This Affiliate Privacy Policy applies to users who apply for and participate in the MindGTC Web3 Builder Affiliate Program. It supplements our general Privacy Policy; where the two differ in respect of affiliate social account connections, this policy governs.

Connecting a social account is entirely optional. It is only used to verify that you control the channel you are applying with, and to assess its reach. You can apply, disconnect, or delete a connection at any time (see section 7).

If you connect a YouTube channel, we use Google OAuth to request the following scopes, and only these scopes:

• https://www.googleapis.com/auth/youtube.readonly — read-only access to your channel profile, public statistics and your list of uploaded videos.
• https://www.googleapis.com/auth/yt-analytics.readonly — read-only access to your own YouTube Analytics reports (aggregate audience demographics for your channel).

Both scopes are read-only. MindGTC Web3 Builder can never upload, edit, delete, comment on, or otherwise modify anything on your YouTube channel, and never posts on your behalf.

So that our review team can assess your application without asking you to reconnect each time, we store the following on our servers:

• Channel identity: channel ID, handle, title, description, thumbnail URL and country.
• Channel statistics: subscriber count, total views, video count, average recent views, engagement rate, posting frequency and last upload date.
• Content niche: topic tags from your channel and a percentage breakdown of your recent uploads by video category.
• Aggregate audience analytics: percentage breakdowns of your audience by country, age group and device type. These are aggregate, channel-level figures supplied by the YouTube Analytics API — we never receive, and cannot access, the identity of any individual viewer or subscriber.
• Recent uploads: title, thumbnail, view/like/comment counts and publish date for up to your 10 most recent videos.
• An OAuth refresh token, encrypted at rest with AES-256-GCM, used solely to refresh the data above while your channel remains connected. It is never stored in plaintext, never returned by any API response, and never shared.

We also derive internal scores from this data (an audience quality score and a KOL score). These are computed by us and are not Google data.

While your channel is connected, this snapshot is periodically refreshed so that reviewers see current figures.

The data described above is used strictly for:

• Verification: confirming that you control the channel you applied with.
• Reach assessment: allowing our administrative team to evaluate audience size, engagement and content fit when approving or declining an affiliate application.
• Affiliate account management: displaying your own connected channel back to you inside your affiliate dashboard.

We do not use Google user data for advertising or retargeting, do not sell or broker it, do not use it to train generalised artificial intelligence or machine learning models, and do not use it to build profiles of anyone other than the applying affiliate.

MindGTC Web3 Builder's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

By connecting a YouTube channel you are also agreeing to be bound by the YouTube Terms of Service. Google's own handling of your information is described in the Google Privacy Policy.

Your connected channel data is visible only to you and to authorised MindGTC administrative personnel reviewing affiliate applications. Access is restricted to that review function.

We do not sell, rent, or share your social media data with third parties. The only third parties involved are the infrastructure providers that host our application and database on our behalf, who process the data solely under our instructions and may not use it for their own purposes. We do not transfer Google user data to advertisers, data brokers, or information resellers.

We retain your connected channel data for as long as the channel remains connected to your affiliate account, because reviewers and your own dashboard rely on it.

You can remove it at any time, in either of two ways:

• Disconnect in MindGTC: use the disconnect option on your affiliate account. This deletes the stored channel record — identity, statistics, analytics, recent uploads and the encrypted refresh token — from our database.
• Revoke access at Google: visit your Google Account permissions page and remove MindGTC's access. This immediately invalidates our token so no further data can be retrieved.

We recommend doing both. If you would like us to confirm deletion, or to delete data associated with a closed account, contact us using the details in section 10 and we will action the request.

OAuth refresh tokens are encrypted at rest using AES-256-GCM and are excluded from every API response by default. Access to affiliate review data is limited to authorised administrative personnel, and all traffic between your browser and our servers is encrypted in transit.

If you connect an X or Instagram account, we access read-only profile and public engagement information for the same verification and reach assessment purposes described in section 4, and store the equivalent profile and statistics snapshot. The retention, deletion, sharing and security terms in sections 6 to 8 apply to those connections in the same way. We never post on your behalf on any connected platform.

If you have any questions about this Affiliate Privacy Policy, want to exercise a data right, or want to request deletion of your connected account data, reach us through our Contact Us page or email info@mindgtc.com. We aim to respond to all data requests within 30 days.

We may update this Affiliate Privacy Policy as the Affiliate Program evolves. The "Last updated" date at the top of this page always reflects the current version. Material changes to how we handle Google user data will be communicated to connected affiliates before they take effect.