Privacy Policy

This Privacy Policy (“Privacy Policy”) describes how Global Music Junction Private Limited (“GMJ”, “Company”, “we”, “our”, or “us”) collects, uses, stores, discloses, and otherwise processes personal information in connection with the GMJ Studio platform, including its reporting dashboard, analytics platform, channel management tools, APIs, software, applications, websites, and related services (collectively, the “Platform”).

The Platform enables authorised users to connect their YouTube channels through Google OAuth, access reporting and analytics, manage certain channel settings, monitor revenue and performance metrics, generate reports, and use related platform features.

We are committed to protecting the privacy and security of personal information and processing such information in accordance with applicable data protection and privacy laws.

This Privacy Policy applies to all personal information processed by GMJ in connection with the Platform, including information relating to:

• registered users of the Platform;
• channel owners and authorised representatives who connect YouTube channels to the Platform;
• employees, contractors, representatives and authorised personnel of our business partners who access the Platform;
• information obtained through Google OAuth authentication and authorised integrations with YouTube and other Google services; and
• information generated through your use of the Platform, including reporting, analytics, audit logs, operational records and security logs.

This Privacy Policy does not apply to third-party websites, applications or platforms (including YouTube and Google), information processed solely by third parties outside the Platform, or information processed by customers independently of GMJ.

Depending on how you access and use the Platform, we may collect and process the following categories of information.

3.1 Account Information. Full name; business email address; telephone number; organisation or legal entity name; role and permission level within the Platform; account status; customer, partner or channel mapping information; customer identifiers (including CLM ID or SAP ID where applicable); and authentication and account management information.

3.2 Google and YouTube Information. Where you connect your YouTube account through Google OAuth, we may access channel identifiers and metadata, video identifiers and metadata, playlist information, subscriber metrics, live stream metadata, channel and video performance metrics, revenue and monetisation metrics, analytics and reporting information, and other information made available through authorised Google and YouTube APIs. The Platform also stores authentication tokens issued by Google solely to maintain your authorised connection.

3.3 Platform Activity Information. Login and logout activity, authentication events, user activity and audit logs, actions performed within the Platform, reporting requests, export activity, channel connection activity, and system-generated operational records.

3.4 Device and Technical Information. IP address, browser type, device information, operating system, user agent, application usage information, security and authentication logs, rate-limiting and abuse prevention records, and diagnostic and performance information.

3.5 Analytics and Reporting Information. Estimated revenue, advertising revenue, premium revenue, CPM and RPM metrics, channel and video performance metrics, subscriber statistics, views and engagement metrics, publishing activity, historical performance, and other reporting and analytical information generated through the Platform.

3.6 Information We Do Not Collect. The Platform does not intentionally collect payment card information, Content ID ownership information, full YouTube comment content, or advertising tracking information through third-party advertising cookies.

4.1 Information You Provide — when you create or activate your Platform account, connect your YouTube account through Google OAuth, update your account information, communicate with us for support, use reporting/export/dashboard/management features, or otherwise interact with the Platform.

4.2 Information Obtained Through Google and YouTube — in accordance with the permissions granted and the Google OAuth consent process. You may revoke the Platform's access to your Google account at any time through your Google account settings.

4.3 Information Collected Automatically — technical information, authentication records, device information, IP addresses, browser information, security logs, audit logs and operational usage data.

4.4 Information Created Through Platform Operations — historical reporting, analytics, revenue calculations, synchronised channel information, dashboard metrics, activity records and audit trails.

5.1 Providing the Platform — creating and managing accounts, authenticating users, administering permissions, connecting authorised channels, synchronising channel information, and enabling Platform functionality.

5.2 Channel Administration — maintaining authorised connections with YouTube, retrieving reporting and analytics information, synchronising channel data, and performing actions authorised by users.

5.3 Reporting and Analytics — generating reports, revenue dashboards, performance analytics, historical trend analysis, operational metrics, and exports.

