Privacy policy
Rhino Labs dashboards. Last updated 3 November 2026.
Who we are
Rhino Labs Limited is a New Zealand company based in Auckland. We build private reporting dashboards for our clients. This policy explains what data those dashboards read from Google, including YouTube, and how we handle it. It follows the New Zealand Privacy Act 2020.
What we read from Google
When a client's channel owner connects their YouTube channel, they give the dashboard read-only access to YouTube Analytics reports for that channel. We read:
- Views, watch time, and subscribers gained and lost, by day.
- The same figures split by content type, for example Shorts and regular videos.
- Public channel figures: subscriber count, total views and number of videos.
- The channel's name and ID, to check the owner connected the right channel. If it is a different channel, we withdraw the access straight away and keep nothing.
These are channel totals. They do not identify anyone who watched. We do not read email, contacts, files, comments, or anything else in the Google account. We cannot upload, edit or delete anything on the channel.
How we use it
Only to show the client their own channel's trends on their private dashboard. We do not use Google data for advertising. We do not sell it. We do not use it to train or improve AI models. We do not share it with anyone outside the client and our own team, except where the law requires it.
Rhino Labs' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who can see it
The client's authorised staff, after signing in through their own organisation's sign-in. And the Rhino Labs staff who build and support the dashboard. No one else.
How we store it
Daily totals are stored on Amazon Web Services in Sydney, Australia. Data is encrypted when stored and when it moves between systems. The access Google grants is stored encrypted on our servers. It never reaches anyone's browser, and it never appears in our logs.
How long we keep it
For as long as we provide the dashboard. When the engagement ends, or whenever the client asks, we delete all stored data within 14 days and confirm in writing.
Withdrawing access
The channel owner can withdraw access at any time from their Google Account, under Third-party connections. The dashboard stops reading new figures straight away. Ask us and we will delete what we already hold.
Contact
Questions about this policy, or requests to see or delete data: [email protected].
Rhino Labs Limited, Auckland, New Zealand.