Privacy Policy

Last updated: 9 September 2026

1. Who We Are and Who Controls Your Data

Strivios is a gaming influencer marketing agency and creator network operated by Double vision, MB, a company established in Lithuania.

Data controller:

Double vision, MB
Company code: 306318735
VAT ID: LT100016521419
Registered office: Žeimenos g. 82D-24, LT-49327 Kaunas, Lithuania
Trading name: Strivios
Privacy contact: andrius@strivios.com

In this Privacy Policy, “Strivios”, “we”, “us” and “our” refer to Double vision, MB operating under the Strivios brand.

Double vision, MB is the controller of personal data described in this Privacy Policy unless expressly stated otherwise.

---

2. Scope of This Privacy Policy

This Privacy Policy explains how we collect, use, disclose, store and otherwise process personal data when you:

• visit the Strivios website;
• create or use a Strivios creator account or dashboard;
• join or interact with the Strivios creator network;
• connect a YouTube account or another supported third-party service;
• are considered or presented for an influencer marketing campaign;
• appear in a creator shortlist, roster or private brand deck;
• access a private creator deck as a brand, agency or client;
• communicate or enter into a business relationship with Strivios;
• receive or pay an invoice relating to Strivios services; or
• otherwise interact with Strivios.

This Policy applies to creators, representatives of brands and agencies, prospective clients, suppliers, contractors, business contacts and website visitors.

---

3. Categories of Personal Data We Process

3.1 Creator identity and profile information

We may process:

• name, professional name or display name;
• creator/channel name, handle or username;
• profile image;
• country, language and time zone;
• creator category, niche or content type;
• social media and channel links;
• creator biography and other profile information;
• notes or preferences provided by the creator;
• campaign interests and availability.

3.2 Contact information

We may process:

• email address;
• telephone number;
• business or correspondence address;
• shipping details where products need to be delivered for a campaign;
• representative, manager or agency contact information.

Shipping addresses and private telephone numbers are not included in creator decks unless there is a specific lawful reason and appropriate authorisation to disclose them.

3.3 Commercial and campaign information

We may process:

• creator rates and pricing;
• requested or agreed deliverables;
• campaign proposals;
• availability;
• negotiations;
• campaign approvals;
• campaign status;
• content links;
• campaign performance information;
• contracts and related communications;
• payment and invoicing information.

3.4 Brand, agency and business contact information

Where you represent a company, brand, agency or other organisation, we may process:

• your name;
• job title;
• company name;
• business email address;
• business telephone number;
• billing/contact address;
• correspondence with Strivios;
• campaign requirements and commercial discussions.

3.5 Billing and payment information

Where payments, invoices or commercial transactions are involved, we may process:

• legal name or company name;
• billing address;
• company registration number;
• VAT or tax identification number;
• invoice information;
• transaction amount and currency;
• payment status;
• transaction and payment references;
• limited payment-related information provided by our payment providers.

Payments may be processed using third-party payment providers such as Stripe.

Strivios does not normally receive or store complete card credentials or full online-banking credentials processed directly by a payment provider.

3.6 Private deck access information

When a brand, agency or prospective client accesses a private creator deck or shortlist, we may process:

• name;
• email address;
• company;
• access-token or link identifier;
• date and time of access;
• IP address;
• browser information;
• device information;
• security and access logs;
• interactions with the deck where such functionality is enabled.

This information may be used to protect confidential information, prevent unauthorised access and understand legitimate engagement with creator proposals.

3.7 Website and technical information

When you use our website or Platform, we may process technical data such as:

• IP address;
• browser type and version;
• operating system;
• device type;
• pages or features accessed;
• date and time of access;
• referring page;
• server and security logs;
• session or authentication identifiers.

3.8 Communications

When you communicate with us, we may process:

• your name;
• email address;
• telephone number;
• company;
• message content;
• attachments;
• previous correspondence.

---

4. Information We Obtain from Other Sources

Not all personal data is collected directly from the individual concerned.

We may obtain professional or creator-related information from:

• creators themselves;
• creators’ managers, representatives or agencies;
• brands, agencies and business partners;
• public social-media profiles and public creator/channel pages;
• publicly available business information;
• authorised third-party integrations;
• YouTube API Services;
• referrals and introductions.

Where we use publicly available information, we limit its use to information reasonably relevant to creator discovery, business development, campaign matching or related legitimate professional purposes.

We do not use unauthorised scraping of YouTube or Google services.

Where the GDPR requires us to provide information directly to an individual whose information was obtained from another source, we will do so within the period required by applicable law unless a lawful exception applies.

