Privacy Policy
BuzBuyz Publisher uses YouTube API Services. By using BuzBuyz Publisher you agree to be bound by the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy.
1. Who we are
BuyBuyz Studio ("we", "us") operates BuzBuyz Publisher, a private internal application that uploads and schedules the company's own videos to the company's own YouTube channels. It is used only by BuyBuyz Studio staff and is not offered to the public.
2. Information accessed through Google authorization
When a channel owner authorizes the application through Google, it receives OAuth tokens (a refresh token and a short-lived access token) for that Google account and YouTube channel. Using those tokens, the application accesses the following through the YouTube Data API:
- the identifier and basic details of the authorized channel, to confirm it is the intended channel (channels.list);
- the upload of our own video file with its title, description, tags and settings (videos.insert, resumable upload) and its thumbnail image (thumbnails.set);
- the status, privacy setting and title of the video we have just uploaded, to verify the upload (videos.list).
The application does not access viewers' data, comments, analytics, subscribers or messages.
3. Scopes and why
- youtube.upload - to upload our own videos and set their thumbnails.
- youtube.readonly - to confirm which channel is authorized and to read back an uploaded video for verification.
- youtube - to manage our own channel's information (description, keywords, language and translations of that text) and to create our own playlists and add our own videos to them.
The application does not read, post or delete comments, and does not access subscribers, messages or analytics.
4. How information is used
The information described above is used only to upload and schedule BuyBuyz Studio's own videos, to verify the authorized channel and each upload, and to prevent duplicate uploads. It is not used for advertising, profiling or any other purpose.
The use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer this information to others except as needed to provide the application's features, for security purposes, or to comply with law, and we do not allow humans to read it except for security purposes or to comply with law.
5. Where it is stored
The application stores the following on computers and servers operated by BuyBuyz Studio, in files accessible only to the account that runs the application:
- OAuth tokens for each authorized channel, together with the application's OAuth client credentials.
- An upload ledger with, for each upload attempt: the video file's hash, the YouTube video ID, a normalized form of the title, the state (queued, uploading, uploaded, verified or failed), timestamps and, for failures, a short error message.
- Logs of application runs, which record the progress and result of each item.
6. Retention and deletion
- Tokens are kept until the authorization is revoked or the channel is disconnected from the application. After revocation or disconnection, we delete the stored tokens as soon as possible and within 7 calendar days.
- Ledger records are kept to prevent duplicate uploads. They contain only the data listed above and are deleted on request (see section 11).
- Logs are kept for operating and troubleshooting the application and are deleted on request.
- The application does not retain statistics or other channel data beyond the items listed above. Information read from YouTube for verification is compared with what we uploaded and is not kept as a separate copy.
- We do not keep data obtained through Google authorization for longer than needed for the purposes described in this policy, and in any case any such data is deleted or refreshed within 30 calendar days when we no longer need it.
7. Security
Token files are created so that they are readable only by the account that runs the application. Authorization uses the standard Google OAuth flow with PKCE, and the application communicates with Google's services over HTTPS. Access to the computers and servers that run the application is limited to BuyBuyz Studio staff.
8. Sharing and third parties
We share information only with Google and YouTube, as part of using the YouTube Data API. We do not sell information, share it with advertisers or share it with any other third party. This website is served by a hosting provider that delivers the pages; the website sets no cookies, uses no analytics and does not track visitors.
9. Revoking access
You can revoke BuzBuyz Publisher's access to your Google account at any time on the Google security settings page. After revocation the application can no longer access the channel, and we delete the stored tokens as described in section 6.
10. Children
BuzBuyz Publisher is not directed to children and is not offered to the public. It is used only by BuyBuyz Studio staff.
11. Requesting deletion
To ask us to delete the tokens, ledger records or logs held about an authorization, email privacy@buzbuyzstudio.com. We delete the data within 30 days of the request.
12. Changes
We may update this policy. The date at the top shows when it was last changed. Changes take effect when they are posted on this page.
13. Contact
For questions or complaints about our privacy practices, contact BuyBuyz Studio at privacy@buzbuyzstudio.com.