Privacy Policy

This policy explains how Team Falcons (“we”) handles personal data in the employee portal at hub.falcons.sa and when a YouTube channel owner connects a channel for analytics.

توضح هذه السياسة كيف يتعامل فريق فالكونز مع البيانات الشخصية في بوابة الموظفين وعند ربط قناة يوتيوب لأغراض التحليلات.

1. Who we are

Team Falcons operates an internal workplace portal for staff with a @falcons.sa account. Social Media staff may also invite creator channel owners to connect YouTube so the team can view read-only performance metrics in one dashboard.

2. Data we collect

Employees

• Google Workspace identity: name, email, and profile photo.
• Workplace records created in the portal (tickets, tasks, chat, calendar, and similar tools).
• Optional Gmail read access if the employee connects mail.

YouTube channel owners

• Google account tokens needed to keep the connection (refresh and access tokens). Tokens are encrypted at rest. We never receive your Google password.
• Channel identity from YouTube Data API: channel ID, title, handle, thumbnail, and country.
• Read-only YouTube Analytics: views, watch time, subscribers, likes, comments, shares, audience retention, and related video-level metrics.

We request youtube.readonly and yt-analytics.readonly only. We cannot upload, edit, comment, or delete videos.

3. How we use Google user data

YouTube and Google user data is used only to show creator analytics inside the Team Falcons portal for Super Admin and Social Media staff. We do not sell this data, use it for advertising, or use it to train AI models.

Team Falcons's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Storage and sharing

• Application data is stored in our hosted Postgres database.
• YouTube OAuth tokens are stored encrypted, separate from channel lists.
• Analytics are visible only to Super Admin and members of the Social Media department.
• Hosting providers that process the portal (Vercel, Neon, Google) may process data solely to run the service.

5. Retention

Employee data is kept while the account is active, then handled under internal offboarding. YouTube tokens and synced analytics are deleted when a channel is removed from the dashboard or when the owner revokes access in their Google Account.

6. Your choices

Channel owners can refuse the Google permission screen, disconnect the app in Google Account → Security → Third-party access, or ask Social Media to remove the channel. Employees can export or erase portal data from Profile → Privacy, under Saudi PDPL.

7. Contact

For this policy, contact the Team Falcons staff member who sent you a YouTube connection link, or a portal Super Admin if you are an employee. This portal is operated from Saudi Arabia.