PRIVACY POLICY

Last updated: October 5, 2026

WeeglAd SAS is committed to protecting the privacy of its users in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and the Data Protection Act.

1. Data Controller

Neurovia SAS
12 Avenue des Champs-Élysées, 75008 Paris
Email : contact@weeglad.com
DPO : [Nom du DPO]

2. Data collected

Data	Purpose	Legal basis	Duration
Email, last name, first name	Account Management	Contract	3 years inactive
Password (hashed)	Authentication	Contract	3 years inactive
SIRET, SIREN	Identity verification	Legal obligation	10 years
Offers & Campaigns	Connecting	Contract	Duration of relationship + 3 years
Messages	Communication	Contract	Duration of relationship + 3 years
IP (anonymisée), User Agent	Tracking, security	Legitimate interest	13 months
Cookies techniques	Site operation	GDPR Exemption	Session
Cookies analytics	UX Improvement	Consent	13 months
Bank details	Payments	Contract	Non stockées (Stripe/PayPal)
Transaction history	Accounting	Legal obligation	10 years

2.1 Google and YouTube data

If you choose Google sign-in, Weeglad receives your email address, name and profile picture to create or find your account and display your avatar. Signing in with Google does not automatically link a YouTube channel.

Connecting YouTube is optional and uses YouTube Data API after you consent to the read-only youtube.readonly scope. Weeglad retrieves the authorized channel’s ID and title, subscriber count when available and video count. The integration calls channels.list with mine=true; it does not retrieve video content or watch history, and does not upload, edit or delete videos.

We use this data to confirm that you manage the channel and keep your professional profile up to date. The title and subscriber count appear in your profile; the canonical channel link is used in campaign and matching cards available to the relevant clients. Statistics are refreshed daily. Our hosting and database providers process the data needed to operate the service; OAuth tokens are not shared with clients.

YouTube connection data is stored on our servers while the channel remains linked. OAuth access and refresh tokens are encrypted at rest using AES-256-GCM. They are used only to read and refresh information about the authorized channel and are not exposed in the browser interface.

You can disconnect YouTube from your profile. This deletes the channel connection data, statistics and tokens from the active database, together with the link managed by that connection; a different manually entered link is retained. It does not delete data on YouTube or remove other Google permissions. You can also revoke access through your Google Account connections: Manage Google connections.

Further information: Google Privacy Policy, Google API Services User Data Policy, YouTube Terms of Service.