Privacy Policy

Kestral. Last updated 8 September 2026

This policy explains what data Kestral collects when you connect a third-party account, how that data is used and stored, how long it is kept, and how you can withdraw access at any time. It applies to the Kestral application at thebackable.com.

1. Who we are

Kestral is operated by Philotimo Global Pty Ltd (ABN 84 607 748 014), 663 Victoria Street, Abbotsford, Victoria, 3067, Australia. For any privacy question, or to request deletion of your data, contact us at developer@thebackable.com.

2. Connecting your YouTube account

Kestral lets you connect a YouTube channel so that its performance data can be displayed in your Kestral dashboard alongside your other connected platforms. Connecting is entirely optional and is initiated by you.

Kestral's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Permissions we request, and why

PermissionWhat it lets us readWhy we need it
View your YouTube account
youtube.readonly
Your channel's name, ID, thumbnail, public statistics, and the list of videos on the channel with their titles, publish dates and public countsTo identify the connected channel and to label each video in your dashboard and charts
View YouTube Analytics reports for your content
yt-analytics.readonly
Day-by-day views, watch time, average view duration, and subscribers gained and lost, for the channel and its individual videosTo draw the performance-over-time charts, which is the core of what Kestral shows you
Your email address
userinfo.email and openid
The email address of the Google Account that authorised the connectionSo we can show you which account a connection belongs to, and contact you if it stops working

All of these permissions are read-only. Kestral cannot upload, edit, delete or publish anything on your YouTube channel, cannot post comments, and cannot change any setting on your Google Account or your channel.

3. How we use this data

We use the data described above only to provide the Kestral service to you: to display your channel's metrics in your dashboard, to build historical charts, and to generate reports you ask for.

We do not:

4. Storage and security

Metrics we retrieve are stored in our database so your charts load quickly and so history is preserved even where the source API only exposes a limited window. Access tokens and refresh tokens are stored encrypted at rest and are never exposed to your browser or to other customers. All data is transmitted over TLS. Access to production systems is limited to personnel who need it.

5. Sub-processors

We share data with a small number of service providers who host and operate our infrastructure on our behalf, under contractual confidentiality and data-protection obligations. Our infrastructure runs on Microsoft Azure, specifically: Azure App Service (application hosting), Azure Database for PostgreSQL (data storage), Azure Blob Storage (file storage for uploaded documents and images), Azure Communication Services (transactional email delivery), and Azure Document Intelligence (processing of manually uploaded financial statements). We do not otherwise disclose your data to third parties.

6. Retention and deletion

Metrics associated with a connection are retained for as long as your Kestral account exists, including after you disconnect a channel. We do this because several source platforms (including YouTube and Meta) do not let us re-fetch historical data once it has aged out of their own API — once deleted, it cannot be recovered from the source, so we keep it so your history survives a reconnect and remains available for your own reporting. Disconnecting a channel immediately and permanently stops any further data collection from it.

You can ask us to delete your historical data at any time by writing to developer@thebackable.com, except where we are required to retain records to meet a legal obligation.

7. Withdrawing access

You can revoke Kestral's access to your YouTube data at any time, in either of two ways:

Revoking access stops all future collection. To also have already-collected data erased, contact us as described above.

8. YouTube API Services

Kestral uses YouTube API Services to retrieve the data described in this policy. By connecting a YouTube channel you are also agreeing to the YouTube Terms of Service. Google's own handling of your information is governed by the Google Privacy Policy.

9. Other connected platforms

Kestral also supports connections to other services. Where you connect one, we collect only the metrics needed to display that platform's performance in your dashboard, and the principles set out in this policy — read-only access, no selling, no advertising use, deletion on disconnection — apply equally.

10. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict its processing, and to receive a copy in a portable form. To exercise any of these, contact developer@thebackable.com. You also have the right to complain to your local data protection authority.

11. Changes to this policy

If we change this policy we will update the date at the top of this page, and where the change is significant we will notify you by email or in the application before it takes effect.

12. Contact

Philotimo Global Pty Ltd (ABN 84 607 748 014)
663 Victoria Street, Abbotsford, Victoria, 3067, Australia
developer@thebackable.com