UploadPilotPrivacy Policy
UploadPilot is a private content publishing and automation tool for authorized operators of social media channels. This policy describes how UploadPilot handles information when an account owner authorizes it to publish on their behalf. UploadPilot is independently operated and is not affiliated with Google, YouTube, Meta, Instagram or TikTok.
1. This website
This public website is static. It has no login, forms, cookies, local storage, analytics, advertising or third-party scripts. The site is hosted by Cloudflare, and its source is kept on GitHub; like any hosted website, these providers necessarily process technical request data (such as IP address and request metadata) under their own policies. UploadPilot does not receive or use that data for tracking.
2. Google and YouTube data accessed
When an account owner authorizes UploadPilot through Google's OAuth consent screen, UploadPilot requests these OAuth scopes:
- youtube.upload — to upload videos and set their title, description, tags, visibility, thumbnail and scheduled publish time on the authorized channel.
- youtube.readonly — to identify the authorized channel (channel ID and channel title) and to read the status of videos published through UploadPilot.
- yt-analytics.readonly — to read the owner's own channel analytics for the owner's performance reporting.
UploadPilot does not request access to other Google data, and it does not read other people's channels or private account content such as email, contacts or files.
3. Why permissions are requested
Permissions are requested only to perform the actions the account owner asks for: uploading videos, scheduling them, reporting their publishing status, and reporting the owner's own channel performance. They are not used for advertising, profiling, or any unrelated purpose.
4. How authorization works
Authorization uses Google's standard OAuth 2.0 flow. The account owner signs in on Google's own page and chooses whether to grant access. UploadPilot never receives the Google account password through this flow. Publishing actions are performed only on channels the owner has authorized, and only through the private panel operated by the owner. The panel is not accessible from this public website.
5. Storage of tokens and channel data
UploadPilot stores the authorization tokens issued by Google, the authorized channel's ID and title, and basic records of the videos it published (title, description, link, scheduled time and publishing status). This data is kept on systems controlled by the operator and is used solely to perform the authorized publishing and reporting actions. It is not published or shared on this website.
6. Retention
Data obtained through the YouTube API Services, such as video status and statistics, is refreshed or deleted at least every 30 days. Other stored data is kept until the operator disconnects the account or deletes the channel's record, which removes the stored tokens and the related records. Revoking access in your Google Account (section 10) makes the stored tokens stop working immediately, and the data obtained through that access is deleted within 30 days of the revocation.
7. Sharing with third parties
UploadPilot does not sell Google user data and does not share it with third parties for advertising or any other purpose, except as needed to deliver the requested action to the platform's API, or as required by law.
8. Google API Services Limited Use
UploadPilot's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, data obtained through Google APIs is used only to provide or improve the user-facing publishing features described here, is not transferred to others except as necessary to provide those features, comply with law, or as part of a merger or sale with the owner's consent, is not used for serving advertisements, and is not read by humans except with the owner's consent, for security, or to comply with law.
9. Platform APIs used
UploadPilot uses YouTube API Services, namely the YouTube Data API and the YouTube Analytics API, through Google OAuth. By using UploadPilot you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.
10. Revoking access
You can revoke UploadPilot's access at any time in your Google Account at myaccount.google.com/permissions. Once access is revoked, stored tokens stop working.
11. Deletion requests
To request deletion of stored data, contact us at the address below. We will delete the data we hold about the authorized account as soon as possible and within 7 days of the request.
12. Security
We take reasonable measures to protect stored data. No method of storage or transmission is completely secure.
13. Changes
This policy may be updated. The date above shows the latest revision.
14. Contact
For privacy questions or deletion requests, email ozverencan@gmail.com.