Last Updated: 25 September 2025
Effective Date: 25 September 2025
Mesmerizy Trading Private Limited ("we," "our," or "us") operates the Vybif platform ("Service"). This Privacy Policy explains how we collect, use, store, and protect your data when you sign up, connect your YouTube account, and use our platform.
Contact Information:
Email: support@vybif.com
Phone: +91-9599157037
For data requests you can also use the in-app controls: Profile → Request My Data or Profile → Delete Data.
When you sign up with Google (through Supabase), we collect:
Your name, email address, and profile picture (from Google openid, email, profile scopes).
How we use those OIDC scopes: openid, email, profile are used only to authenticate your account and populate basic profile fields; they are not used for analysis.
Note: The openid, email and profile scopes are requested by Supabase to authenticate users and populate basic profile fields (name, email, profile picture). We do not use these scopes for personality analysis or to fetch YouTube data.
Within your Vybif profile you may manually provide: full name, gender, date of birth, and mobile number.
When you connect your YouTube account, we fetch limited data using the YouTube Data API:
Channel information: channel ID, channel name, and basic metadata.
Subscriptions: list of channels you are subscribed to, including channel title, channel ID, thumbnails, description, and the publishedAt timestamp (when you subscribed).
Liked videos: video ID, title, description, thumbnails, and the likedAt timestamp (when you liked the video).
👉 We use the scope: https://www.googleapis.com/auth/youtube.readonly.
👉 The API endpoints called are subscriptions.list and playlistItems.list (for the "Liked videos" playlist).
👉 Only the above-listed fields are stored in our database.
Technical calls used: We retrieve subscription and liked-video data using the YouTube Data API endpoints subscriptions.list and playlistItems.list and store returned fields (channel/video IDs, titles, thumbnails, descriptions, and publishedAt/likedAt timestamps).
We do not access your watch history, comments, uploads, private playlists, or any other private YouTube content. We access YouTube data only via the official YouTube Data API and comply with YouTube API Services policies.
For a short, YouTube-specific data use disclosure, see: Vybif YouTube API Data Use Disclosure.
Access & refresh tokens: When you connect your YouTube account we receive an OAuth access token and refresh token. Tokens are encrypted at rest, transmitted only over HTTPS, used solely to refresh or update your YouTube data with your consent, and deleted immediately if you disconnect YouTube or delete your account. We do not share tokens with third parties. If a refresh token is revoked or expires, we remove associated tokens and notify you to re-connect as needed.
Device information, browser type, IP address, basic usage data (interaction with the Service), and essential cookies for login/session management.
Scope → Use:
All use of Google/YouTube data is limited to the purposes described; we do not perform undisclosed secondary uses of this data.
openid, email, profile → Authenticate and create your Vybif account (sign-in only).
youtube.readonly → Fetch subscriptions, liked videos, and channel info to generate personality/vibe reports.
Other uses: account management (profile updates, credits, history), customer support (resolve issues, process deletion requests), service emails (password resets, critical notifications), and marketing emails only if you opt in.
We do not sell, trade, or rent your personal information.
We may share your information only in these circumstances: service providers (hosting, payment processors, email services) under data processing agreements; legal compliance (court orders, law enforcement); business transfers (merger, acquisition); safety and security.
We only share data with third-party service providers under written agreements that limit their use of the data (data processing agreements).
We may use anonymized, aggregated data for research and analytics. This data cannot identify individual users.
Google/YouTube data (subscriptions, liked videos, channel info, tokens) is retained until you delete it from your dashboard, disconnect YouTube, or request full account deletion. Profile information remains until you delete your account. Tokens are deleted immediately when you disconnect YouTube or delete your account.
We retain minimal consent/audit logs (who consented, scopes granted, timestamp) for up to 30 days for troubleshooting and security; the actual YouTube data remains until you delete/disconnect or request account deletion.
All users have the right to: access, correct, delete, receive a portable copy of their data, and withdraw consent.
Use the in-app "Request My Data" / "Delete Data" options or email support@vybif.com (subject: "Data Request" or "Data Deletion Request") with your registered email. Response time: data requests within 2 weeks; deletions completed within 3 days.
Depending on location you may have additional rights: GDPR (EU) — right to object/restrict and lodge complaint; CCPA (California) — right to know/delete and opt-out of sales; DPDP (India) — right to correction, erasure, portability.
We use industry standard measures: encryption in transit & at rest, restricted employee access, regular monitoring and audits, and prompt incident response.
Your data may be processed in other countries. We use appropriate safeguards (Standard Contractual Clauses, adequacy frameworks).
Vybif is intended for users aged 16 and older. We do not knowingly collect personal data from children under 16. While we do not verify age during sign-in, our platform is not designed for younger children; if we discover data from a user under 16, we will delete it immediately.
We may update this Privacy Policy. Material changes will be notified 30 days in advance via email or platform notice.
support@vybif.com | +91-9599157037
This Privacy Policy is governed by the laws of India. For users in other regions, we comply with applicable data protection laws (GDPR, CCPA, DPDP).