Privacy policy

This policy explains what Reels Publisher (“the service”), operated by the operator of this server, does with data from Google/YouTube, Meta/Instagram and TikTok. The service is used only by its operator for the operator’s own accounts.

Data the service accesses

• Account identity: the connected channel or account ID, display name and username.
• Authorization tokens issued by the platform when the operator connects an account.
• Videos and post details the operator approved: the video file, title, caption, tags, privacy and disclosure settings, scheduled time, and the platform’s post ID and URL after publishing.
• Statistics of the operator’s own posts and accounts: e.g. views, likes, comments, shares, saves, watch time, average view duration and percentage, audience retention, skip rate, reach and follower counts — only what each platform’s API returns.

The service does not access other people’s private data, messages, contacts or payment information, and it does not use cookies or tracking on these pages.

How the data is used

• To upload and publish the videos the operator approved, at the time the operator chose.
• To show the operator the status and performance of those posts and to compare results over time.

Data is not sold, shared with advertisers or used for advertising, and not transferred to anyone except the platform that receives a post. Optional notifications to the operator (Telegram or a webhook chosen by the operator) contain only post titles, links and error messages.

The service’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security

• Data is stored on a server controlled by the operator. Authorization tokens are encrypted at rest (AES-256-GCM) and are never shown in the interface or written to logs.
• Uploaded video files are deleted 7 days after all their publications are finished. Post details and statistics are kept until the operator deletes them. Encrypted database backups are kept for a limited number of days.
• Access to the service’s API requires a secret token held by the operator; all traffic uses HTTPS.

Revoking access and deleting data

• Disconnecting an account in the operator’s studio revokes the token where the platform allows it.
• Google/YouTube access can also be revoked at myaccount.google.com/permissions.
• Instagram and TikTok access can be removed in each app’s settings, in the section that lists connected apps and website permissions.
• To request deletion of stored data, contact haski007001@gmail.com; it is removed within 30 days.

Changes and contact

Changes are published on this page with a new date. Questions: haski007001@gmail.com.