This policy covers cloutfind.com and the Cloutfind service. It says what we collect about the people who use Cloutfind and about the YouTube creators shown in it, what we do with it, who else handles it, and how to have it removed. Cloutfind is operated from the United States, in English and in US dollars, for businesses and for people aged 18 and over.

1. Information about you

Account: your email address (you sign in with a link sent to it) and the workspace you belong to. A new workspace is named from the part of your address before the @.
Brand profile: what you save about your brand in Settings: brand name, pitch, target audience, product links, competitors, example creators, product category, price point, tone, ideal creator, red flags and outreach goal, and the business name, postal address and contact line you save for your outreach emails (these three are added to drafts by our own code and are not sent to the AI provider). Members of your workspace can see and edit it.
What you do in the product: the searches you run (the text, the filters taken from it and the number of results), creators you reveal, creators you mark as do not contact (with the note you add), each confirmation you give before a draft is written for a creator in a country that asks for consent (who confirmed, for which creator, and when), lists with your notes and pipeline status, saved searches (with any alert address or webhook address you enter), drafts written for you, exports, team invitations (including the address of the person invited) and API keys (we keep only a hash and the first characters). Members of your workspace can see its searches, lists, drafts and saved searches. Deleting a list hides it; it is removed with your account.
Usage records: while you are signed in we record what you do in the app as a list of events from a fixed set. For each event we keep its kind, the time, the page it happened on (with the id of any creator or list removed, so a record shows that you opened a profile, not whose) and a few short facts that depend on the kind:
Pages: how long the page was in use, how far you scrolled, when the tab was hidden or shown, and whether you moved on or closed it.
Clicks: the name we gave the button in our code (for example "reveal"), the kind of element, and where a link goes: a page of this site, your mail app, or only the word "external" for any other site. The text on the button or link is not recorded.
Fields: the name of a form field in our code when you put the cursor in it, never what you type.
Searches: that a search started and what started it, which options were on, how long it took, whether it finished, failed or you left before it finished, how many results came back, whether more creators were being indexed for it, how far down the list you went, and the position, score and brand verdict of a result you opened. The record points to the search by its id; the text of the search is not copied into the usage records.
Actions: that you opened a creator's profile (how you got there and whether an email was on file), revealed a contact, used an address or a social link (not which one), made, copied or opened a draft, saved a search, added a creator to a list, filled in or saved a brand profile, ran into a plan limit or a locked feature, or pressed a subscribe button (with the plan and billing period).
Errors: the error message your browser reported, with the file and line of our code.
Once per visit: whether your screen is the size of a phone, a tablet or a desktop, your browser language, whether it is a touch screen, and the site you came from.
The records carry your account, your workspace and a random number for the browser tab. We do not record what you type into fields, we do not record the text shown on the page, and we do not record your screen.
This happens only for accounts that were told about it when they signed up, or that accepted the notice shown to older accounts, and you can turn it off at any time in Settings. In Europe it is off unless you ask for it: when your browser reports a European time zone (the European Union, the European Economic Area, the United Kingdom, Switzerland and neighboring countries) the notice is not shown and nothing is recorded until you tick the box on the sign-up form or turn recording on in Settings; that is your consent, and the same switch in Settings withdraws it. When the browser reports no time zone, nothing is recorded. This is decided by the browser's time zone, not by your network address.
Answers to our questions: now and then the app asks a short question: what brought you to Cloutfind, whether a search found what you wanted, and, after a free trial ends, what held you back. If you answer, we keep the option you chose and, if you write one, your sentence (cut to 280 characters, with anything that looks like an email address replaced), together with your account and, for a question about a search, that search's id and its number of results. If you wave a question away we keep that too, so it is not asked again. We also record that a question was shown. The questions are asked only where usage recording is on, so in Europe only with your consent, and not after you turn recording off.
How you found us: when you create an account from a sign-in form that shows the sentence about recording, we keep, once, three things about how you arrived: the tag in the address you came in on if there was one (for example ?src=linkedin), the name of the site that linked to us, and the first page you opened. Until you ask for a sign-in link they are held only in your browser tab. They are not kept for visitors in Europe.
Visit counts: for visitors who are not signed in, we count page views in total: which page, which site linked to it, and, on the first page, the tag in the address if there was one. These counts carry no cookie, no identifier and no address, so they cannot say who visited. Visitors whose browser reports a European time zone are not counted.
Messages to us: if you use the contact form, the pricing feedback form or the enterprise form, we receive your email address, your name and company if you give them, your message, and your IP address and browser type. Contact and feedback messages are stored so we can answer them; enterprise inquiries are sent to us by email and not stored.
Billing: when you start a checkout, our payment processor (Stripe) creates a customer record with your email address and workspace id. We keep the Stripe customer and subscription ids, your plan and its changes, contact-reveal packs you buy, and a short record of each payment event (ids, amounts and status). Card details are entered on Stripe's own page; we never see or store them.
Sign-in and security records: when you sign in, and for key actions such as revealing a contact, we record the time, your IP address, your browser type and a line naming your account. Members of your workspace can see its security log. For each signed-in session we also keep your IP address and browser type; signing out removes it.
Free-trial abuse prevention: when you ask for a sign-in link, or open one, we set a random browser identifier in a cookie. When an account is created or a trial is granted we keep that identifier together with a one-way hash made from your IP address, browser type and language. We keep only the identifier and the hash, not the address itself, and we use them only to stop one person from taking many free trials.
Server logs: each request to our servers is logged with its time, your IP address, your browser type and the page path (never the part of an address after a question mark). Some lines name your account or workspace, and a few contain an email address, for example when a sign-in email fails or a message reaches us through a form. Logs are kept for up to 12 months.
Where a request comes from: United States law does not let us offer Cloutfind in a few countries and regions (the Terms name them). To follow it, we look up the country and region of each request's IP address in a database kept on our own server; the address is not sent to any outside service for this. A request that appears to come from one of those places is refused, and we add one to a daily count for that place. The count holds no address and no account. For every other request the country and region are not kept. Removing a channel from Cloutfind and the contact form work from everywhere. The database is IP Geolocation by DB-IP.

