Privacy Policy

Last updated: March 3, 2026

1. Who We Are

This privacy policy applies to the Source Media Group Partner Connection Portal ("Portal"), operated by Source Media Group ("SMG", "we", "us"). The Portal is an internal tool used to evaluate potential YouTube channel partnerships. It is shared only with creators SMG is actively in discussions with — it is not a public-facing consumer application.

Website: source-grp.com

2. What Information We Collect

When you use the Portal, we request read-only access to the following through Google OAuth authentication:

  • Google profile information: your name and email address, provided by Google during sign-in.
  • YouTube Analytics data (via the yt-analytics.readonly scope): read-only channel performance metrics including views, estimated minutes watched, ad impressions, content type (long-form, Shorts, and live streams), device type breakdowns, and geographic region (Global and US).
  • YouTube Analytics Monetary data (via the yt-analytics-monetary.readonly scope): read-only revenue metrics including estimated revenue, gross revenue, CPM (cost per thousand impressions), and ad type breakdowns.

Specifically, the Portal exports the following data fields into a Google Spreadsheet organized across three tabs:

  • Monthly Performance: views, estimated minutes watched, estimated revenue, ad impressions — broken down by month, content type (long-form vs. Shorts, and live streams), year, and region (Global/US).
  • Ad Type: gross revenue, ad impressions, CPM — broken down by ad type, year, and region (Global/US).
  • Device Type: views, estimated minutes watched, average view duration, average view percentage — broken down by device type, year, and region (Global/US).

We do not collect passwords, video content, subscriber lists, comments, or any data beyond what is described above. We do not modify your YouTube account or channel in any way.

3. How We Use Your Information

Your data is used solely to build a partnership proposal based on your channel's historical performance. Specifically:

  • Your YouTube Analytics and YouTube Analytics Monetary data is exported into a private Google Spreadsheet and transferred to SMG's company Google Drive for review by the SMG partnerships team.
  • The SMG partnerships team uses this data to evaluate your channel and prepare a potential partnership proposal.

Your data is never sold, rented, licensed, or otherwise disclosed to any third party. It is not used for advertising, ad targeting, marketing, profiling, or any purpose other than building partnership proposals. Access is restricted to authorized Source Media Group team members only.

4. How We Store Your Information

Your YouTube Analytics and YouTube Analytics Monetary data is written to a Google Spreadsheet and stored in a designated folder within SMG's company Google Drive. Access to this spreadsheet is restricted to authorized SMG team members. Data is not transferred to or stored on any third-party platform outside of Google Workspace.

We do not maintain a database of user accounts. Your Google OAuth tokens are held only in an encrypted session cookie for the duration of the data export and are automatically discarded when the session ends. We do not store your OAuth tokens beyond your active session.

5. Google API Services & YouTube API

The Portal's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The Portal uses the YouTube Analytics API to access your channel data. By using the Portal, you also agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.

6. Revoking Access

You may revoke SMG's access to your YouTube data at any time via the steps outlined in Google's security settings by removing "Source Media Group" from the list of connected apps.

Revoking access prevents any further API calls to your YouTube Analytics data. It does not automatically delete data that has already been exported to the Google Spreadsheet. To request deletion of exported data, please contact us directly.

7. Data Retention

Your data is collected and retained solely for the purpose of evaluating a potential partnership with SMG. We retain your exported YouTube Analytics data only for the duration of the partnership evaluation process.

  • If a partnership does not proceed, your data will be deleted within 90 days of the evaluation decision.
  • If a partnership does proceed, the data collected through this Portal is superseded by the terms of the partnership agreement between you and SMG. This Portal's retention obligations end at that point.
  • You may request deletion of your data at any time by contacting us, regardless of whether a partnership evaluation is still in progress. We will complete deletion requests within 30 days of receipt.

8. Security

We take reasonable measures to protect your information. OAuth tokens are transmitted over HTTPS and held only in encrypted session cookies for the duration of the data export — they are not stored after your session ends. Exported data resides within Google Workspace with access restricted to authorized SMG personnel. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. In the event of a security incident affecting your personal data, we will notify you and any applicable regulatory authorities as required by applicable law.

9. Your Privacy Rights

Depending on where you are located, you may have additional rights regarding your personal information:

California Residents (CCPA): If you are a California resident, you have the right to: (1) know what personal information we collect and how it is used, (2) request deletion of your personal information, (3) opt out of the sale of your personal information — though we do not sell personal information, and (4) not be discriminated against for exercising your privacy rights.

European Economic Area, UK, and Switzerland (GDPR): If you are located in the EEA, UK, or Switzerland, you have the right to: (1) access, correct, or delete your personal data, (2) restrict or object to processing, (3) data portability, and (4) withdraw consent at any time. Our legal basis for processing your data is your explicit consent, which you provide when you authenticate through the Portal and authorize access to your YouTube Analytics data. Your data is transferred to and stored in the United States within Google's infrastructure.

To exercise any of these rights, please contact us at analytics@source-grp.com.

10. Children's Privacy

The Portal is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from individuals under 18.

11. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page.

12. Contact Us

If you have questions about this privacy policy or wish to request deletion of your data, please contact us at analytics@source-grp.com.