Privacy Policy
Last updated: 29 September 2026
Social Publisher is an internal tool operated by Sarthak-Jain ("we"). Only our authorized staff can sign in. It is used to schedule and publish our own videos to our own Instagram and YouTube accounts.
YouTube API Services
Social Publisher uses YouTube API Services to upload videos to YouTube channels that our staff connect. By connecting a YouTube channel, you agree to the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy.
Information we access and store
- Staff accounts: the email address used to sign in.
- YouTube (with your permission): your channel ID and channel name, read with the
youtube.readonlyscope, and the ability to upload videos with theyoutube.uploadscope. We store the channel ID, the channel name (refreshed at least every 30 days), OAuth tokens, and the IDs of videos this tool uploaded. - Instagram (with your permission): your Instagram professional account ID and username, and the ability to publish Reels. We store the account ID, username, an access token, and the IDs of media this tool published.
- Content you schedule: uploaded video files, titles, descriptions, captions, and schedule times.
How we use it
Only to publish the videos our staff schedule, at the times they choose, and to show their status. We do not sell or share this information, use it for advertising, or access any YouTube or Instagram data beyond what is listed above.
Storage and security
Data is stored with our service providers Supabase (database and sign-in) and Cloudflare R2 (video files). OAuth access and refresh tokens are encrypted (AES-256-GCM) before storage and are never shown in the browser.
Revoking access and deleting data
- Disconnecting an account on the Accounts page immediately deletes its stored tokens and channel/account details (and revokes the YouTube token with Google).
- You can also revoke this tool's access to your Google account at any time via the Google security settings page, and to Instagram under Settings → Apps and websites. If YouTube access is revoked, we delete the stored channel details within 30 days.
- To request deletion of any other data, contact us at [email protected].
Contact
Questions or complaints about this policy or your data: [email protected].