---

5. YouTube and Google API Data

5.1 Use of YouTube API Services

Strivios uses YouTube API Services, which may include:

• YouTube Data API;
• YouTube Analytics API; and
• other YouTube API functionality that we may lawfully integrate in the future.

A creator’s non-public YouTube information is accessed only after the creator has expressly authorised Strivios through Google’s OAuth authorisation process.

Strivios’ use of YouTube API Services is also subject to the applicable:

• YouTube Terms of Service;
• YouTube API Services Terms of Service;
• YouTube API Services Developer Policies;
• Google Privacy Policy;
• Google API Services User Data Policy; and
• Google OAuth policies.

Users connecting YouTube must also comply with the applicable YouTube Terms of Service.

5.2 OAuth scopes

Depending on the functionality enabled, Strivios may request read-only permissions such as:

youtube.readonly

and

yt-analytics.readonly

These permissions allow Strivios to read permitted channel and analytics information. They do not allow Strivios to upload, edit or delete YouTube content on the creator’s behalf.

We request only permissions reasonably necessary for the relevant Strivios functionality.

5.3 YouTube information we may access

Subject to the creator’s authorisation and the permissions made available by YouTube, we may access information such as:

Channel information

• channel ID;
• channel name or handle;
• channel URL;
• avatar or thumbnail;
• channel metadata.

Channel and content statistics

• subscriber count;
• video count;
• channel or video views;
• upload information;
• likes, comments or other API-provided engagement information.

YouTube Analytics information

• views;
• watch-time information;
• average view duration where provided;
• subscribers gained or lost;
• audience geography;
• audience age ranges;
• audience gender distributions;
• device-type information;
• other analytics made available through the authorised scope.

Audience analytics are generally aggregate channel-level statistics. Strivios does not receive information identifying individual YouTube viewers through these analytics features.

5.4 Purpose of YouTube data processing

Authorised YouTube information may be used to:

• show creators information about their connected channel;
• maintain creator profiles;
• help creators manage their Strivios profile;
• evaluate potential campaign fit;
• support creator discovery;
• prepare campaign recommendations;
• provide campaign-related functionality requested by the creator; and
• operate, secure and maintain the Strivios platform.

Strivios does not use Google or YouTube user data for unrelated advertising, behavioural advertising, data brokerage, credit scoring or the training of general-purpose artificial-intelligence models.

5.5 Sharing YouTube analytics with brands

Public YouTube information may be used in creator recommendations where lawful.

Non-public or authorised YouTube Analytics data obtained through a creator’s OAuth authorisation will only be disclosed to brands, agencies or clients where the creator has been clearly informed of that use and has provided the authorisation or consent required for such disclosure.

We do not provide brands with:

• OAuth access tokens;
• refresh tokens;
• Google login credentials;
• access to the creator’s Google account; or
• unrestricted access to raw authenticated API responses.

5.6 Google Limited Use

Strivios’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is not sold.

Access to Google user data is limited to authorised purposes and personnel and is subject to applicable Google requirements and applicable law.

5.7 Storage and refreshing of YouTube API Data

We store YouTube API Data only in accordance with YouTube’s applicable Developer Policies.

Where YouTube permits authorised Analytics API data or API statistics to be retained for longer periods, Strivios will periodically verify that the creator’s authorisation remains valid.

Where YouTube requires particular API Data to be refreshed or deleted within 30 days, we will refresh or delete that information accordingly.

Non-authorised YouTube API statistics are not retained beyond the period allowed under YouTube’s policies unless they are lawfully refreshed.

Where Strivios displays historical statistics, they are identified in context as historical information where appropriate.

5.8 Derived YouTube metrics

Strivios will not create metrics derived from YouTube API Data where doing so is prohibited by YouTube’s Developer Policies.

Where YouTube has expressly authorised Strivios to use additional derived metrics or enhanced data-storage functionality, such functionality will be used only within the scope of that approval.

5.9 Disconnecting and deleting YouTube data

Creators may revoke Strivios’ YouTube access at any time through:

• supported functionality within the Strivios dashboard; or
• their Google account’s third-party application/access settings.

Following disconnection or revocation, Strivios will stop requesting new authorised YouTube data.

Where a creator requests deletion of stored YouTube user data or deletes their Strivios account, applicable YouTube user data will be deleted as soon as reasonably possible and, where required by YouTube’s Developer Policies, within seven calendar days.

OAuth tokens associated with the connection will be deleted or invalidated as appropriate.

Deleting information from Strivios does not delete information stored by YouTube. Creators wishing to delete content or information from YouTube itself must use YouTube or another authorised YouTube application.