2. How we use it

Sign you in and protect your account.
Run the searches, rankings and drafts you ask for.
Enforce plan limits and bill correctly.
Detect and stop abuse, such as repeated free trials.
Follow the law, including United States sanctions law, which is why access from a few places is refused.
Answer your messages.
Improve the product, using the usage records and visit counts described above. Only we read them.

We do not use any of it for advertising, we do not sell information about our users, and we share it only as section 7 describes.

3. YouTube creators

Cloutfind shows information about YouTube channels so that businesses can find creators to work with. If you are a creator, this section is about you.

What we hold about a channel: its id, handle, name, description, country if the channel set one, the addresses of its pictures, and its subscriber, view and video counts; for recent videos, the title, description, counts and date; brand names mentioned in those descriptions, with the text around them; and contact details the creator published in the channel or video descriptions (an email address, a website, social links, a Discord invite).
Where it comes from: we read channel and video information through YouTube API Services. Contact details are found in the published descriptions by pattern matching and by AI; we never use the email address behind YouTube's "view email address" button. Until October 5, 2026 we also opened the public link-in-bio page a channel pointed to (such as Linktree or Beacons) and read the same kind of contact details there. We no longer open those pages. Details found that way before that date are still held with the channel and are deleted when the channel is removed. We do not get past a sign-in on any site.
What we add: an engagement rate, average views, sponsor counts and a sponsorship price estimate, calculated by Cloutfind from public numbers. They are our estimates: not figures from YouTube, not approved by Google and not quotes from the creator. For each search, AI also writes a fit score, a one-sentence reason and a brand-fit verdict; these are shown to the customer who searched and are not stored on our servers. Outreach drafts written for a customer, which name the creator and their videos, are kept in that customer's workspace. So is a customer's own mark, with an optional note, that a creator told them no, and a customer's confirmation, where the law of a creator's country asks for consent, that the creator agreed to be contacted or that the customer checked they may write.
Who sees it: customers who are signed in. Customers pay for access to Cloutfind, and a creator's email address is shown to a customer only after they use one of their contact reveals. Customers on some plans can export lists, including revealed email addresses, or use an API. Parts of it are sent to our AI provider (section 4). We do not give creator information to anyone else except the service providers in section 7.
How current it is: we read each channel's information from YouTube again at least every 30 days. When YouTube no longer returns a channel (it was deleted, closed or made private), we check again on the following nights and delete what we hold about it once it has been missing for three days.
Removal: a creator can remove their channel at cloutfind.com/remove-my-channel, without an account and without telling us who they are: you put a short code in your channel description to show the channel is yours, and the channel is removed at once. You can also write to support@cloutfind.com from the address shown on the channel; we act on those requests within 7 days. Removal deletes what we hold about the channel and puts its id on a list of channels that asked to be left out, so it is not added again. Copies in our backups are gone within about two weeks. A customer who already revealed or exported your details may have their own copy; our Terms require customers to stop using and delete it when we tell them you asked to be removed. Removing a channel from Cloutfind does not, in any way, affect what YouTube itself stores; to change or delete something on YouTube, use YouTube.
Keeping only the email address back: if you want your channel to stay listed but your email address not to be given to customers, write to support@cloutfind.com from that address. Within 7 days we stop showing it, including to customers who revealed it earlier, we leave it out of exports, we delete outreach drafts to it that were not sent, and no new ones are written. To keep the address back we have to keep it, on a list of addresses that are not given out. If your channel description says that you do not take sponsorships or collaborations, we do not give your address to customers at all. That is read from the description by a list of phrases, so an unusual wording can be missed; write to us if it is.
Corrections: if something we show about your channel is wrong, write to support@cloutfind.com and we will correct or remove it.

