Privacy Policy

Data Accessed

Our application accesses specific Google user data to perform its functions:

• Basic Profile Information: We access your basic profile information (name, email, avatar) to identify your session and display your connected account status.
• YouTube Data API (upload scope): We request the https://www.googleapis.com/auth/youtube.upload scope. This allows the application to upload video files that you provide directly to your YouTube channel.
• YouTube Channel Statistics: We access read-only statistics (view counts, video counts) to display a dashboard of your channel's performance within our tool.

Data Usage

We use the data we access for the following specific purposes:

• Authentication: To verify your identity and maintain a secure session while you use the tool.
• Video Uploading: To transmit the video files, titles, descriptions, and metadata you provide directly to the YouTube API for publishing on your channel.
• Dashboard Display: To show you a summary of your uploaded videos and channel performance stats within the Elvoro Tools interface.

We DO NOT use your Google user data for advertising, surveillance, or developing machine learning models.

Data Sharing

Our application's data sharing practices are strictly limited:

• Sharing with Google/YouTube: The video content and metadata you choose to upload is sent directly to Google's YouTube API services to fulfill your request to publish content. This is the core function of the application.
• No Third-Party Sales: We do not sell, trade, or transfer your Google user data to any external third parties.
• No External Sharing: Your access tokens and personal information are not shared with any other entities or services.

Data Storage & Protection

We implement robust security measures to protect your data:

• Ephemeral Storage: Video files you upload are stored temporarily on our processing server solely for the duration of the upload to the target platform (e.g., YouTube). Once the API transfer is complete, the file is immediately permanently deleted from our system.
• Token Security: OAuth access tokens and refresh tokens are stored securely using strong encryption (AES-256). The encryption keys are managed securely and are not accessible to unauthorized personnel.
• Secure Transmission: All data transmission between your browser, our application, and Google's APIs occurs over HTTPS (TLS/SSL) encrypted connections.

Data Retention & Deletion

Our data retention policies are designed to minimize data holding:

• Video Content: We DO NOT retain your video content. It is deleted immediately after the upload process completes or fails.
• User Data: We retain your authentication tokens only as long as you keep your account connected to our service to facilitate future uploads without re-login.
• Deletion Request: You can revoke our application's access at any time via your Google Account Permissions settings.
• Account Disconnect: You may also click the "Disconnect" or trash icon next to your account in our dashboard. This action immediately deletes your stored access tokens and session data from our database.