Privacy Policy

Last updated: May 4, 2026

This privacy policy describes how Negentropic Solutions LLC ("Negentropic Solutions," "we," "us") accesses, uses, stores, shares, retains, and deletes user data — including data obtained from Google APIs — through the internal applications we build and operate on behalf of client organizations. It applies to every application listed in the Applications Covered section below. The list will be kept current as new applications are added or existing applications are retired.

These applications are internal tools for authorized users within their respective client organizations. They are not offered as public or consumer services.

Applications covered

PA Business Insights

An internal revenue analytics service operated for a single client organization. The application authenticates to Google APIs via OAuth 2.0 and accesses data only from YouTube channels that the authorizing user owns or manages and explicitly grants access to during the Google OAuth consent flow.

Data we access

For each application, the specific Google user data accessed is listed below. The application accesses no Google user data beyond what is listed.

PA Business Insights — Google data accessed

OAuth scopes requested:

• https://www.googleapis.com/auth/yt-analytics-monetary.readonly — read-only access to monetary YouTube Analytics reports for the authorized channel.
• https://www.googleapis.com/auth/youtube.readonly — read-only access to the authorized channel's metadata (channel ID and channel title), used to label rows in internal reports.

Specific data fields read from the Google APIs:

• YouTube Data API — channel id and snippet.title for the authorized channel only.
• YouTube Analytics API — monthly aggregated metrics for the authorized channel only: estimatedRevenue, estimatedAdRevenue, estimatedRedPartnerRevenue, grossRevenue, cpm, and views, with dimension month.

The application does not access video content, comments, viewer identities, subscriber lists, private messages, or any data outside the authorized channel.

How we use the data

Data accessed by each application is stored in a reporting database dedicated to the client organization on whose behalf that application operates. It is used solely to produce the internal reports, dashboards, and analyses that each application was built to produce.

For PA Business Insights, the YouTube data described above is used to:

• Produce per-channel, per-month revenue and engagement summaries for the client organization's internal financial reporting.
• Reconcile platform-reported revenue against the same revenue as recorded in the client's accounting system.

Google user data is not used for advertising, sold or licensed to any third party, used for credit assessment, used to train artificial intelligence or machine learning models, or used for any purpose unrelated to the stated function of the application.

How we share the data

Negentropic Solutions does not sell, transfer, or otherwise disclose Google user data to any third party outside the client organization on whose behalf the application is operated. Specifically:

• Google user data is not shared with advertisers, data brokers, analytics providers, or other third-party service vendors.
• Google user data is not transferred to other applications, whether operated by Negentropic Solutions or by others.
• Google user data is not used to train artificial intelligence or machine learning models — neither our own nor any third party's.

Within the client organization, access to the application's reporting database is limited to authorized administrators. On the Negentropic Solutions side, access is limited to the personnel operating the application on behalf of that client.

How we store and protect the data

Data is stored on infrastructure dedicated to the client organization — not on shared multi-tenant systems. Specifically:

• Data is stored in a database file on a single-tenant virtual private server controlled by the client organization.
• OAuth credentials and refresh tokens are stored as files with owner-only filesystem permissions (Unix mode 600).
• The virtual private server accepts inbound connections only via SSH key authentication on a single port; password authentication is disabled and root login is disabled.
• The virtual private server runs a host firewall that rejects all inbound traffic other than SSH.
• Repeated failed authentication attempts are blocked automatically.
• Operating system security updates are applied automatically.
• All API calls between the application and Google are made over TLS / HTTPS.

How long we retain the data, and how to request deletion

For each application, cached Google user data is retained for as long as the application is in active operation, because the data is the substrate for time-series analysis (e.g., year-over-year revenue trends).

Authorized users may request deletion or revocation at any time:

• Revoke access via Google. At myaccount.google.com/permissions the authorizing user can revoke the application's access to their Google account. Upon revocation, the application stops fetching further data from the affected account on the next sync.
• Delete cached data on request. An authorizing user, or an authorized administrator within the client organization, may request deletion of cached Google user data by emailing support@negentropic.llc. Deletion is typically completed within 30 days of the request.

If an application is decommissioned, all OAuth credentials are revoked, all cached Google user data is deleted from the reporting database, and the entry for that application is moved out of the Applications Covered section above.

Google API Services User Data Policy

For applications listed above that access Google APIs, our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to this policy

If we update this policy, we will update the "Last updated" date at the top of this page. The list of Applications Covered will be kept current as new applications are added or existing applications are retired.

Contact

Questions about this policy or how data is handled: support@negentropic.llc.

← Back to home