Privacy policy

Last updated: 22 July 2026

RiseWorks Media, PBC (“RiseWorks,” “we,” “us”), a Delaware public benefit corporation, operates riseworks.org and the RiseWorks client services. This Privacy Policy explains what personal information we collect through riseworks.org, how we use and share it, and the rights you have.

Information We Collect

When you visit RiseWorks.org, we may collect information you voluntarily provide through contact forms, newsletter signups, and partnership inquiries. This includes your name, email address, organization name, and any message content you submit.

We also automatically collect certain technical information through cookies and similar technologies, including your IP address, browser type, device information, and pages visited.

How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and partnership requests
  • Send newsletters and updates you've opted into
  • Improve our website and services
  • Analyze website traffic and usage patterns
  • Comply with legal obligations

Where the GDPR or UK GDPR applies, we rely on your consent (for marketing and analytics), our legitimate interests (operating and improving the site), and compliance with legal obligations.

Google API Services

RiseWorks integrates with Google API Services to power the YouTube connector and scheduling features in our client portal at app.riseworks.org. When an authorized member of your organization connects a Google account, we request the following permissions and use each one for the purpose described:

  • View your YouTube channel (youtube.readonly): We read your channel details and the list of videos on it — titles, descriptions, thumbnails, and publish dates — to build your content library and show what is live on your channel.
  • View YouTube Analytics (yt-analytics.readonly): We read performance data for your channel and videos (views, watch time, traffic sources, audience demographics) to show performance insights and benchmarks inside the portal.
  • Manage your YouTube videos (youtube.force-ssl): We upload finished videos to your channel, set their titles, descriptions, and thumbnails, and update that metadata when someone on your team edits it later. Every upload and every edit begins with an explicit action by a signed-in member of your organization inside the portal.
  • Google Calendar: We access your calendar availability (free/busy information) and create calendar events for scheduled production sessions.

We store Google user data encrypted in transit and at rest, and we keep it only while your connection is active. You can disconnect a channel inside the portal, or revoke access at myaccount.google.com/permissions, and syncing stops as soon as access is revoked. We delete stored Google user data within 30 days of a deletion request to privacy@riseworks.org.

We use Google user data solely to provide these features to your organization. We do not sell it, we do not use it for advertising, and we do not use it to develop, improve, or train generalized artificial intelligence or machine learning models.

RiseWorks's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Our platform uses YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service, and the Google Privacy Policy applies to Google's handling of your data.

Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties, and we do not share it for cross-context behavioral advertising. We share personal information only with service providers (“subprocessors”) who process it on our behalf under contract — for hosting, analytics, email, and scheduling — and where required by law. Our current subprocessor list and Data Processing Addendum are available on request at privacy@riseworks.org. For the security and subprocessor detail behind our StoryOS product, see the StoryOS Trust & Security page.

Data Security

We implement encryption in transit and at rest, access controls, and a documented security program to protect your personal information. No method of transmission over the Internet or electronic storage is completely secure, but we notify affected individuals and regulators of a personal-data breach as required by law. Enterprise customers can request our Data Processing Addendum, which sets out these commitments contractually.

Cookies

Our website uses cookies to enhance your browsing experience and analyze site traffic. You can choose to disable cookies through your browser settings, though this may affect some website functionality.

Your Rights

You have the right to access, correct, delete, and port your personal information, and to object to or restrict certain processing. You may also opt out of receiving marketing communications at any time by using the unsubscribe link in our emails or contacting us directly.

EEA / UK / Switzerland (GDPR, UK GDPR). You may withdraw consent at any time and lodge a complaint with your local supervisory authority. Where we transfer data internationally, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

California (CCPA/CPRA). You have the right to know, access, delete, and correct your personal information, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under California law, and we will not discriminate against you for exercising your rights.

To exercise any of these rights, contact us at privacy@riseworks.org.

Children's Privacy

Our website is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "last updated" date.

Contact Us

This policy is issued by RiseWorks Media, PBC. For general questions, contact hello@riseworks.org; for privacy requests, contact privacy@riseworks.org.