Privacy Policy

Last updated: September 15, 2026

This Privacy Policy describes how Primecast (the “Service”), available at primecast.app, collects, uses, stores and protects the personal data of its users, in compliance with Law No. 29733, the Personal Data Protection Law of Peru, its Regulation approved by Supreme Decree No. 003-2013-JUS, and other applicable Peruvian regulations.

1. Data controller

The controller of the personal data bank and its processing is Fernando Lozano Chávez (hereinafter, “Primecast”, “we”).

• Owner: Fernando Lozano Chávez (sole proprietor / natural person with a registered business)
• Tax ID (RUC): 10409435799
• Address: Jr. Chasquitambo 343, Los Olivos, Lima, Peru
• Contact email: ferlozan@gmail.com

2. Personal data we collect

2.1 Account data

To create and operate your account we process your email address and your name. If you sign up via Google (Google OAuth), we also receive the URL of your public profile photo. We do not store your Google password: authentication is performed directly by Google.

2.2 Service usage data

We record the information necessary to provide the Service: the channels you choose to follow, the programs and notes you create, your preferences, and the date/time of your last activity in the app (for internal usage indicators). To measure, in aggregate, how the Service is used, we rely on Google Analytics 4 (see sections 5 and 9). We do not use advertising cookies and we do not sell your data.

2.3 Public YouTube channel data

When you add a YouTube channel to your dashboard, we store only public information about the channel (identifier, title, handle, thumbnail, description, country) and the public measurements of concurrent viewers of its live broadcasts, obtained through the YouTube Data API v3. We never access private or restricted information belonging to the channel owner.

2.4 Payment data

Subscription payments are handled by an authorized payment provider acting as Merchant of Record, whose identity is disclosed to you before you complete a payment. Your card details are entered and processed directly on that provider’s platform: Primecast never receives, sees, or stores card numbers. For each subscription we retain only the contracted plan, its renewal date, and the customer/subscription identifiers the provider returns to us, so we can enable the features you are entitled to. Any data you provide to that provider (including billing details) is also governed by its own privacy policy.

3. Purposes of processing

We process your personal data for the following purposes:

• Creating, authenticating, and administering your account.
• Providing the Service and showing you the metrics and analytics you request.
• Sending you operational communications (e.g., sign-in links or service notices).
• Providing support and handling your inquiries.
• Improving, maintaining, and protecting the security of the Service.
• Complying with legal obligations and requirements from competent authorities.

Processing is based on your free, prior, express, and informed consent, which you grant when you register and accept this policy, without prejudice to the other legal bases provided for under Law No. 29733.

4. Personal data bank

Data is stored in a privately administered personal data bank. In accordance with applicable regulations, Primecast will take the necessary steps to register its data banks with Peru’s National Authority for the Protection of Personal Data when required.

5. Data processors and international transfer

To operate the Service we use technology providers that act as data processors and that may store or process data on servers located outside Peru (primarily in the United States of America). By accepting this policy, you consent to this cross-border transfer of personal data. Our main providers are:

• Supabase — database and authentication.
• Vercel — hosting of the web application and backend infrastructure.
• Google / YouTube — authentication (Google OAuth) and public data (YouTube Data API).
• Google Analytics — audience measurement and usage analytics for the Service.
• Resend — sending transactional emails.
• Payment provider (Merchant of Record) — payment processing and subscription billing; its identity is disclosed to you before you complete a payment.

These providers process data solely under our instructions and their own privacy policies, applying appropriate security safeguards.

6. Data retention

We retain your personal data for as long as you maintain an active account and for the period necessary to fulfill the purposes described or applicable legal obligations. Metrics history is retained according to your contracted plan. If you request the cancellation of your account, we will delete or anonymize your personal data, except for data we must retain under legal mandate.

7. Data subject rights

As the owner of your personal data, you may at any time exercise your rights of access, rectification, cancellation, and opposition, as well as the rights to information and to revoke your consent, recognized under Law No. 29733.

To exercise them, write to us at ferlozan@gmail.com indicating your request and attaching a copy of your ID document to verify your identity. We will handle your request within the timeframes required by law.

If you believe your request was not properly handled, you may file a complaint with Peru’s National Authority for the Protection of Personal Data, under the Ministry of Justice and Human Rights.

8. Information security

We apply reasonable technical, organizational, and legal measures to protect your data, including encryption of communications (HTTPS), per-user access control at the database level, and restricted internal access. No system is completely infallible, so we cannot guarantee absolute security; in the event of a relevant incident, we will act in accordance with applicable regulations.

9. Cookies and similar technologies

We use browser local storage that is strictly necessary to maintain your session and your language preferences.

We additionally use Google Analytics 4, a Google web analytics service, to understand, in aggregate and statistical form, how the Service is used (pages visited, device, approximate country). Google Analytics places third-party analytics cookies in your browser. This information is used solely for measurement and improvement of the Service; we do not use it for advertising purposes. You may opt out by installing the Google Analytics opt-out add-on or by blocking cookies in your browser settings. Google’s use of this data is governed by the Google Privacy Policy.

