose “Essential only” to decline, or change your decision through Privacy choices. Your preference is stored in this browser; Global Privacy Control disables advertising tracking. Withdrawing permission stops future advertising-tag loading and does not remove information already received by Google or X.

11. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Paid marketplace transactions are available only to users who can legally enter the transaction or act through an authorized legal representative. Contact us if you believe a child provided information in violation of this section.

12. International processing

NextTake operates from the United States. If you use the Service from another country, your information may be processed in the United States or other locations where our service providers operate, subject to applicable safeguards.

13. Changes and contact

We may update this policy as the Service changes. We will post the revised version here and update the date above. If a change materially affects how we use previously collected information, we will provide additional notice or request consent where required.

For privacy questions, requests, or complaints, contact admin@nexttake.app.