Last updated: 20 October 2026
We collect as little as we need to run the service. This page explains what that is.
What we collect
Account data. Your email address and a hashed password (we never see or store the password itself). Optionally a name and phone number if you add them to your profile.
Order data. The public YouTube links you submit, the services and quantities you order, custom comments you write, and order statuses.
Payment data. Amount, time, status and the payment reference returned by our UPI payment partner. We never see or store your UPI PIN, card number or bank login. Payments are handled by the payment partner.
Technical data. IP address and browser information for security (rate limiting, fraud prevention) and session cookies that keep you logged in.
Analytics. If enabled, privacy-respecting analytics that count page views without building advertising profiles.
Why we use it
- To run your account, place and track orders, and keep your wallet and transaction history.
- To send account emails — password resets and important order or policy notices. No marketing emails unless you opt in.
- To prevent fraud and abuse.
- To meet legal and accounting obligations.
Who we share it with
- Our UPI payment partner — the amount and a reference so they can process payment.
- Delivery partners — the public link and quantity needed to fulfil an order. They don't receive your email or name.
- Hosting and email providers that process data on our behalf.
- Authorities, when required by Indian law.
We don't sell personal data.
Cookies
We use essential cookies: a session cookie to keep you logged in and a theme preference. No third-party advertising cookies.
How long we keep it
Account and order data are kept while your account is open. Payment and transaction records are kept for as long as Indian tax and accounting rules require (usually up to eight years). Security logs are kept for a short period, normally under 90 days.
Your choices
- Access or correction: most data is visible and editable in your dashboard.
- Deletion: email support@ytboost.store from your account email. We'll delete the account and personal data, keeping only records we're legally required to keep. Any remaining wallet balance is forfeited on deletion, as top-ups are non-refundable.
- Complaints: contact us first. You may also have rights under India's Digital Personal Data Protection Act.
Security
Passwords are hashed with a modern algorithm, sessions are tied to secure cookies, and admin access requires strong authentication. No system is perfectly secure; if we learn of a breach affecting you, we'll tell you.
Children
YTBoost isn't intended for children under 18 without a parent's or guardian's involvement.
Changes
We'll update the date above when this policy changes and notify account holders of significant changes by email.