Legal
Privacy Policy
Last updated: August 27, 2026
What this policy covers
This policy explains what data COMARI collects, why we collect it, and how we handle it. COMARI is a marketplace that connects creators for paid collaborations (guest spots). This policy applies to anyone who visits comari.app or uses the platform.
What we collect
We collect data in a few ways depending on how you use the platform:
- Account info. When you sign in with Google, we receive your name, email address, and profile picture from Google. We use this to create and manage your account.
- YouTube channel data. If you connect your YouTube channel (to become a host or verify your channel), we access your channel name, subscriber count, video count, view count, channel thumbnail, and custom URL through the YouTube Data API. We use this data to display your host profile and verify channel ownership. We do not access your private videos, comments, or analytics beyond what is publicly available through the API.
- Payment info. Payments are processed through Stripe. We do not store your credit card number or bank details. Stripe handles that directly. We store references to Stripe transactions (session IDs, payment intent IDs) to track bookings.
- Messages and bookings. Messages you send through the platform and booking details (host, package, amount, status) are stored to facilitate collaborations.
How we use your data
- To create and maintain your account
- To display host profiles with accurate channel information
- To process bookings and payments through Stripe
- To send notifications about booking status, messages, and scheduling
- To track growth metrics after guest spots (subscriber/view changes), when you've connected your YouTube channel
YouTube API Services
COMARI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only request the YouTube scopes necessary for the features you use (channel verification and profile display).
- We do not sell, lease, or share YouTube data with third parties for advertising or unrelated purposes.
- We do not use YouTube data for surveillance, tracking users across other services, or building advertising profiles.
- You can revoke COMARI's access to your YouTube data at any time through your Google Account permissions.
Data storage and security
Your data is stored in a PostgreSQL database hosted on Supabase (AWS infrastructure). Connections are encrypted. Passwords (for email/password accounts) are not currently implemented in production; authentication is handled through Google OAuth. Payment data is handled entirely by Stripe and never touches our servers.
Data sharing
We share data with the following third-party services, and only what's necessary for the platform to work:
- Stripe — payment processing
- Google — authentication and YouTube API
- Supabase — database hosting
- Vercel — application hosting
- Resend — email notifications
We do not sell your data to anyone. We do not share data with advertisers.
Your rights
You can:
- Request a copy of your data by emailing us
- Request deletion of your account and associated data
- Revoke YouTube/Google access through your Google Account settings
Cookies
We use cookies for authentication (keeping you logged in) and theme preferences. We do not use tracking cookies or third-party analytics cookies.
Changes to this policy
If we make significant changes to this policy, we'll update the date at the top and post the new version here. We won't reduce your rights under this policy without your consent.
Contact
Questions about this policy? Email hello@comari.app.