Privacy Policy
Effective 2026-09-06. Kolliq, Lucknow, India. founder@kolliq.com
Operator and contact
Kolliq operates this service from Lucknow, India. For support, privacy questions, corrections, access requests, or deletion requests, email founder@kolliq.com.
Information we use
Google sign-in supplies account information such as your name, email address, profile image, and Google account identifier so we can authenticate you and maintain your account. Signing in does not automatically authorize YouTube access. If you separately connect a supported channel, we use the permissions shown in that authorization flow and store credentials needed to maintain the connection.
Kolliq uses YouTube API Services to obtain public channel and video observations and, where used as evidence, public comments. We store creator-authored decisions, questions, conversations, experiments, and feedback to provide your workspace. Public checks process the channel identifier you submit to produce a result.
Providers and processing location
The production service is hosted on a Hostinger VPS in Phoenix, United States. Google provides sign-in and YouTube API Services. Data may therefore be processed outside India or your country of residence. Read the Google Privacy Policy and Hostinger Privacy Policy for their practices.
AI-generated explanations are disabled in the current production configuration. If enabled later, the relevant feature must explain what evidence is sent to the configured provider before use. Connected Instagram analytics and paid subscriptions are unavailable in this release.
Cookies, browser storage, and measurement
Authentication cookies maintain your session. Browser storage remembers account hints, channel selection, and first-party acquisition context. Acquisition context expires after 30 days in the browser. Clearing browser storage removes local preferences but does not delete your account.
We use request logs and first-party product events to operate, secure, diagnose, and improve the service. Events describe actions such as analysis completion or sign-in; they do not intentionally include raw channel inputs, passwords, OAuth tokens, or conversation text. Product events are retained for up to 90 days in the active database. No Google Analytics advertising or remarketing tag is enabled by this release. We do not sell account information or use authorized Google data for personalized advertising.
Retention and backups
Account details and creator-authored workspace records are retained while needed to provide your account, until you request deletion or they are no longer needed. The current evidence-expiry worker removes stale public-comment observations and cached intelligence analyses after 30 days. This does not mean every channel record or creator-authored decision expires after 30 days.
Local daily recovery backups rotate after 14 days. Deployment recovery copies and manually exported copies are reviewed during deletion handling. Backups are restricted recovery copies, not an active source for product use. Pending and completed deletion requests must be reapplied before normal access resumes after a restore.
Access, correction, and deletion requests
Email founder@kolliq.com from your account email with the subject Kolliq privacy request. State whether you want a copy, correction, connection removal, or account and associated workspace deletion. We may ask for proportionate confirmation of ownership. Do not send passwords, tokens, or government identity documents in the initial request.
We review the request, confirm its scope, remove or correct applicable active records, and confirm completion or explain any information that must be retained and why. Disconnecting alone does not complete an account-deletion request. You may also revoke access in Google account permissions. Removing data from Kolliq does not delete your original YouTube content.
Safeguards and policy changes
We use HTTPS, access controls, protected credentials, and restricted backups. No system can guarantee absolute security. Contact us if you suspect unauthorized access. Material changes to data handling will be reflected here with an updated effective date. Mandatory rights under applicable law are not limited by this policy.