BeBored

Privacy Policy

Last updated: 20 July 2026

BeBored ("we", "us") is a social media analytics dashboard for creators and businesses, operated by NRL Automations (contact: niek@nrlautomations.com). This policy explains what data we process and why.

What we collect

When you connect an account, you authorise us (through official OAuth) to read data from that platform on your behalf:

YouTube and Google user data

BeBored uses YouTube API Services to retrieve your channel and video statistics. By connecting a YouTube channel you also agree to the YouTube Terms of Service. Google's own handling of your data is described in the Google Privacy Policy (also at http://www.google.com/policies/privacy).

Through Google Sign-In you grant us read-only access (scopes youtube.readonly and yt-analytics.readonly). We access and store the following Google user data: your channel profile (name, ID, thumbnail), your videos with their public statistics, and your channel analytics (daily views, watch time, subscribers gained and lost, per-video watch time). We store the OAuth tokens encrypted and server-side only, and use them to refresh these analytics roughly every hour so your dashboard stays current without you having to sign in again. This data is shown only to you, the account owner, inside your private dashboard.

Limited Use. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use YouTube and Google user data solely to provide and improve the analytics features you see in the dashboard. We never sell this data, never use it for advertising, and never transfer it to third parties except the infrastructure providers that run the service (listed under "Sharing"), or where required for security or by law.

Revoking access and deletion. You can revoke BeBored's access to your Google data at any time by clicking Disconnect next to YouTube in the dashboard's Settings, which immediately deletes the stored access tokens and the stored YouTube data snapshot (channel and video statistics). You can also revoke access from your Google account security settings (also at https://myaccount.google.com/permissions); when you revoke access that way, we detect it and delete your stored YouTube data within 30 days. All stored YouTube data is also deleted when your account is removed, or earlier on request via niek@nrlautomations.com.

Why we use it

Solely to display your analytics inside your private dashboard and, where you enable it, to let you read and reply to your own direct messages. We do not sell your data, and we do not use it for advertising.

Where it is stored

Data is stored securely in Supabase (PostgreSQL, EU region) with row-level security so each account can only ever access its own data. Access tokens are stored encrypted and are never exposed to other users.

Sharing

We share data only with the infrastructure providers that run the service (Supabase for the database, Vercel for hosting) and with the platforms you connected. We never share your data with third parties for their own purposes.

Retention & deletion

We keep your data while your account is active. You can disconnect a platform at any time from Settings, which removes the stored tokens and, for YouTube, the stored data snapshot. To delete all your data, see our Data Deletion instructions or email niek@nrlautomations.com. When an account is removed, its data is deleted from our database.

Your rights

You can request access to, correction of, or deletion of your personal data at any time via niek@nrlautomations.com.

BeBored, built by NRL Automations, nrlautomations.com