10. Minors

The Service is intended for adults. We do not knowingly collect data from minors. If we detect that we have processed a minor’s data without proper authorization, we will delete it.

11. YouTube and Google Data (YouTube API Services)

11.1 Use of YouTube API Services

Primecast uses YouTube API Services, specifically the YouTube Data API v3, to obtain the public data that the Service analyzes and displays to you. By using Primecast, you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). Primecast, in turn, operates in accordance with the YouTube API Services Terms of Service.

11.2 Google Privacy Policy

Google’s handling of information is governed by the Google Privacy Policy (https://policies.google.com/privacy). We recommend reading it, since using the Service means your interactions with YouTube API Services are subject to that policy.

11.3 How we use, process, and store YouTube API data

Primecast accesses public data through YouTube API Services for the following uses and processing purposes:

• Processing and use: We process public metadata of channels and broadcasts (identifier, title, thumbnail, broadcast time) and public concurrent-audience metrics (concurrentViewers, view counts, engagement). This data is processed algorithmically to calculate trends, derived metrics, and historical performance of live broadcasts within the platform.
• Internal storage: We store this metadata and these metrics in our own secure internal databases, hosted on Primecast’s infrastructure, to enable historical dashboards. Channel metadata is refreshed periodically (at least every 30 days) to maintain the accuracy required by YouTube’s Terms of Service.
• User data and authorization tokens: All of our access to the YouTube Data API is performed today using a server-side API key over exclusively public, unauthenticated data — never through OAuth or user-authorized permissions (scopes). As a result, Primecast does not receive, request, or store any Authorized Data or YouTube authorization tokens. This includes the export feature (the download button in a broadcast’s detail view): the CSV file it generates contains only the same public metrics already shown on screen — concurrent viewers over time for that broadcast — and never data obtained through a user’s authorization. The “Continue with Google” button we use for sign-in is, separately, a generic identity sign-in (email, name, profile photo) — independent of YouTube API Services — that requests no YouTube permission (scope), and whose session is managed by our authentication provider, Supabase, under its own security practices; you can sign out of it or revoke access at any time from https://myaccount.google.com/permissions.

11.4 Sharing data with internal and external parties

In compliance with YouTube’s developer policies, we explain in detail how data obtained through the YouTube API is shared:

Internal use and sharing (internal parties). Data obtained from YouTube API Services is processed internally by Primecast’s development, administration, and automated systems teams solely to provide the Service, perform technical maintenance, generate derived analytics, and provide user support. No internal collaborator or party accesses this data for purposes unrelated to Primecast’s operation.

Use and sharing with third parties (external parties). Primecast does not sell, rent, or trade data obtained through YouTube API Services to any third party or business partner. We only share or make this data accessible in the following external scenarios:

• Other Primecast users: processed metrics, derived analytics, and dashboards generated from the YouTube API are accessible to authorized platform users who follow those channels within the Service.
• Infrastructure and artificial-intelligence service providers (data processors): to store, process, and, when you expressly request it, generate analysis using artificial intelligence (AI Reports, AI Agent responses, brand-mention detection, and social-media copy), we use trusted technology providers: Supabase (database), Vercel (hosting), and OpenAI (language models). We send OpenAI only derived data — titles, channel/program names, public transcript excerpts, and aggregated audience metrics — never Authorized Data or private information belonging to the channel owner. All of these providers act as data processors under strict confidentiality and security obligations, and are not authorized to use the information for their own purposes.
• Legal requirements: when strictly required by law, court order, or a request from a competent authority in compliance with applicable legislation.
• Public report links (“Share”): if you choose to generate a public link about a broadcast or airing using the “Share” feature, we create a frozen snapshot of that report (thumbnail, channel, program, audience curve, and, depending on your plan, your name as the person sharing the link). Anyone who receives that link can view it without needing a Primecast account, until it expires (between 3 and 30 days depending on your plan). This is an entirely optional feature and depends on your decision to create and send the link.

11.5 Deleting your data and revoking access

You may request, at any time, the deletion of data we have collected about you by writing to us at ferlozan@gmail.com from the email address associated with your account, indicating that you wish to delete your account and your data. We will handle the request within the timeframes required by applicable regulations and will delete or anonymize your personal data, except for data we must retain under legal mandate. You may also unfollow a channel at any time from your dashboard, which disassociates that channel from your account.

Additionally, you may revoke Primecast’s access to your Google data at any time from your Google account’s security settings page: https://security.google.com/settings/security/permissions. You can find additional information about how YouTube and Google handle your data in the Google Privacy Policy.

12. Changes to this policy

We may update this Privacy Policy. If the change is material, we will notify you by email or through a notice within the Service. Continued use of the Service after an update constitutes acceptance of the version then in effect.

13. Contact

For any questions about this policy or the processing of your data, write to us at ferlozan@gmail.com.

← Back