Privacy Policy — Netra Vaycanina

Effective Date: 14 June 2026 · Last Updated: 14 June 2026
Controller: Netra Vaycanina (operated by Baran Yakut, sole owner of the YouTube channel "Vaycanina")
Contact: baranyakutai@gmail.com

1. Who This Policy Covers

This Privacy Policy describes how the Netra Vaycanina content automation system ("the System") handles data when interacting with Google APIs — specifically the YouTube Data API v3.

The System is a private, single-user tool operated by the channel owner to publish content to their own YouTube channel. It is not a public product, has no end users other than the channel owner, and does not collect data from third parties.

2. Data We Access via Google APIs

The System uses the following Google OAuth scopes:

Scope	Purpose
`https://www.googleapis.com/auth/youtube.upload`	Upload videos to the channel owner's own YouTube channel
`https://www.googleapis.com/auth/youtube`	Read/update video metadata (title, description, tags, thumbnails) on the owner's own channel
`https://www.googleapis.com/auth/youtube.readonly`	Read channel analytics (views, retention, CTR) for the owner's own videos

All data accessed belongs to the channel owner. The System does not access any other user's data.

3. What Data the System Stores

Data Category	Storage Location	Retention
OAuth refresh token	Local encrypted file on owner's PC (`credentials/youtube_token.json`)	Until manually revoked
Video metadata of uploaded videos (video ID, title, publish time)	Local PostgreSQL database on owner's PC	Indefinite (owner's records)
Analytics snapshots (views, retention, CTR)	Local PostgreSQL database on owner's PC	Indefinite (for performance review)
Generated video files before upload	Local disk on owner's PC	Deleted after successful upload (7-day grace period)

Nothing is stored on third-party cloud servers other than YouTube itself (where the videos are published normally).

4. How the Data Is Used

Upload pre-produced video files to the owner's YouTube channel on scheduled times.
Read the owner's own analytics to inform the System's content strategy (e.g., which titles performed better).
Update video metadata (title, description, thumbnail) on the owner's own videos when revisions are needed.

The System does not:

Share, sell, transmit, or expose YouTube data to any third party.
Use YouTube data for advertising, profiling, or any purpose unrelated to the channel owner's own content operations.
Access any account other than the channel owner's.

5. Data Sharing with Third Parties

None. The OAuth refresh token never leaves the owner's local PC. Video files are uploaded directly from the owner's PC to YouTube via the official Google API. No analytics or metadata are transmitted to any external service.

LLM providers (Anthropic, Google Vertex AI) are used only for script generation from public sources — they never receive YouTube account data, OAuth tokens, video files, or analytics.

6. Data Security

OAuth tokens are stored locally with OS-level file permissions restricted to the owner's user account.
The local PostgreSQL database is not exposed to the public internet (loopback only).
The System does not run a public web server or accept inbound connections.
Backups of credentials are stored on encrypted local volumes only.

7. Your Rights

Because the System is a single-user tool operated by the data subject themselves (the channel owner), GDPR/data subject rights are exercised directly:

Access: The owner has full local access to all stored data.
Deletion: The owner can delete the local database and revoke the OAuth token at any time via Google Account permissions.
Portability: The owner can export their local PostgreSQL database in standard formats at any time.

There are no other users whose rights need to be exercised against this System.

8. Compliance with YouTube API Services Terms

This System complies with the YouTube API Services Terms of Service and the Google API Services User Data Policy, including the Limited Use requirements.

By using YouTube API Services, this System:

Limits use of data to providing or improving prominent user-facing features (in this case, the channel owner's own publishing workflow).
Does not transfer or sell user data for advertising purposes.
Does not use user data for credit-worthiness or lending purposes.
Allows humans to read the data only with the data subject's affirmative agreement (in this case, the channel owner is both subject and operator).

9. Children's Privacy

This System is not directed at children and does not knowingly process data of users under 13.

10. Changes to This Policy

Material changes will be reflected on this page with an updated "Last Updated" date. Because the System has only one user (the channel owner), notifications are not sent externally.

11. Contact

Questions or concerns: baranyakutai@gmail.com
YouTube channel: https://www.youtube.com/@vaycanina