Privacy Policy

Last updated: October 8, 2026

This policy explains how [operator not set] ("we"), operator of NicheLab, handles personal data. Contact: [email not set], [address not set], Vietnam.

1. Data we collect

• Account: email, optional name, password (stored only as a salted scrypt hash), sign-in times.
• Usage: the searches, channels and videos you analyse, the reports produced, and your wallet transactions.
• Payment: handled by our payment partner. We receive the order reference, amount, country and email — never your card number.
• Technical: IP address and request logs kept for security for up to 30 days.

2. Why we use it

To provide the Service and your reports (contract), to process top-ups and prevent fraud (contract and legitimate interest), to send service emails such as password resets, and to meet legal and tax obligations. We do not sell personal data and do not send marketing email without your consent.

3. YouTube API Services

The Service uses YouTube API Services to read public data about videos and channels. By using it you agree to the YouTube Terms of Service, and Google's handling of data is described in the Google Privacy Policy. We do not access your YouTube account. Data obtained from YouTube API Services is refreshed or deleted within 30 days. You can revoke any access you granted via the Google security settings page.

4. Service providers

We share data only as needed with: our payment partner and merchant of record (2Checkout / Verifone); our hosting provider; Google (YouTube Data API and Gemini AI models — the text of the videos and comments being analysed, not your account details); TikHub (public TikTok/Douyin data lookups); and our email delivery provider. Some providers process data outside your country, under contractual safeguards.

5. Cookies and embedded content

We use one strictly necessary cookie to keep you signed in, and your browser's local storage to remember theme and language. We set no advertising or tracking cookies.

Some reports show an embedded Google Trends chart. It is loaded by your browser directly from Google, so Google receives your IP address and the keywords shown in the chart and may set its own cookies, under the Google Privacy Policy. We do not receive or store Google Trends data.

6. Retention

Account and wallet records are kept while your account is open and afterwards as long as tax law requires. Reports and analysis data are kept until you delete them or close your account; YouTube-derived data follows the 30-day rule above.

7. Your rights

You can download all your data (Excel) and delete your account yourself on the Account page of the app. You can also ask to access, correct, export or delete your personal data, or object to processing, by writing to [email not set]. We answer within 30 days. Users in the Philippines have rights under the Data Privacy Act of 2012 (RA 10173) and may complain to the National Privacy Commission; users in Vietnam under Decree 13/2023/ND-CP; users in the EU/UK under the GDPR.

8. Security

Passwords are hashed, session tokens are stored only as hashes, and all traffic uses HTTPS. No system is perfectly secure; we will notify affected users and authorities of a breach as the law requires.

9. Children

The Service is not intended for anyone under 18.

10. Changes

We will post changes here and update the date above; significant changes will be emailed to account holders.