5.4 Security and Platform Integrity — authenticating users, preventing unauthorised access, detecting fraudulent or abusive activity, maintaining audit logs, enforcing access controls, and protecting the Platform.

5.5 Platform Administration and Support — administering the Platform, providing customer support, troubleshooting, and communicating with users regarding their accounts.

5.6 Compliance and Legal Obligations — complying with applicable laws, legal processes, regulatory requirements, and contractual obligations.

5.7 Product Improvement — analysing Platform usage, identifying performance issues, improving Platform functionality, and developing new features.

We do not use personal information obtained through the Platform to train general-purpose artificial intelligence or machine learning models.

We do not sell your personal information.

6.1 Service Providers — cloud hosting, email delivery, authentication, messaging, technical infrastructure and related services, authorised only to process personal information as necessary to perform services on our behalf.

6.2 Google and YouTube — information may be exchanged with Google in connection with authentication, channel authorisation, synchronisation and authorised API requests. Our use of information received from Google APIs will comply with applicable Google API Services policies.

6.3 Legal Requirements — where required by applicable law, regulation, court order, governmental authority or other lawful process.

6.4 Corporate Transactions — in connection with a merger, acquisition, restructuring, financing, sale of assets or similar transaction, subject to appropriate safeguards.

6.5 With Your Consent — where you have expressly authorised or instructed us to do so.

The Platform is hosted and operated using infrastructure located in India, and personal information processed through the Platform is stored and processed on servers located in India. Where personal information is transferred outside India, we will implement appropriate safeguards required under applicable law.

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, enforce our agreements, and maintain the operational integrity of the Platform.

• user account information — generally retained for the duration of the relevant account and thereafter as reasonably necessary;
• channel information, analytics, reporting data and historical performance — retained to enable historical reporting and operational continuity;
• audit logs, activity records and security logs — retained for security, compliance, fraud prevention and operational purposes;
• authentication and rate-limiting records — retained only as reasonably necessary and thereafter automatically deleted or anonymised.

We maintain reasonable technical, organisational and administrative measures designed to protect personal information against unauthorised access, use, disclosure, alteration or destruction. Such measures may include encryption of sensitive authentication credentials and authorised access tokens; secure password hashing; TLS in transit; role-based access controls; logging and monitoring; encrypted system backups; and periodic security reviews.

While we implement reasonable safeguards, no method of electronic transmission, storage or processing can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their account credentials.

Subject to applicable law, you may have the right to request access to your personal information; request correction of inaccurate or incomplete information; obtain a copy of certain information; object to or restrict certain processing; withdraw consent; and lodge a complaint with an appropriate regulatory authority.

Certain requests may not be capable of being fulfilled immediately where retention is necessary for legal, regulatory, security or operational purposes. Contact us using the details in Clause 16 to exercise your rights.

The Platform uses cookies and similar technologies to maintain user preferences and interface settings, support authentication and session management, improve Platform functionality and performance, and maintain the security and integrity of the Platform. We do not currently use advertising cookies or third-party advertising trackers. You may configure your browser to refuse or delete cookies, but disabling certain cookies may affect Platform functionality.

The Platform integrates with Google services (including Google OAuth and authorised YouTube APIs); cloud hosting and infrastructure providers; email service providers; and messaging service providers. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements where applicable.

The Platform is designed for businesses, organisations, channel owners, and other authorised users acting in a professional or commercial capacity. We do not knowingly collect personal information directly from children through the Platform.

Where you authorise the Platform to access your Google or YouTube account, our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google API data to develop, improve or train general-purpose AI or machine learning models, serve advertisements, or sell personal information.

We may amend this Privacy Policy from time to time. Where required by law, we will notify users of material changes. Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated Privacy Policy.

Global Music Junction Private Limited

Email: legal@globalmusicjunction.com

Address: 403 Chintamani Classique, Cabin-2,
Sir Vishweshwar Colony, Off Aarey Road,
Goregaon (East), Mumbai — 400063, Maharashtra, India

Attention: Legal Department