Privacy Policy

RETOS is a private dashboard used by a real-estate content team to create tracked links and QR codes, manage the links inside their YouTube video descriptions, and measure how their content turns into leads. This policy explains what we collect, how we use it, and the choices you have. It applies to the RETOS dashboard and the pages it serves.

Team accounts. Access to the dashboard is protected by a shared team password. We store a signed session cookie to keep you logged in; we do not store the password itself in your browser.

Google / YouTube account data (with your permission). When a channel owner connects their YouTube channel, they grant RETOS access through Google’s OAuth consent screen. With that permission we access, on their behalf:

• basic channel information (channel ID, title, and handle);
• the channel’s videos, including private and unlisted videos; and
• video descriptions — which we can read and update when the user asks us to.

We request a single scope, youtube.force-ssl, which is the minimum needed to read a channel’s videos and update their descriptions. We store only a Google refresh token (to keep the connection working) plus the channel ID, title, and handle. We never see or store the user’s Google password.

Visitor & lead data. When someone clicks a tracked link, scans a QR code, takes a quiz, or books a call, we record the interaction (clicks, scans, quiz answers, and any name, email, or phone number the visitor chooses to submit) along with basic technical details such as device type and approximate location, so the team can measure content performance and follow up with leads.

• To display a connected channel’s videos inside the dashboard.
• To read and update video descriptions when a team member requests it.
• To create and manage tracked links and QR codes, and to attribute clicks and scans.
• To measure the content-to-lead funnel and to contact leads who opt in.
• To keep the service secure and working.

RETOS’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use YouTube data only to provide the features described above. We do not use it for advertising, we do not sell it, and we do not transfer it to others except as needed to provide the service or as required by law.

RETOS uses YouTube API Services. By connecting a channel you agree to the YouTube Terms of Service, and Google’s use of your data is described in the Google Privacy Policy.

Data is stored in our hosted database (Supabase) and accessed by our application servers using server-side credentials that never reach the browser. Access to the dashboard requires the team password.

A connected channel owner can revoke RETOS’s access to their Google account at any time at myaccount.google.com/permissions. Revoking access immediately stops RETOS from reading or updating that channel’s data.

To request deletion of YouTube data, lead data, or any other information we hold about you, email us at privacy@getretos.com and we will delete it promptly.

We keep connected-channel tokens until the connection is removed or access is revoked, and we keep tracking and lead data for as long as it is useful to the team or until deletion is requested.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Questions about this policy or your data? Email privacy@getretos.com.