Atrium Privacy Policy

DRAFT - pending legal review

Effective date: [EFFECTIVE DATE]

This Privacy Policy explains how Atrium Distribution LLC ("Atrium," "we," "us") collects, uses, shares, and protects information when you use Atrium, including app.atriumdistro.com, the Atrium Discord server, and the Atrium Discord bot (the "Service"). You must agree to this policy before using the Service. Questions: team@atriumdistro.com.

1. Information we collect

Account information. Your Discord user ID and username, your email address, and other details you give us (such as messages you send to support).

Linked YouTube data. When you link YouTube through Google's official sign-in, we use the YouTube Data API with the read-only scope (youtube.readonly) to access your channel's basic profile information (such as display name, username or handle, avatar, and channel ID) and public metrics for the videos you submit (views, likes, comments, publish time, and caption or title). [Confirm exact fields retrieved; the YouTube API does not return a share count.]

Linked TikTok data. When you link TikTok through TikTok Login Kit, we use the TikTok Display API with the scopes user.info.basic, user.info.profile, and video.list to access your open ID, display name, username, avatar, and public metrics for your videos (views, likes, comments, shares, publish time, and caption).

Campaign and submission data. Clips you submit, links, review decisions and reasons, eligible views, earnings, and fraud-check results.

Payout information. Your PayPal email address, payout history, and any tax information we request (for example, a W-9 or W-8 form).

Usage and log data. Information collected automatically when you use the Service, such as IP address, browser and device type, pages visited, timestamps, and error logs. [Cookies: describe any cookies or similar technologies used, e.g., login session cookies and analytics, or state that none are used beyond those strictly necessary.]

We never collect or store your YouTube, Google, TikTok, or Discord passwords. We do not post, upload, comment, like, or change anything on your social accounts.

2. How we use information

We use information to:

• create and run your account and link your social accounts;
• verify that submitted clips belong to accounts you linked;
• review submissions and track performance of approved clips;
• calculate earnings and pay you through PayPal;
• detect and prevent fraud, bots, and view manipulation (for example, checking likes-to-views ratios and view spikes);
• show Clients the results of their campaigns;
• communicate with you about campaigns, payouts, and support;
• secure, maintain, and improve the Service; and
• meet legal, tax, and accounting obligations and enforce our Terms.

We do not use data from YouTube or TikTok for advertising.

3. YouTube API Services

Atrium uses YouTube API Services. By linking YouTube, you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's use of your data is governed by the Google Privacy Policy (http://www.google.com/policies/privacy).

You can revoke Atrium's access to your YouTube data at any time through Google's security settings page: https://security.google.com/settings/security/permissions. You can also disconnect YouTube [in your Atrium account settings / through the Discord bot] or by emailing team@atriumdistro.com. Deleting data stored by Atrium does not delete anything on YouTube; to delete content on YouTube, use YouTube itself.

4. Google user data and Limited Use

Atrium's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we:

• use Google user data only to provide and improve the user-facing features described in this policy;
• do not transfer it to others except as needed to provide those features, to comply with law, for security, or as part of a merger or acquisition with your consent where required;
• do not use or transfer it for advertising, and do not sell it; and
• do not allow humans to read it except with your consent (for example, when staff review your submission), for security or abuse investigations, to comply with law, or when it is aggregated and anonymized for internal operations.

5. TikTok

We access TikTok data only through TikTok's official developer APIs and only for the purposes in this policy. You can disconnect TikTok [in your Atrium account settings / through the Discord bot] or by emailing team@atriumdistro.com. You can also revoke Atrium's access in the TikTok app under your settings for apps and services with access to your account. [Confirm current TikTok menu path.] After you disconnect or revoke access, we stop collecting your TikTok data and delete it as described in Section 9.

