Privacy policy
1. Introduction
CoStudio Pte Ltd (“CoStudio”, “we”, “our”, “us”) provides currents — an audience intelligence product for newsrooms and publishers, built on public trending data from social video.
This policy explains what information we collect when you use currents, how we use it, and how long we keep it. It also explains how we handle the public video data the product is built on.
We adhere to:
- Singapore Personal Data Protection Act (PDPA)
- The YouTube API Services Terms of Service and Developer Policies
- The data processing terms of our AI model providers
- Industry best practices for SaaS data security
By using currents, you agree to the practices described here and to our Terms of Use.
2. What we never ask for
currents is a read-only product built on public data. It is worth stating plainly what that rules out:
- We do not ask you to connect a YouTube, Google or social account.
- We hold no OAuth tokens and request no authorization scopes.
- We do not read any private or channel-owner analytics, and we cannot see data about a channel that its owner has not made public.
- We do not access, collect or store any YouTube or Google user data about you. What YouTube API Services return to us is public video data only.
Because we never obtain authorized access to anyone's account, there is nothing for you to disconnect and no access for you to revoke.
3. Data we collect
We collect the minimum needed to run the product.
3.1 Information you provide
- Account information: name, email address, password (stored only as a hash).
- Market preference: the country whose trending data your account is scoped to.
- Messages and prompts you enter into the product's chat.
3.2 Automatically collected information
- Device information, browser type, IP address and timestamps.
- Usage data: pages viewed, queries run, feature usage.
- Crash logs and diagnostics.
- Cookies and browser storage, as described in section 4.
3.3 Public video data
The product's analysis is built from publicly available information about trending videos — view counts and other public statistics, titles, channel names, categories, and the text of publicly posted comments. This data describes public videos, not you. See section 5 for how we obtain and retain it.
4. Cookies and similar technologies
currents stores and reads a small amount of information on your device. All of it is needed to run the product; none of it is used for advertising.
4.1 What we place on your device
- Session cookie: keeps you signed in. It stays on your device until you sign out or it expires.
- Security cookie: protects forms against cross-site request forgery.
- Browser local storage: remembers your light or dark theme choice. It never leaves your browser.
We do not use advertising cookies, third-party analytics trackers or cross-site tracking, and we do not allow third parties to serve advertisements in currents.
4.2 Third parties your browser contacts
When a page loads, your browser fetches some resources directly from third parties, who receive your IP address and browser details as a result and handle them under their own policies:
- YouTube and Google: video thumbnails are loaded from YouTube's servers and fonts from Google Fonts. Links to videos open on youtube.com, which sets its own cookies under the Google Privacy Policy.
- Script libraries: open-source interface libraries are loaded from the jsDelivr and unpkg content delivery networks.
4.3 Your choices
You can block or delete cookies in your browser settings. The session and security cookies are required: without them you cannot sign in.
5. YouTube API Services
currents uses YouTube API Services to obtain public information about trending videos. By using currents you are also bound by the YouTube Terms of Service, and information Google collects is handled under the Google Privacy Policy. The developer rules we operate under are the YouTube API Services Terms of Service and the YouTube API Services Developer Policies.
How we handle that data:
- We access it with an application API key against public endpoints only. No user authorization is involved.
- Stored video text — titles, descriptions, channel names and comment text — is refreshed or deleted within 30 calendar days, as the developer policies require.
- Where we show a figure recorded on an earlier day, the surface states the date it was measured on, so a past number is never presented as a current one.
- We do not sell YouTube data, and we do not use it for advertising or marketing targeting.
6. How we use your data
6.1 Provide the product
- Show trending and audience analysis scoped to your market.
- Answer your questions in chat, including running queries against the public trending data on your behalf.
- Keep your chat history available to you.
6.2 Operate and improve the service
- Detect usage anomalies and diagnose faults.
- Improve analysis quality and feature performance.
6.3 Security and anti-abuse
- Prevent misuse, abuse and unsafe activity.
- Enforce our Terms of Use and our obligations to upstream providers.
6.4 Communication
- Account, onboarding and product update messages.
- Security alerts.
You can opt out of non-essential email at any time.
7. Data sharing and disclosure
7.1 Within CoStudio
Inside CoStudio, your account information and chat history are accessible only to the staff who need them to operate, secure and support the product, under role-based access controls.
7.2 Third-party processors
Outside CoStudio, we share data only with vendors who help us run the product:
- Google Cloud Platform — hosting and storage
- AI model providers — to generate analysis and chat responses
- Sentry — error tracking
- Brevo — transactional email
All vendors are bound by data processing terms and hold industry-standard certifications.
7.3 Chats you choose to share
If you turn on sharing for a chat, anyone who has its link can read that conversation without signing in. Chats are private unless you share them.
7.4 No training use
We do not use your data to train any AI model. We only use model providers whose terms prohibit using data sent through their API to train their models.
7.5 Legal requirements
We may disclose data where required to comply with applicable law or a lawful request, to enforce our terms, or to detect and prevent fraud, security threats or abuse. We do not accept broad or unnecessary data requests.
8. Data retention and deletion
8.1 How long we keep data
- Account data: retained until your account is deleted.
- Chat messages: retained so your history is available, until you ask us to delete them or your account is deleted.
- Public video text from YouTube API Services: refreshed or deleted within 30 calendar days.
- Diagnostics and logs: retained on a rolling short-term basis for troubleshooting.
8.2 Deleting your data
To delete your stored data, email hello@currentsplatform.com from the address your account is registered under and tell us what you want removed — your whole account, or specific chats. We will delete your account information and chat history and confirm to you once it is done, within 30 days of your request.
8.3 Revoking access via your Google Account
currents does not access or use authorized data from your Google or YouTube account, so it does not appear among the apps connected to your Google Account and there is no access for you to revoke. You can review and remove the access any third-party app has to your Google Account at any time on the Google security settings page: https://myaccount.google.com/connections?filters=3,4&hl=en.
9. Your rights
You have the right to access your data, request correction, request deletion, export your data, and file a complaint with the PDPC (Singapore).
To exercise these rights, email hello@currentsplatform.com.
10. Data security
- Encryption in transit and at rest
- Role-based internal access controls
- Secrets held in a managed secret store, never in source
- Automated backups
- Continuous monitoring and audit logs
No system is completely secure, but we follow industry standards for products of this kind.
11. International data transfers
We may process data in Singapore, the United States, or any region where our cloud providers operate. Transfers comply with PDPA cross-border rules and contractual safeguards.
12. Children's privacy
currents is a professional tool, not intended for children under 13 (or the applicable local minimum age). We do not knowingly collect data from minors.
13. Changes to this policy
We may update this Policy; the date above reflects the current version, and material changes will be notified through the Services.
14. Contact us
For questions, requests or complaints about this policy or our privacy practices:
- Email: hello@currentsplatform.com
- Company: CoStudio Pte Ltd (UEN 202127467N)
- Address: 68 Circular Road, #02-01, Singapore 049422