Privacy Policy
Last updated: 10 September 2026 · Applies to https://10mintviral.in and related apps
This Privacy Policy explains how 10MintViral (“we”, “us”, “our”) collects, uses, stores, and deletes information when you use our website and services for Instagram and YouTube creators.
1. Information We Collect
- Account details you provide (e.g. mobile number for login) and referral codes if used
- Public Instagram usernames / public YouTube channel handles you enter for analysis
- Public profile metadata and public video/reel information needed to show plans on our site
- Order and payment references processed by our payment provider (we do not store full card details)
- Basic technical logs (IP address, browser/user-agent, device type) for security and abuse prevention
- Information stored on or read from your device or browser, including cookies and similar technologies (see Cookies, local storage & device data)
We do not ask for your Instagram or YouTube password. We do not access private messages, private videos, or non-public account settings.
2. YouTube API Services — how we use YouTube data
10MintViral uses YouTube API Services (YouTube Data API v3) to retrieve public channel and video information (for example channel title, subscriber counts when public, public uploads/Shorts metadata and thumbnails) so we can display your public channel on our site and offer growth tools.
- We use an API key for public data only. We do not use YouTube OAuth to manage or upload to your YouTube account in the current product.
- We do not sell YouTube user data.
- We do not combine YouTube API data with other data sources to personally identify viewers beyond what is needed to provide our service to you.
- This API Client uses one Google Cloud project (a single API project number) to call YouTube API Services. We do not split the same client across multiple project numbers.
- Cached public channel/video data may be stored temporarily on our servers to improve performance, then refreshed or removed per our retention rules (see section 4).
- Use of YouTube data obtained via the API is also subject to the
YouTube Terms of Service
and the
YouTube API Services Terms of Service.
Google’s description of how they handle data is available here:
Google Privacy Policy.
3. How We Use Information
- To show public Instagram / YouTube profile and content insights inside 10MintViral
- To process boost orders, payments, referrals, and support requests
- To improve reliability, prevent fraud, and comply with law
4. Storage, refresh & retention of API data
Account and order records are retained while your account is active and as needed for legal, tax, or dispute reasons.
YouTube API data (public channel metadata and public video/Shorts lists obtained via YouTube Data API v3) is stored in a server-side cache so repeat visits load faster and so we stay within Google’s API quota:
- Video / Shorts list: refreshed from YouTube API Services about every 12 hours when the channel is viewed again. Stale video cache is overwritten on that refresh.
- Channel profile (title, avatar, public stats): refreshed from YouTube API Services about every 30 days when the channel is viewed again, or sooner if you trigger a manual refresh in the product.
- Deletion of cached API data: a cache row is overwritten on refresh. It is deleted when you request deletion of a specific handle (see below), or when we purge unused cache. We do not keep YouTube API data longer than needed to provide the lookup you requested.
Public Instagram lookups (not YouTube API) may be cached on a similar schedule (videos about 12 hours; profile about 15 days) and are not YouTube API data.
5. Data Deletion & Your Rights
You may request deletion of your 10MintViral account data and associated cached public profile lookups tied to your account, including stored YouTube API data.
- Use our Data Deletion Request page, or email support@10mintviral.in with subject “Delete my data”.
- Include the mobile number / account used on 10MintViral so we can verify the request. Optionally list YouTube channel handles whose cached API data you want purged immediately.
- We aim to process verified deletion requests within 30 days (sooner when possible), except data we must keep for legal/payment records.
- Deleting your 10MintViral data does not delete your Instagram or YouTube accounts — those are controlled by Meta / Google.
- After deletion, public API caches for channels you looked up may still expire on their own schedule if not tied to an account; you may request removal of a specific cached handle in your email.
- You can also clear device-stored data yourself: browser cookies for 10mintviral.in, and site data / local storage in your browser settings.
6. Revoking Google / YouTube access
10MintViral currently retrieves public YouTube data with an API key. We do not use YouTube OAuth to sign in to your Google account, upload videos, or manage your channel. In this configuration we do not receive a long-lived Google authorization token for your Google Account.
If you ever granted (or later grant) this API Client access to your Google Account / YouTube data (“Authorized Data”), you can revoke that access at any time on Google’s security settings page:
https://myaccount.google.com/connections?filters=3,4&hl=en
Revoking access at Google stops future Authorized Data from being shared with 10MintViral. To also delete data already stored on our servers, send a deletion request as described in section 5.
7. Cookies, local storage & device data
We store, access, or collect (and may allow essential service providers to store, access, or collect) information directly or indirectly on or from users’ devices, including by placing, accessing, or recognizing cookies or similar technologies on your device or browser.
- Session cookie: a first-party cookie set by our server to keep you logged in to 10MintViral (account dashboard, checkout). This is stored on your device until the session ends or you log out.
- Local storage: we may store small values in your browser’s localStorage, for example a referral code and whether you have already seen the YouTube subscribe prompt, so the same prompt is not shown on every visit.
- Technical logs: IP address, browser, and device information may be collected when you use the site (security, fraud prevention, diagnostics).
- Third parties: payment providers, hosting, and Google/YouTube (when you load YouTube-hosted thumbnails or open YouTube) may set or read their own cookies or similar technologies under their policies. See the Google Privacy Policy.
You can refuse or delete cookies and site storage in your browser settings. Blocking the session cookie will prevent login. This does not stop YouTube/Google cookies if you visit youtube.com or load YouTube resources.
8. Third-Party Services
- Google / YouTube — YouTube Data API v3 (public channel & video data)
- Payment providers — to process UPI / card payments
- Hosting / infrastructure — to run the website
Those providers process data under their own policies. See also Google Privacy Policy below.
9. Google Privacy Policy
Because we use Google APIs (including YouTube API Services), please review Google’s privacy practices:
https://policies.google.com/privacy
YouTube’s terms:
https://www.youtube.com/t/terms
10. Security
We use reasonable technical and organizational measures (HTTPS, access controls, server hardening) to protect data. No method of transmission is 100% secure.
11. Children
Our service is not directed at children under 13. We do not knowingly collect personal information from children.
12. Changes
We may update this Privacy Policy. The “Last updated” date will change when we do. Continued use after changes means you accept the updated policy.
Privacy / data requests: support@10mintviral.in
Website: https://10mintviral.in/
Related: Terms of Service · Data Deletion · Cookies · Revoke Google access
✔ No YouTube/Instagram passwords · Public data via YouTube API Services · Deletion requests supported