6. How we share information

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

We share information only as follows:

• Clients. By submitting a clip to a campaign, you agree that the campaign's Client may see links to your submitted clips, the public account name they were posted from, each clip's stats, and aggregated campaign results in the Client dashboard. Clients do not see your email, Discord ID, payout, or tax information.
• Service providers that help us run the Service, such as hosting ([HOSTING PROVIDER]), database ([DATABASE PROVIDER]), and email ([EMAIL PROVIDER]), under contracts that limit their use of the data to serving us.
• Platforms you use with us. PayPal receives what it needs to process your payouts. Discord processes messages and interactions with our server and bot under its own policies.
• Legal and safety. When required by law or legal process, or when needed to protect the rights, safety, or property of Atrium, our users, Clients, or others, including to investigate fraud.
• Business transfers. In a merger, acquisition, or sale of assets, subject to this policy.
• With your consent for any other purpose.

7. OAuth tokens and security

OAuth access and refresh tokens for YouTube and TikTok are encrypted at rest and used only to retrieve the data described above. We use encrypted connections (HTTPS/TLS), limit staff access to what they need, and take other reasonable administrative and technical measures to protect your information. No system is perfectly secure, so we can't guarantee absolute security. [Optional: describe incident notification process.]

8. Our records of public metrics

We refresh YouTube data we store from the YouTube API at least every 30 days, and we regularly check that our access to your linked accounts is still valid. If our access can no longer be refreshed, we delete the related API data.

9. Retention and deletion

• We keep information only as long as needed for the purposes in this policy.
• Unlinking a YouTube or TikTok account stops all further data collection from that account.
• YouTube data. If you disconnect YouTube through Atrium or ask us to delete your data, we delete your YouTube API data as soon as possible and within 7 days. If you revoke access through Google's security settings page, we delete it as soon as possible and within 30 days. Stored YouTube data that is not refreshed is deleted within 30 days.
• TikTok data. If you disconnect or revoke TikTok access, we delete your TikTok data within [30] days.
• Deletion requests. Email team@atriumdistro.com to delete your account and data. We will confirm your identity and respond within [30] days (or the shorter periods above).
• What we may keep. We may keep limited records such as payout amounts, dates, PayPal transaction records, tax information, and records of fraud or Terms violations, where needed to meet legal, tax, or accounting obligations, resolve disputes, or prevent fraud. We do not keep YouTube API data beyond the periods above. [Lawyer to confirm retention periods.]

10. Children

The Service is not for anyone under 18. We do not knowingly collect information from anyone under 18. If you believe a minor has used the Service, contact team@atriumdistro.com and we will delete their information.

11. Your rights and choices

Depending on where you live (for example, California under the CCPA/CPRA, or the EU, UK, or similar regions under the GDPR), you may have the right to:

• know and access the personal information we hold about you;
• correct inaccurate information;
• delete your information;
• receive a copy of your information in a portable format;
• object to or restrict certain processing, and withdraw consent at any time; and
• not be discriminated against for exercising these rights.

To make a request, email team@atriumdistro.com. We will verify your identity before responding, and you may use an authorized agent where the law allows. You may also complain to your local data protection authority.

Legal bases (EU/UK users). We process information to perform our contract with you (running the Service and paying you), for our legitimate interests (security, fraud prevention, and improving the Service), to comply with legal obligations (such as tax), and with your consent (such as linking social accounts). [Lawyer to confirm; consider whether an EU/UK representative is required.]

12. International transfers

Atrium is based in the United States, and we and our service providers may process your information in the United States and other countries whose data protection laws may differ from yours. Where required, we use appropriate safeguards for these transfers, such as Standard Contractual Clauses. [Lawyer to confirm.]

13. Changes to this policy

We may update this policy. We will post the new version at app.atriumdistro.com/privacy with a new effective date and, for material changes, give notice [through Discord or by email]. If we start using your data in new ways not covered by the policy you accepted, we will ask you to accept the updated policy first.

14. Contact us

For questions, complaints, or privacy and legal requests:

Atrium Distribution LLC
8 The Green, STE R, Dover, DE 19901, USA
team@atriumdistro.com