Privacy policy

Effective date: April 21, 2026. Last updated: April 21, 2026.

osuvox (“we”, “us”, “our”) runs osuvox.com (the “Service”) — a marketplace where brands and creators list offers, message, and document deals. This policy explains what personal information we collect, why we use it, and your choices. If you disagree with this policy, please do not use the Service.

1. Who we are

Questions and privacy requests: support@osuvox.com.

2. What we collect

  • Account and sign-in. Email address; one-time codes we email you; hashed session tokens stored in HTTP-only cookies; basic auth audit records (for example sign-in attempts) needed for security.
  • Profile and listings. Information you add to your profile and listings (names, bios, descriptions, rates, categories, links, images you upload, and similar marketplace content).
  • Website verification (optional). For some listings we may perform automated checks (for example DNS lookups or fetching a public page) using URLs you provide, only to confirm you control that site.
  • Messages and deals. Thread messages, proposals, deal terms, and related records needed to run collaborations on the Service.
  • Payments. When you use Stripe, card data is handled by Stripe — we receive transaction references and related metadata we need to show status in your account. For deals where you choose cryptocurrency or another method, we store what you and the other party record in the Service (we do not run the blockchain transfer ourselves).
  • Optional Google / YouTube. If you connect Google for YouTube verification, we access the data described in section 3 below.
  • Technical data. IP address, browser type, timestamps, and server logs for security, abuse prevention, debugging, and reliability. We do not use third-party advertising or behavioral analytics pixels on the Service as of the date above; if that changes, we will update this page.

3. Google and YouTube (optional)

Creators can connect a Google account so we can call Google’s OAuth 2.0 and the YouTube Data API v3 for features you start in the dashboard (for example linking a YouTube channel to a creator listing). You can skip this; listings that do not need YouTube OAuth work without it.

OAuth scope. We request https://www.googleapis.com/auth/youtube.readonly — read-only access. We do not use this scope to upload, edit, or delete your videos or to post comments on your behalf.

Data we may access includes:

  • Channel identifiers and public channel metadata (title, handle or channel URLs).
  • Channel images YouTube exposes (for example avatar and banner URLs) to help populate listing artwork.
  • Subscriber counts or related statistics YouTube returns when we show audience information on a listing.
  • Metadata about your public uploads (for example video IDs, titles, publish dates, thumbnails) when a product feature needs a catalog of public videos tied to payment or fulfillment flows you use on the Service.
  • OAuth access and refresh tokens stored so we can refresh data until you disconnect or revoke the app.

We use this information only to operate and improve YouTube-related features you use (verification, accurate listing display, and optional workflows described in the product). We do not sell Google user data or YouTube content to data brokers.

Google API Services — Limited Use. osuvox’s use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Google’s own terms and policies also apply to your use of Google services:

4. How we use information

  • Run accounts, listings, search, messaging, and deals.
  • Process payments and show payment status when you use supported checkout or record funding.
  • Keep the Service secure, prevent abuse, and troubleshoot errors.
  • Meet legal requirements and enforce our Terms of service.

Where the law requires a “legal basis” (for example in the EEA or UK), we rely on performing our contract with you, legitimate interests such as security and reliability (balanced against your rights), and consent when you choose optional features like Google / YouTube connection. You can withdraw that consent by disconnecting in the Service or revoking the app in your Google Account.

5. Sharing

We share information only as needed to provide the Service:

  • With other users as part of the marketplace (for example public listing pages and deal threads you join).
  • With infrastructure providers we use to host the Service, send transactional email, and process payments (for example Stripe), under agreements that limit how they use data.
  • With Google when you start Google OAuth, as required for that integration.
  • When the law, legal process, or an emergency requires disclosure, or to protect users and the Service.

We do not sell personal information for money as “sale” is commonly defined in U.S. state privacy laws. We do not share data for cross-context behavioral advertising.

6. Retention and deletion

We keep information while your account is active and for a reasonable period afterward to resolve disputes, enforce terms, and meet legal and accounting needs (for example payment records). You can ask us to delete your account or data by contacting support@osuvox.com; some information may be retained where the law requires. When you disconnect Google / YouTube in the Service or revoke the app in Google, we stop new API access and remove or invalidate stored OAuth tokens as part of that flow.

7. Security

We use HTTPS for the site, industry-standard hashing for sessions and sign-in codes, and access controls on our systems. No method of transmission or storage is perfectly secure; if you discover a vulnerability, please tell us at support@osuvox.com.

8. Your choices

  • Google / YouTube: Disconnect in dashboard profile / connections, or revoke osuvox in your Google Account’s security settings.
  • Transactional email: You will still receive sign-in and legally required messages; if we send optional marketing email, we will include an unsubscribe link.
  • Rights requests: Depending on where you live, you may have rights to access, correct, delete, or export personal data. Email support@osuvox.com.

9. International processing

We may process and store data in the United States and other countries where we or our providers operate. If we move data across borders, we use safeguards required by applicable law.

10. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. Contact us if you believe we have, and we will delete it.

11. Changes

We may update this policy. We will post the new version here and change the “Last updated” date. For important changes, we may also notify you in the Service or by email.

12. Contact

support@osuvox.com

This policy summarizes our practices in plain language. It is not legal advice for you or for us; have counsel review it if you need a formal legal opinion.