Privacy Policy

What this service does

Omni Analytics reads analytics data from platforms you choose to connect — YouTube, TikTok, SoundCloud and DistroKid — and displays it back to you in one dashboard. It does not post on your behalf, modify your content, or share your data with other users.

What we collect

• Account details. The email address you register with, handled by our authentication provider.
• Access tokens for platforms you connect over OAuth, so we can read your analytics on your behalf.
• Analytics data retrieved from those platforms: daily metrics, per-item statistics for your videos or tracks, country-level totals, and royalty line items from reports you upload.
• Files you import. The contents of analytics exports you upload are parsed and stored as metrics.

We do not collect analytics about other people's accounts, and we do not build a profile of you across services beyond the platforms you explicitly connect.

How your data is protected

• Every data row is scoped to your account and enforced at the database level, so one account cannot read another's rows.
• Access tokens are never readable by a browser — including your own. The tokens table has no client-facing read policy at all. Tokens are only ever touched by server-side code during a sync you initiate.
• All traffic is served over HTTPS.

Services and data sources we use

Service providers — these process data on our behalf to run the service:

• Supabase — authentication and database infrastructure.
• Vercel — application hosting.

Connected platforms and data sources — we read from these; each is governed by its own privacy policy:

• Google/YouTube and TikTok — connected analytics, read using access tokens you grant and can revoke.
• SoundCloud — public profile and track information, read from a link you provide. No account connection is involved.
• DistroKid — analytics exports you choose to import. We never send data to DistroKid; the file goes one way, from you to us.

We do not sell your data, and we do not use it for advertising. That is a commitment we make, not a technical limitation.

Deleting your data

You can erase every metric, import and platform connection associated with your account from the Settings page at any time. This removes the stored analytics and the access tokens; it does not delete anything on the platforms themselves.

Disconnecting a platform removes our stored token for it. You can also revoke access directly from that platform's own security settings.

Retention

[TO COMPLETE: how long data is kept after account deletion, and any backup retention window from your hosting and database providers]

Your rights

[TO COMPLETE: the rights that apply in your jurisdiction (for example GDPR access/erasure/portability if you serve EU users, or CCPA rights for California residents) and how someone exercises them]

Children

[TO COMPLETE: minimum age for using the service]

Changes to this policy

If this policy changes materially we will update the date at the top of this page.

Contact

[TO COMPLETE: contact email address for privacy questions and data requests]