Lens Social Data Dashboard

Privacy Policy

Effective date: 2026-08-28

The Lens Social Data Dashboard ("the Dashboard") is a restricted-access tool operated by TheSMC for its client's marketing team. Access is granted to named client personnel, who authorize the Dashboard using their own Google Accounts; those accounts are not members of TheSMC's Google Workspace organization. This policy describes how the Dashboard handles data obtained from Google — YouTube and Google Ads. TheSMC acts solely as the client's agency operator, under the client's authorization, and only for YouTube channels and Google Ads accounts the client owns.

The Dashboard uses YouTube API Services. By connecting a YouTube channel to the Dashboard you agree to the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy.

The Dashboard's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained from Google APIs is used only to provide and improve the reporting features described below. It is never sold, never transferred for advertising or credit purposes, and never used to serve ads. No human reads it except as needed for security, to comply with the law, or with the administrator's explicit consent.

1. Who this applies to

This policy applies to the client administrator who connects a client-owned YouTube channel to the Dashboard, and to the channel data returned by YouTube for that channel. The Dashboard is not offered to the general public and has no consumer sign-up.

2. Data we access from Google

When an authorized administrator connects a channel, the Dashboard reads the following categories through YouTube API Services:

  • Channel and video metadata — channel ID and title, video IDs, titles, descriptions, thumbnails, publication dates, and playlist membership for the connected client-owned channel.
  • Aggregated performance statistics — view counts, likes, comment counts, subscriber counts, watch time, traffic sources, and audience demographics reported in aggregate for the connected channel and its videos.
  • Owner-only channel performance — impressions, click-through rate, watch time, average view duration, traffic sources, search terms, and aggregated viewer age and gender, read through the YouTube Analytics API and the YouTube Reporting API. A single scope, yt-analytics.readonly, authorizes both.
  • Google Ads performance — the ad accounts the administrator can access, and campaign-level daily metrics such as impressions, clicks, cost, and conversions for client-owned ad accounts.
  • Authorization data — the OAuth refresh token issued when the administrator grants access, plus the identifiers of the channels the administrator selected.

The Dashboard does not read private messages, does not collect comment text from YouTube, and does not access channels the administrator has not connected.

3. How we use the data

The data is used only to produce marketing reporting for the client — channel and content performance, audience composition, advertising performance, and trends over time. Google Ads data is read for reporting only: the Dashboard never creates, edits, pauses, or activates an ad. None of the data is used to target advertising, to profile individuals, or to build audiences. It is not sold and is not combined with data from other clients.

4. Storage and security

OAuth tokens are stored in AWS Secrets Manager and encrypted at rest. Reporting data is stored in TheSMC-managed AWS infrastructure with access restricted to the operations team responsible for the client's account. Tokens are never displayed in the Dashboard user interface and are redacted from application logs.

5. Sharing

YouTube data is not shared with any third party for advertising or marketing purposes. The Dashboard relies on infrastructure providers (Amazon Web Services for storage, Vercel for application hosting) that process data solely on TheSMC's behalf in order to run the service.

6. Revoking access

An administrator may disconnect the YouTube integration from the Dashboard at any time. In addition to the Dashboard's own disconnection flow, you can revoke the Dashboard's access to your data through the Google security settings page at https://security.google.com/settings/security/permissions. Revoking access stops all further data retrieval immediately.

7. Requesting deletion

To request deletion of data the Dashboard has stored about your channel, email paik@thesmc.co.kr with the YouTube channel ID concerned. We will confirm the request and delete the associated stored data within 7 calendar days.

8. Changes

This policy may be updated as the Dashboard evolves. Material changes will be communicated directly to the client marketing team, and the effective date above will be revised.

Operator

Company
TheSMC (주식회사 더에스엠씨)
Representative
Kim Yong-tae (김용태)
Business registration number
331-87-00356
Address
22 Bongeunsa-ro 49-gil, Gangnam-gu, Seoul, Republic of Korea (서울특별시 강남구 봉은사로 49길 22)
General enquiries
info@thesmc.co.kr · +82-2-816-9799
Data protection officer
Baek Seung-soo (백승수), Director · paik@thesmc.co.kr · +82-70-5101-9535
Corporate privacy policy
https://thesmc.co.kr/privacy/ — covers TheSMC's corporate website. This page governs the Dashboard's use of YouTube data.

9. Contact

Questions about this policy should be directed to info@thesmc.co.kr.