Privacy Policy

Last updated: February 20, 2026

1. Introduction

Social Video Uploader ("the Service") respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

Data Type	Purpose	Storage
OAuth tokens (TikTok, YouTube)	Authenticate API requests to publish videos on your behalf	Stored in environment variables / Kubernetes secrets (encrypted at rest)
API keys (Twitter/X)	Authenticate API requests to post tweets with video	Stored in environment variables / Kubernetes secrets
Video files	Temporarily downloaded from MinIO for upload to social platforms	Deleted from local/temp storage after upload
Upload history	Track which clips have been uploaded to which platforms to prevent duplicates	JSON file stored locally
Email address	Send upload status alerts and failure notifications	Stored in environment variables

3. How We Use Your Data

We use your data exclusively to:

Upload your video content to the social media platforms you have authorized.
Track upload history to avoid duplicate uploads.
Send you email notifications about upload status.
Push upload metrics to Prometheus for monitoring.

We do not sell, share, or transfer your data to any third parties beyond the social media platforms you authorize.

4. Third-Party Services

The Service connects to the following third-party platforms:

TikTok — via Content Posting API v2 (OAuth 2.0). See TikTok's Privacy Policy.
YouTube / Google — via YouTube Data API v3 (OAuth 2.0). See Google's Privacy Policy.
Twitter / X — via Twitter API v1.1 (OAuth 1.0a). See X's Privacy Policy.
MinIO — self-hosted S3-compatible object storage for video files.

5. Data Retention

Video files: Temporarily stored during upload, then deleted. Original files remain in your MinIO storage.
Upload history: Retained indefinitely to prevent duplicate uploads. You can delete the history file at any time.
OAuth tokens: Stored until you revoke access or they expire. Tokens are refreshed automatically.

6. Data Security

We implement the following security measures:

API credentials stored as Kubernetes Secrets (encrypted at rest).
All API communication over HTTPS/TLS.
Cloudflare tunnel for secure access to self-hosted services.
No credentials are logged or exposed in output.

7. Your Rights

You have the right to:

Revoke access: Disconnect the Service from any platform at any time via that platform's settings.
Delete data: Remove your upload history, credentials, and all stored data.
Access data: Request a copy of all data the Service stores about you.

8. Children's Privacy

The Service is not intended for use by anyone under the age of 13. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

10. Contact

For privacy-related questions or data requests, contact: vinny.david@gmail.com