Legal

Privacy Policy

How Claimvu collects, uses and protects your personal data when you use claimvu.com and our royalty collection services.

Last updated: May 10, 2026

01

Introduction

Claimvu (“we”, “our”, “us”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your information when you use our website claimvu.com and our royalty collection services.

02

Data controller & contact

Claimvu Ltd

128 City Road, London EC1V 2NX, United Kingdom

Companies House #17171744

For any privacy-related questions or to exercise your rights, contact us at contact@claimvu.com.

03

What data we collect

We collect and process the following categories of data:

Identification & contact

Legal name, pseudonym, nationality, date of birth, address, phone number, and email.

Professional data

SACD/SCAM member numbers, content catalogue, and royalty history.

Financial data

IBAN/Bank details for royalty transfers.

Technical & security data

IP address, user-agent, encrypted OAuth tokens (encrypted at rest), electronic signature certificates, and chained audit logs for eIDAS compliance.

Third-party data

When you qualify a video as co-authored, you provide names and emails of third parties. You confirm you have informed these individuals that their data is processed by Claimvu solely for generating royalty declarations.

Google user data (API)

When authorized via OAuth, we access:

  • YouTube Analytics (yt-analytics.readonly) — performance reports and view counts (per country, per quarter). We do not access revenue or monetary data.
  • YouTube Account Info (youtube.readonly) — channel metadata and content identification.
04

Google API disclosure & limited use

Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Purpose
Data is used exclusively to identify eligible content and calculate royalties for collecting societies.
Restrictions
No data sale, no advertising usage, and no human review except for security or legal necessity.
05

How we use your data & automated processing

We process your data to:

  • Register you and your works with collecting societies (SACD, SCAM, GEMA, SIAE, SOGEM, etc.).
  • Verify content eligibility via YouTube Analytics reports.
  • Process payments and provide earnings statements.
Automated processing. If you have enabled the “Unique Author” setting, our system automatically generates royalty declarations from detected eligible content. You can disable this auto-deposit at any time in your account settings (Profil — Qualité d’auteur) and qualify each video manually to ensure human intervention (GDPR Art. 22).
06

Legal basis for processing

Under UK & EU GDPR, we rely on the following legal bases:

Contractual necessity
Fulfilling your mandate.
Legitimate interest
Security and communication.
Legal obligation
Tax and accounting laws.
Explicit consent
Google API access.
07

Data retention

Mandate, audit & accounting data
Retained for 10 years after the end of the contractual relationship (legal obligation for FEC, eIDAS audit trails and UK/FR tax laws).
Contact form data
Retained for 5 years.
Google API data
Tokens and cached analytics are deleted immediately upon account termination or revocation.
08

Data sharing & international transfers

We share necessary data with:

Collecting societies & payment processors

For registration of works, declaration of eligible content, and royalty transfers.

Electronic signature providers

We use Documenso for mandate signatures. Signed PDFs and certificates are retained for 10 years for legal evidence.

International transfers

We use service providers (e.g., Vercel, Clerk) located in the USA and other regions. These transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent adequacy frameworks to ensure a high level of protection.

09

Your rights (GDPR / UK GDPR)

You have the following rights:

  • Access your personal data
  • Rectification of inaccurate data
  • Erasure (right to be forgotten)
  • Data portability
  • Objection to processing
  • Restriction of processing

To exercise these rights, contact contact@claimvu.com.

Complaints

In the UK
Contact the Information Commissioner’s Office — ico.org.uk.
In the EU
Contact the CNIL (France) — cnil.fr — or your local data protection authority.
10

Security & cookies

Security

We implement technical measures, including the encryption of OAuth tokens at rest, to protect your data.

Cookies

Our website uses strictly essential cookies only for site functionality. We do not use advertising or tracking cookies.

Minors

Our services are not available to persons under 16 years of age.

11

Revocation of access

You can revoke Claimvu’s access to your Google data at any time via the Google Security Settings page.

12

Changes to this policy

We may update this Privacy Policy. Significant changes will be notified by email or via a notice on our website.

Questions about this policy?

Reach out to our team — we’ll respond within 30 days.

Scroll to Top