Legal

Privacy Policy

Last updated: August 27, 2026

What this policy covers

This policy explains what data COMARI collects, why we collect it, and how we handle it. COMARI is a marketplace that connects creators for paid collaborations (guest spots). This policy applies to anyone who visits comari.app or uses the platform.

What we collect

We collect data in a few ways depending on how you use the platform:

  • Account info. When you sign in with Google, we receive your name, email address, and profile picture from Google. We use this to create and manage your account.
  • YouTube channel data. If you connect your YouTube channel (to become a host or verify your channel), we access your channel name, subscriber count, video count, view count, channel thumbnail, and custom URL through the YouTube Data API. We use this data to display your host profile and verify channel ownership. We do not access your private videos, comments, or analytics beyond what is publicly available through the API.
  • Payment info. Payments are processed through Stripe. We do not store your credit card number or bank details. Stripe handles that directly. We store references to Stripe transactions (session IDs, payment intent IDs) to track bookings.
  • Messages and bookings. Messages you send through the platform and booking details (host, package, amount, status) are stored to facilitate collaborations.

How we use your data

  • To create and maintain your account
  • To display host profiles with accurate channel information
  • To process bookings and payments through Stripe
  • To send notifications about booking status, messages, and scheduling
  • To track growth metrics after guest spots (subscriber/view changes), when you've connected your YouTube channel

YouTube API Services

COMARI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • We only request the YouTube scopes necessary for the features you use (channel verification and profile display).
  • We do not sell, lease, or share YouTube data with third parties for advertising or unrelated purposes.
  • We do not use YouTube data for surveillance, tracking users across other services, or building advertising profiles.
  • You can revoke COMARI's access to your YouTube data at any time through your Google Account permissions.

Data storage and security

Your data is stored in a PostgreSQL database hosted on Supabase (AWS infrastructure). Connections are encrypted. Passwords (for email/password accounts) are not currently implemented in production; authentication is handled through Google OAuth. Payment data is handled entirely by Stripe and never touches our servers.

Data sharing

We share data with the following third-party services, and only what's necessary for the platform to work:

  • Stripe — payment processing
  • Google — authentication and YouTube API
  • Supabase — database hosting
  • Vercel — application hosting
  • Resend — email notifications

We do not sell your data to anyone. We do not share data with advertisers.

Your rights

You can:

  • Request a copy of your data by emailing us
  • Request deletion of your account and associated data
  • Revoke YouTube/Google access through your Google Account settings

Cookies

We use cookies for authentication (keeping you logged in) and theme preferences. We do not use tracking cookies or third-party analytics cookies.

Changes to this policy

If we make significant changes to this policy, we'll update the date at the top and post the new version here. We won't reduce your rights under this policy without your consent.

Contact

Questions about this policy? Email hello@comari.app.