Privacy notice

Information we handle

We handle contact and company information supplied for a demo; workspace identities, roles, configuration, product context, approved content, integration metadata, usage records, billing references, support communications, transactional email delivery and bounce status, and security logs required to provide the contracted service. Authentication and invitation email links are sent without open or click tracking.

Why we use it

We use information to qualify and respond to requests, configure and operate contracted workspaces, enforce access and entitlements, provide support, protect the service, reconcile billing, and meet legal obligations. We do not sell personal information.

Tenant boundaries and providers

Workspace data is scoped to the contracted company and products. Providers receive only the information needed for enabled services. The current provider categories and change process are described on the subprocessors page and in the applicable order form or DPA. ZeptoMail delivers transactional messages; Zoho Mail receives replies to Demandory business and support addresses.

Your choices and requests

Workspace administrators control invitations, product access, integrations, and permitted exports. Privacy requests may be sent to [email protected]. We may need to verify identity and company authority before acting.

Optional YouTube connection

Updated 24 October 2026.

If an authorized workspace administrator connects a YouTube channel, Demandory requests permission to view that channel and upload videos. We obtain the channel ID and title from YouTube and store a Google refresh token with that channel identity in an encrypted, product-scoped credential. We use the connection to verify the selected channel, upload and schedule authorized videos, and read their upload and publication status. On the customer's instruction, we send video files, titles, descriptions, thumbnails, tags, and scheduled publication times to YouTube. We do not sell YouTube account data or use it for advertising.

An authorized administrator can remove the product credential in Demandory settings. The Google account holder can also revoke access in Google Account permissions. Publication records and audit history follow our retention and deletion noticeand the applicable customer agreement. Google's own handling of data is described in the Google Privacy Policy.