Privacy
Policy

We collect information that you provide directly to us, including:

• Name, email address, phone number, and postal address
• Payment information (IBAN, bank account details)
• Tax identification numbers (where required by law)
• Business information (company name, registration number, VAT number)
• Account credentials (username, password)

We automatically collect information about how you use our Platform, including:

• IP address, browser type, and device information
• Pages visited, time spent on pages, and navigation patterns
• Campaign performance data, clicks, conversions, and earnings
• Log files and analytics data

We use cookies, web beacons, and similar technologies to track activity and store information. See Section 6 for more details.

We do not sell your personal information. We may share your information in the following circumstances:

We may share information with third-party service providers who perform services on our behalf, such as payment processing, data analytics, hosting, and customer support. These providers are contractually obligated to protect your information.

We may share aggregated, anonymized data with advertisers and partners for analytics and business purposes.

We may disclose information if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users.

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We may share information with your explicit consent or at your direction.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal and contractual obligations)
• Portability: Request transfer of your data to another service provider
• Objection: Object to processing of your personal information for certain purposes
• Restriction: Request restriction of processing of your personal information
• Withdraw Consent: Withdraw consent where processing is based on consent

You can exercise your data export and account deletion rights directly in the ThreeStove dashboard. Navigate to Settings → Security to:

• Export your data: Download all your personal data as a JSON file, including your profile, conversions, clicks, payouts, messages, and more.
• Delete your account: Request permanent account deletion. Your personal data will be removed, while financial records (commissions, payouts) will be anonymized to comply with Dutch tax retention requirements (7 years).

You can also contact us at privacy@threestove.com for any privacy-related requests. We will respond within the timeframes required by applicable law.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Factors that determine retention periods include:

• The nature of the information
• Legal and regulatory requirements (e.g., Dutch tax law requires financial records to be retained for 7 years)
• Business and operational needs
• Dispute resolution and enforcement of agreements

When you request account deletion via Settings → Security, your personal data (profile, messages, API keys, bank details) is permanently removed. Financial records such as commissions and payout amounts are anonymized. The monetary amounts are retained for legal compliance, but all personally identifiable information is removed.

When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention policies.

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information promptly.

Creators can connect their own YouTube channel to ThreeStove. This connection uses Google OAuth and YouTube API Services. By using this feature you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's handling of your data is described in the Google Privacy Policy (https://www.google.com/policies/privacy).

We request only the read-only scope youtube.readonly and use it for a single kind of API request: reading the connected creator's own channel. The data we receive is the channel ID, channel title, handle, avatar image, and public channel statistics (subscriber count, video count, and total view count), together with the OAuth tokens needed to keep those totals current. We do not access private video content, comments, messages, subscriptions, or watch history, and we cannot upload, modify, or delete anything on YouTube.

This data is used to verify that the creator owns the channel, to show the channel identity and audience totals on the creator's ThreeStove profile, and to check whether the creator meets campaign requirements. It is not used for advertising targeting or credit decisions, and it is not used to develop, improve, or train machine learning or artificial intelligence models.

The connected channel's identity and audience totals are visible within ThreeStove to the creator, to advertisers reviewing that creator's campaign applications or collaborations, and to ThreeStove administrators. We do not sell Google user data and we do not transfer it to data brokers, advertising networks, or any other third party, except for the hosting processors named in section 8 that store it on our behalf.

Google user data is transmitted over TLS and stored encrypted at rest in the EU. OAuth tokens are held server-side only and are never exposed to the browser. We retain this data only while the YouTube connection is active: when a creator clicks Disconnect, we revoke our access with Google and permanently delete the stored tokens and channel data. Deleting your ThreeStove account removes the connection as well. You can also revoke ThreeStove's access at any time via your Google security settings (https://myaccount.google.com/permissions).

ThreeStove's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.