Cloutfind uses YouTube API Services. Google's own handling of data is described in the Google Privacy Policy, and using Cloutfind means you also agree to the YouTube Terms of Service.

4. AI processing

Cloutfind uses an AI provider to read your searches, rank creators and explain the ranking, judge brand fit, draft emails, draft a brand profile from a website, and find contact details and sponsor mentions in public descriptions. What is sent to it: the text of your searches; your brand profile; text you type into the draft window; the title, description and first part of the text of a website you ask us to read (yours or a competitor's); and creator information (names, statistics, the start of channel descriptions and recent video titles, and for contact and sponsor detection whole public descriptions). We do not send your email address, your payment details or your IP address. The provider's business terms say it does not train its models on what we send.

AI output can be wrong. Rankings, reasons, brand-fit verdicts, detected sponsors, extracted contact details and drafts can be false, incomplete, misleading or out of date. Check them yourself before you rely on them or send anything.

5. Cookies and browser storage

We set three cookies, all our own: your session (it holds your account's email address and ids in a signed token, and lasts 7 days or until you sign out), a marker that lasts 30 seconds while your plan is being updated, and the free-trial abuse identifier (one year), which is set only when you ask for a sign-in link or open one. Your browser also keeps, on your device, your recent searches and their results (a search shown again within 30 minutes is not run again), your progress in the product tour, how you first arrived (the tag, the linking site and the first page, until you close the tab), and while usage recording is on, a random number for the open tab and which searches you have already answered a question about. Signing out clears all of these except the tour progress from the browser. We do not use third-party trackers, analytics companies or advertising pixels.

6. Keeping and deleting

Deleting your account: in Settings, under Delete account, you can delete it yourself, and it happens at once. You can also write to support@cloutfind.com from the account's email address, and we do it within 7 days. A paid subscription that is set to renew has to be cancelled first. Deleting removes the account and, if no one else belongs to its workspace, the workspace with everything in it: brand profile, searches, lists, drafts, saved searches, reveals, do-not-contact marks, subscription records and usage records. We also delete the account's sign-in and security records, your messages to us, the search text kept by the jobs that add creators for a search, and invitations addressed to you. A workspace you share stays for the others. What remains: the free-trial abuse identifier and hash (no longer tied to any account); the short records of payment events (ids, amounts and status), which we keep for accounting, and the records our payment processor keeps; server logs (up to 12 months); and database backups (up to about two weeks).

Time limits: usage records are deleted after 24 months and server logs after 12 months. Other account information is kept while the account exists.

Copies and corrections: to get a copy of what we hold about your account, or to have it corrected, write to the same address. You can edit your brand profile yourself in Settings and turn usage recording off there.

Nevada: we do not sell personal information about our users. Nevada residents may still send a request not to sell to support@cloutfind.com.

7. Who else handles your data

Our payment processor (Stripe), when you start a checkout or manage billing.
Our email delivery service, which receives the address and the content of each email we send: sign-in links, account emails, trial reminders, team invitations, saved-search alerts (with the saved search and up to three creator names), and messages from our forms forwarded to us (with the sender's IP address and browser type).
Our AI provider, as section 4 describes.
Our hosting and backup storage companies, which hold our server and copies of our database in the United States.
YouTube (Google): creator pictures load from YouTube's servers, so your browser contacts Google when they are shown; and when a search finds few matches, keywords taken from it are sent to YouTube's search to find more channels.
An address you choose: if you set a webhook on a saved search, we send the search's name, text, match counts and up to three creator names to it.
Members of your workspace, as section 1 describes.

8. Do Not Track and other sites

Cloutfind does not follow you across other websites, and no advertising or analytics company collects information about you through our site. For that reason the site does not change its behavior when your browser sends a Do Not Track signal; the switch in Settings is what controls usage recording.

9. Changes to this policy

When this policy changes we post the new version on this page with a new effective date. If a change is material, we also email account holders before it takes effect.

10. Contact

Privacy or data questions: support@cloutfind.com.