Current YouTube policies require re-verification of certain authorisation at least every 30 days and deletion of stored user data as soon as possible and within seven days following an applicable deletion request.

---

6. Why We Process Personal Data and Our Legal Bases

Depending on the circumstances, we rely on one or more of the following legal bases under Article 6 GDPR:

Where we rely on legitimate interests, those interests may include:

• operating and protecting the Strivios business;
• identifying suitable creators for relevant campaigns;
• maintaining professional B2B relationships;
• securing confidential creator decks;
• preventing fraud or misuse;
• improving internal business operations; and
• establishing or defending legal claims.

We consider the impact of the processing on affected individuals and do not rely on legitimate interests where the individual’s rights and interests override ours. GDPR expressly requires this balancing when relying on legitimate interests.

---

7. When Providing Data Is Required

Some information is necessary for us to provide particular services.

For example:

• account information may be required to create a creator account;
• contact details may be required to communicate regarding a campaign;
• legal and billing information may be required to enter into a contract or issue an invoice;
• shipping information may be required where campaign products are sent to a creator.

If required information is not provided, we may be unable to provide the relevant service or complete the relevant transaction.

Connecting a YouTube account is voluntary unless a particular optional Strivios feature specifically requires that connection.

---

8. Creator Decks and Disclosure to Brands

Strivios may prepare private creator shortlists, rosters or decks for brands, agencies and prospective clients.

Depending on the context and creator permissions, a deck may contain:

• creator name or channel name;
• channel and social-media links;
• country and language;
• content niche;
• subscriber or follower information;
• public performance metrics;
• campaign-relevant analytics;
• indicative or proposed pricing;
• availability;
• other professional campaign information.

We do not normally include creators’ private home addresses, personal telephone numbers, private payment information or authentication credentials in brand decks.

Non-public Google/YouTube authorised data is subject to the additional restrictions described in Section 5.

Recipients of private decks are expected to use the information only for legitimate campaign evaluation and related business purposes.

---

9. Who We Share Personal Data With

We do not sell personal data.

We may disclose personal data where necessary to the following categories of recipients:

Brands, agencies and prospective clients

Creator-related information may be disclosed for legitimate campaign evaluation and collaboration purposes, subject to the restrictions described above.

Technology and service providers

We use third-party providers to operate our services. Current principal providers may include:

• Hostinger — website hosting and infrastructure;
• Google Workspace — business email and productivity services;
• Google / YouTube — OAuth authentication and YouTube API Services;
• Stripe — invoicing, payment collection and payment infrastructure.

Depending on the particular processing activity, a service provider may act as our processor or may act as an independent controller for certain purposes under its own privacy terms.

Professional advisers

We may disclose relevant information to accountants, lawyers, auditors, insurers or other professional advisers where reasonably necessary.

Authorities and legal recipients

We may disclose information where required by law, court order, tax requirements or a lawful request from an authorised public authority.

Corporate transactions

If all or part of our business is reorganised, sold or transferred, relevant personal data may be disclosed as part of that transaction subject to appropriate confidentiality and data-protection requirements.

---

10. International Data Transfers

Some of our providers or recipients may process personal data outside Lithuania or outside the European Economic Area.

Where GDPR transfer restrictions apply, we use an appropriate legal mechanism, which may include:

• an adequacy decision adopted by the European Commission;
• the EU-U.S. Data Privacy Framework where applicable to an eligible and certified recipient;
• Standard Contractual Clauses approved by the European Commission; or
• another lawful transfer mechanism available under applicable data-protection law.

Where required, supplementary safeguards may also be applied.

You may contact us for further information regarding safeguards relevant to a particular transfer.

---

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, taking into account legal, contractual, security and operational requirements.

Typical retention periods are:

Lithuanian VAT rules require relevant VAT invoices to be retained for 10 years from issuance.

Where several retention periods could apply, we retain the information for the longest period that is legally necessary.

We may retain limited information after a deletion request where required by tax, accounting, fraud-prevention or other mandatory law, or where necessary for the establishment, exercise or defence of legal claims.

---

12. Cookies and Similar Technologies

Strivios may use cookies, local storage and similar technologies.

Essential technologies may be used for purposes such as:

• authentication;
• security;
• session management;
• saving user preferences;
• private deck access;
• basic website functionality.

Where analytics, advertising or other non-essential technologies require consent under applicable law, they will be used only after the required consent has been obtained.

More information about the technologies currently used by Strivios is provided in our Cookie Policy and cookie-consent interface where applicable.

---

13. Direct Marketing and Business Communications

We may communicate with creators, brands and other business contacts regarding:

• existing relationships;
• requested services;
• campaign opportunities;
• relevant collaboration opportunities;
• Strivios services.

