Privacy Policy

This Privacy Policy is maintained by Visva Music LLC to explain how we collect, use, store, and protect personal information when you visit our website or use our services.

By using our website, submitting an application, or connecting a YouTube account, you agree to the practices described in this policy. If you do not agree, please do not use our website or services.

Some infrastructure supporting our website, database, and communications is provided by carefully selected service providers. We remain responsible for the data we collect and how we use it.

• Quick Apply information: full name, email address, YouTube or Spotify channel link, and the service you are interested in.
• Contact information: name, email address, inquiry type, service interest, and message.
• Newsletter subscription information: email address.
• Account and service information supplied if you become a client.
• Standard technical information such as IP address, browser type, device information, cookie identifiers, and website usage data.

• Review and process applications for Visva CMS+ or Visva Music Distribution.
• Communicate about applications, accounts, payments, or support requests.
• Set up, operate, secure, and improve accounts and services.
• Send service-related notices and, with applicable consent, newsletters or marketing communications.
• Analyze website usage, prevent fraud, and protect our rights.
• Meet contractual, tax, accounting, legal, and regulatory obligations.

We do not sell personal information.

• We share data with service providers that help operate our cloud infrastructure, email delivery, security, support, and analytics.
• For music distribution, necessary information may be shared with assigned distribution partners to deliver distribution, Content ID, publishing, and sync licensing services.
• For Visva CMS+, necessary channel or revenue information may be shared with an assigned CMS/MCN network partner to evaluate, link, service, or invoice the channel.
• We may disclose information when required by law, court order, or to protect legal rights.

Our service providers are required to handle data only for authorized purposes and apply appropriate safeguards.

Google API Services We Use

Visva CMS+ integrates with Google API Services, including the YouTube Data API v3, YouTube Analytics API, and YouTube Reporting API. Visva Music LLC's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What YouTube Data We Access

After you provide OAuth 2.0 authorization, requested data may include:

• Basic channel information: channel name, ID, thumbnail, subscriber count, and video count.
• Channel statistics: views, watch time, engagement, traffic sources, and geography analytics.
• Revenue and monetization data available through authorized reporting APIs.
• Video metadata: titles, descriptions, tags, and publish dates.
• Channel branding settings only when you specifically authorize an editing action.

How We Use YouTube Data

• Dashboard analytics and performance reporting.
• Revenue reports and invoices for CMS network partners.
• Channel ownership and eligibility verification.
• Customer support and user-requested channel management.
• Legal, accounting, security, and audit compliance.

What We Do Not Do

• We never sell YouTube user data.
• We never use it for advertising or share it with data brokers.
• We never use it to assess creditworthiness or lending eligibility.
• We do not permit human reading unless you explicitly consent for support, access is needed for security or legal compliance, or the data is aggregated and anonymized.

Storage and Security

• Tokens are encrypted at rest using industry-standard encryption and stored in a secure, access-controlled database.
• Data is transmitted using TLS 1.2 or higher.
• Database row-level controls and least-privilege access are enforced.
• Analytics are cached for 1–12 hours as needed to provide the service.
• We conduct regular security reviews and appropriate vulnerability or penetration testing.

Retention

• Tokens are retained only while the channel remains connected.
• Cached analytics are deleted within 30 days.
• Historical revenue and payment records are retained for 7 years for legal, tax, and accounting compliance.
• Audit logs are retained for up to 3 years.

Your Rights and Controls

You can revoke access through Google Account Settings, Visva CMS+ Dashboard → Settings → Connected Accounts, or by emailing privacy@visvamusic.com. On revocation, OAuth tokens are deleted immediately and cached YouTube data is purged within 24 hours. Historical records may be retained where legally required.

Third-Party Sharing

YouTube-derived data is shared only with YouTube/Google as needed for the service, your assigned CMS network partner in aggregate form for revenue invoicing and channel services, legal authorities when required, or another party after your explicit consent.

Deletion Requests

Email privacy@visvamusic.com with the subject “YouTube Data Deletion Request.” Verified requests are processed within 30 days. Certain records may remain where required for tax, payment, audit, or legal compliance.

Additional Google Requirements

By connecting a channel, you acknowledge Google's Privacy Policy, agree to YouTube's Terms of Service, and confirm that you have the right to authorize access to that channel.

See our complete YouTube API Services Disclosure.

We use cookies and similar technologies to understand website interactions, remember preferences, and improve performance. Some cookies may be set by analytics providers to measure traffic and usage patterns.

You can manage or disable cookies through your browser settings. Disabling cookies may affect certain website features.

Except where a specific period is stated above, we retain personal information only as long as necessary to provide services, maintain required business records, resolve disputes, prevent fraud, and enforce agreements.

When retention is no longer necessary, data is deleted, anonymized, or securely isolated from further use.

Depending on your location, you may have the right to access, correct, update, delete, restrict, or object to processing of your personal information, and to request a portable copy.

To exercise these rights, email privacy@visvamusic.com. We may verify your identity before completing a request and will respond within the period required by applicable law.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including access controls, encryption, secure transmission, monitoring, and staff confidentiality obligations.

No method of internet transmission or electronic storage is completely secure, so we cannot guarantee absolute security. You are responsible for protecting your account credentials and promptly reporting unauthorized access.

Our website and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you believe a child has provided personal information, contact us so we can investigate and delete it where required.

Because we serve creators internationally, information may be processed outside your country. Where required, we use contractual and organizational safeguards intended to provide an appropriate level of protection.

We may update this Privacy Policy as our services, API use, or legal obligations change. Material changes will be posted on this page with a revised date and, where appropriate, communicated through email or the platform.

For privacy questions or requests:

Data Protection Officer: privacy@visvamusic.com
General Legal: legal@visvamusic.com
General Contact: contact@visvamusic.com