Privacy Policy

Trading Lab("we", "us")
Last updated: October 23, 2026

1. Who we are, what this policy covers, and notice before use

Trading Lab publishes daily market analysis videos about gold (XAUUSD) and 24/7 live streams on YouTube channels that we own, in several languages. We run an internal publishing system that uses YouTube API Services to manage these channels.

Notice before use. The description of each of our live streams links to this policy. By posting in the live chat of one of our streams you acknowledge this policy. If you do not agree, please do not post in our live chat.

Our use of YouTube API Services is subject to the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's handling of your data is described in the Google Privacy Policy (http://www.google.com/policies/privacy).

Our system connects only to YouTube channels that we ourselves own. We do not offer a service that asks third parties to sign in with their Google or YouTube accounts.

2. How we use YouTube API Services

Using the YouTube Data API v3, with OAuth authorization given by the owner of our channels, our system:

  • uploads videos and Shorts to our own channels and sets titles, descriptions, thumbnails and captions;
  • updates descriptions of our own existing videos;
  • posts one top-level comment on each of our own uploads and updates our own comments on existing videos (pinning is done manually in YouTube Studio);
  • sets up our own live streams and channel home sections (occasional, manual);
  • reads public statistics of our own videos and channels (view counts, subscriber counts) for internal dashboards;
  • reads the live chat of our own live streams, and the concurrent viewer count of those streams, so that viewer questions can be answered in the stream and abusive messages can be skipped, and occasionally posts an announcement in our own live chats (manual).

We do not collect your YouTube or Google login credentials. Sign-in takes place on Google's own pages, and only the channel owner signs in.

3. Information we access, collect and store

About channel owner authorization (our own accounts only). OAuth access and refresh tokens for our own channels, kept as server-side credentials and in local operator credential files. Publishing and analytics authorization flows request different scopes; the granted scopes are verified per credential against the functions currently used.

About our own videos and channels. Video IDs and publish status, and snapshots of view counts, subscriber counts, live concurrent viewer counts and chat message counts. These are aggregate statistics of our own channels; they do not identify viewers.

About viewers who write in our live chat. When a viewer posts a message in the live chat of one of our streams, the API returns it to us. Our system selects candidate questions to answer, and we store only those selected candidates and our processing result. We store:

  • the viewer's YouTube channel ID and public display name;
  • the text of the selected message and, where our system answers it, a short neutral paraphrase of the question and the answer given;
  • the result (answered, skipped, rate-limited) and the time at which our system processed it (our own processing timestamp, not the time the message was posted on YouTube).

Personal information in public text. Public display names and message text may contain personal information that viewers choose to write (for example a real name or an email address). Please do not post personal information in the live chat. We do not request your email address or real name, and we do not use data from YouTube API Services to build user profiles or to identify real-world individuals.

About visitors to our website. See section 7.

4. How we use the information

  • Tokens: only to perform the actions listed in section 2 on our own channels.
  • Statistics and viewer counts: only for internal reporting on the performance of our own content.
  • Live chat data: only to decide whether a question can be answered, to generate and play a spoken answer in the stream, to apply per-viewer rate limits and prevent duplicate answers, and for moderation and abuse review.

Live-chat answers are AI-generated. Dubbed video uploads are marked with the YouTube synthetic-media setting (containsSyntheticMedia=true) and include a localized disclosure in the description footer.

We do not use this data for advertising, do not use it to target viewers, and do not use it for any purpose not described here. If we ever use it in a new way, we will update this policy first.

5. Sharing, service providers and security

  • No sale. We do not sell, rent or lease any data obtained through YouTube API Services, and we do not sublicense YouTube API Services.
  • Service providers. The selected question text and the sanitized display name are processed by an AI language model service to write the answer, and the answer text is sent to a text-to-speech service to create the audio. Our database and application are hosted with cloud providers. These providers receive and process the data described above to provide hosting, answer generation and speech synthesis.
  • Public display.In a stream, a question may be shown or read aloud as a neutral paraphrase. A viewer's display name is shown only when our system judges it safe.
  • Disclosure. We do not share API Data with other third parties, except if required by law.
  • Security. Data is stored in access-restricted databases (service-role access only, not exposed to the public), transmitted over HTTPS (TLS), and access is limited to the operator.

6. Retention and deletion

  • Live chat records (viewer channel ID, display name, message text, paraphrase, answer): a daily automated job permanently deletes records that are older than 29 days, so no record is kept for more than 30 days.
  • Aggregate statistics of our own channels (view counts, subscriber counts, concurrent viewer counts, chat message counts, and daily summary snapshots): a daily automated job permanently deletes records that are older than 29 days, so none is kept for more than 30 days.
  • Video IDs and publish status of our own videos: a daily automated check re-verifies our authorization and that each recently published video still exists, and we delete data that can no longer be refreshed.
  • OAuth tokens: kept while needed for the features above. They are revoked and deleted if we stop using them.
  • Deletion requests. Any viewer can ask us to delete the data we hold about them (for example, by their YouTube channel ID or display name) by writing to kaigaifxcashback.com@gmail.com. We delete it within 7 calendar days of receiptof your request. Deleting data from our systems does not delete the original message or comment on YouTube. To remove that, use YouTube's own tools.
  • After revocation. If authorization for a channel is revoked, we stop using the token and delete data obtained under it within 7 calendar days of becoming aware of the revocation (and in any case within 30 days).

7. Cookies and similar technologies on this website

Pages of our website under a language path (for example /en/) set one first-party cookie, tlb_lead. It contains a random token (no name, email or account information). It lasts up to 90 days, and it is used to link a visit to a later click on an outbound link or to a start link of our community channel bot. We do not use advertising cookies, third-party analytics, or tracking pixels. Click records tied to this token are deleted after 90 days. You can block or delete the cookie in your browser settings. The pages that do not need it (such as this policy) are served without it.

Our YouTube videos and live streams are not embedded on this site. YouTube's own cookies and tracking on youtube.com are governed by the Google Privacy Policy.

8. Third-party content and advertising

Our website does not display third-party advertising or third-party content. We do not insert ads through YouTube API Services.

9. Revoking access

Because only we, the channel owner, authorize our system, the following applies to our own accounts. If you have authorized any application that works with your Google account, you can review and revoke its access at any time at https://security.google.com/settings/security/permissions. In addition, you can ask us to delete your data as described in section 6.

10. Contact, questions and complaints

Questions, complaints or requests about this policy or about your data: kaigaifxcashback.com@gmail.com. We aim to reply within 7 days.

11. Links and changes

We may update this policy. The date at the top shows the latest version. If we change how we use data from YouTube API Services, we will update the policy before the change takes effect.