Marketing communications are sent only where permitted under applicable law.

Where applicable, every marketing communication will provide an appropriate method to opt out.

You may object to direct marketing at any time by contacting andrius@strivios.com or by using the unsubscribe mechanism provided in the relevant communication.

Once a valid objection to direct marketing is received, we will stop processing your personal data for that purpose.

---

14. Your Data-Protection Rights

Subject to the conditions and limitations of applicable law, you may have the right to:

• obtain confirmation of whether we process your personal data;
• access your personal data;
• correct inaccurate or incomplete information;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• object at any time to processing for direct marketing;
• receive certain personal data in a portable format;
• request transmission of eligible data to another controller where technically feasible;
• withdraw consent at any time where processing is based on consent; and
• lodge a complaint with a competent supervisory authority.

Withdrawal of consent does not affect processing lawfully carried out before withdrawal.

We may ask for information reasonably necessary to verify your identity before acting on a request.

We generally respond within the period required by GDPR, which is normally one month, subject to lawful extensions in appropriate cases.

To exercise your rights, contact:

andrius@strivios.com

The GDPR provides, among other things, rights of access, portability, objection and protection against certain solely automated decisions.

---

15. Complaints

You may lodge a complaint with the data-protection authority in the country where you live or work or where you believe a data-protection infringement occurred.

Our lead Lithuanian supervisory authority is:

State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija – VDAI)
L. Sapiegos g. 17
LT-10312 Vilnius
Lithuania

You may contact us first at andrius@strivios.com, but doing so does not affect your right to complain directly to a supervisory authority.

The above VDAI contact details are current as of September 2026.

---

16. Automated Decision-Making and Profiling

Strivios may use statistics, filters, analytics or internal tools to assist in identifying potentially suitable creators or campaigns.

However, Strivios does not currently make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals within the meaning of Article 22 GDPR.

Campaign selections, creator approvals and commercial decisions involve human judgement.

If we introduce relevant solely automated decision-making in the future, we will provide the additional information and safeguards required by applicable law.

---

17. Special Categories of Personal Data

Strivios does not intentionally request special-category personal data such as medical information, religious beliefs, political opinions or biometric identification data as part of normal Platform use.

Please do not provide such information unless it is genuinely necessary and we have requested it on an appropriate lawful basis.

Aggregate audience demographic information provided by YouTube Analytics is processed as channel-level analytics and is not intended to identify individual viewers.

---

18. Children and Minors

The Strivios creator dashboard and account-based services are not intended for children under 16 years of age.

We do not knowingly permit children under 16 to connect Google/YouTube accounts to Strivios.

Where a person aged between 16 and 18 participates in a commercial collaboration, additional parental or legal-authorisation requirements may apply depending on applicable law and the nature of the agreement.

If we become aware that personal data relating to a child has been processed contrary to applicable law, we will take appropriate steps to delete or otherwise lawfully address that information.

---

19. Security

We implement technical and organisational measures appropriate to the nature of the information and risks involved.

Measures may include:

• access controls;
• authentication controls;
• encrypted communications;
• protected storage of OAuth credentials and tokens;
• restricted administrative access;
• server and security monitoring;
• backups and recovery measures;
• procedures for handling security incidents.

Access to personal data is limited to persons who reasonably require access for legitimate business purposes.

No internet-based system can guarantee absolute security.

Where a personal-data breach occurs, we will take the actions and provide notifications required by applicable data-protection law.

---

20. Third-Party Websites and Services

The Strivios website or Platform may contain links to external websites, creator channels, social networks or third-party services.

Those services operate under their own privacy policies and terms. Strivios is not responsible for the privacy practices of independent third parties.

The use of Google and YouTube functionality is additionally subject to Google’s and YouTube’s own privacy policies and terms.

---

21. Changes to This Privacy Policy

We may update this Privacy Policy where necessary because of:

• changes to our services;
• new features or integrations;
• changes to how personal data is processed;
• changes in applicable law;
• changes to third-party API requirements; or
• security or operational developments.

The updated version will be published together with a revised “Last updated” date.

Where a material change affects how we use personal data, we will provide additional notice where required.

If a change affects the scope or purposes for which authorised Google/YouTube user data is processed, creators will be notified and asked to provide renewed authorisation or consent where required before the new use begins.

---

22. Contact

For privacy questions, requests or complaints:

Double vision, MB
Company code: 306318735
VAT ID: LT100016521419
Trading name: Strivios
Registered office: Žeimenos g. 82D-24, LT-49327 Kaunas, Lithuania

Privacy email: andrius@strivios.com