Data Sovereignty

Privacy Policy

Effective Date: 7/14/2026

1. Data Collection

Choice MCA collects institutional data necessary for the operation of the Multi-Client Account. This includes storefront URLs, product IDs, and inventory status. We do not store individual customer payment details at the MCA anchor level; these are handled by the Choice Bank's secure payment processors.

2. Merchant API Usage

Data is synchronized with Google Merchant Center via the Content API v2.1. This data sharing is strictly regulated to enable product discovery and Shopping Ads. Your storefront information is inherited by the MCA to ensure "Gold Standard" verification.

3. Institutional Security

We employ industry-leading encryption and GCP Identity Platform security to protect the data exchange between choicecmshub.com and choicemca.com. Access is limited to authorized network administrators only.

4. Google API Services & YouTube Data

Choice MCA uses the YouTube Data API to verify creator identities and provide AI-driven product recommendations. Choice MCA's use and transfer to any other app of information received from Google APIs will strictly adhere to the Google API Services User Data Policy, including the Limited Use requirements. Users can revoke our access to their data via the Google security settings page at any time.

5. Google Data Accessed & Usage

Data Accessed: Our application requests access to YouTube video transcripts and basic YouTube channel analytics (such as subscriber count). Data Usage: The video transcripts are processed exclusively by our internal AI Scanner to match contextually relevant products from our ChoiceMCA Shopify catalog to the creator's video. Channel analytics are used solely to verify MCN eligibility (e.g., meeting the 1,000 subscriber threshold). This data is never sold to third parties and is stored securely in our Firebase backend.

6. Data Retention & Deletion (Opt-Out)

Users maintain full control over their data. You can revoke our access to your Google/YouTube data at any time via the Google Security Settings page. Furthermore, you may request the complete deletion of your account and all associated data from our servers by following the instructions on our Data Deletion page (portal.choicemca.com/data-deletion). Upon request, all personal data, API tokens, and metrics are scrubbed within 30 days.

Institutional Trust Document #GMC-992-PRIV