This privacy policy describes the personal data collected by RepackIt, the purposes for which it is processed, the rights available to users, and the conditions under which this data is stored and protected.
Last updated: March 2026The data controller for personal data collected through the RepackIt platform is the company that publishes the application, headquartered in France. For any request related to the processing of your personal data, you can contact us at: privacy@repackit.io.
RepackIt only collects the data strictly necessary to operate the service. The processing of this data is based on the following legal grounds: performance of the contract entered into with the user upon registration, RepackIt's legitimate interest in improving its service, and the user's explicit consent where applicable.
| Data | Purpose and legal basis |
|---|---|
| First name and email address | Account creation and management, sending service-related communications. Legal basis: contract performance. |
| YouTube data via OAuth | Analysis of video performance (CTR, impressions). Read-only access. No modifications are made to the user's YouTube channel. Legal basis: consent. |
| Video titles entered | Narrative strength analysis and packaging score calculation. This data is stored in the user's history. Legal basis: contract performance. |
| Browsing data | Audience measurement and service improvement. Anonymized and aggregated data that does not allow user identification. Legal basis: legitimate interest. |
| Payment data | Processing fully delegated to the payment provider Stripe. RepackIt does not collect or store any banking data. Legal basis: contract performance. |
When a user connects their YouTube channel to RepackIt, authentication is handled through Google's OAuth 2.0 protocol. This mechanism allows RepackIt to access certain channel data without the user's password ever being transmitted to or known by RepackIt.
The permissions requested are limited to read-only access to channel statistics, specifically click-through rate, impressions, and per-video performance. RepackIt has no ability to publish, modify, or delete any content on the user's YouTube channel.
Users can revoke RepackIt's access at any time from their Google account settings, under "Third-party apps and services with access to your account."
Data retrieved via the YouTube API is used exclusively for the purposes described in this policy. It is never sold, rented, or shared with third parties for commercial or advertising purposes.
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected.
User accounts and analysis history are retained for the duration of active use of the service. An account that has been inactive for more than twenty-four months will receive a prior notification at the registered email address. If no response is received within thirty days, the account and all associated data are deleted.
Anonymized browsing data is retained for a maximum of thirteen months, in accordance with the recommendations of the French data protection authority (CNIL).
If a user requests account deletion, all personal data is erased within thirty days of receiving the request.
RepackIt uses technical cookies necessary for the proper functioning of the platform, including session management and secure data exchange. These cookies do not require user consent under applicable regulations.
Audience measurement cookies are also used to analyze user behavior on the platform and improve its usability. These cookies are anonymized and do not allow personal identification. Users can refuse them during their first visit or by adjusting their browser settings.
RepackIt does not use any advertising cookies and does not track users across third-party websites.
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, every user has the following rights over their personal data: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability, and right to object.
These rights can be exercised by sending a written request to privacy@repackit.io. RepackIt commits to responding to any request within a maximum of thirty days from receipt.
RepackIt implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Data is transmitted over encrypted connections (HTTPS) and hosted on servers located in the European Union. Access to databases is restricted to authorized personnel only.
RepackIt reserves the right to modify this privacy policy at any time, particularly to reflect changes in the service or applicable regulations. The last updated date at the top of this document is revised with each modification. In the event of a substantial change, users will be notified by email at the address associated with their account.
The current version is the one permanently accessible at this page's URL.
For any questions about this policy or to exercise your rights, you can contact the data controller by email at the address below.
Guaranteed response within 48 business hours.
privacy@repackit.io →