Privacy Policy

1. Scope

This policy covers GIKIDI Clip, an internal tool that Gia Kiệm Số ("we") uses to schedule and publish videos to YouTube channels and social media pages we own. It explains what data the tool accesses through YouTube API Services, why, where it is stored, and how it is deleted. GIKIDI Clip uses YouTube API Services; use of the tool is also subject to the YouTube Terms of Service, and Google's handling of data is governed by the Google Privacy Policy.

2. Data we access and collect

When a YouTube channel is connected, GIKIDI Clip accesses only:

• OAuth tokens issued by Google for the scopes youtube.upload, youtube.readonly, youtube.force-ssl and yt-analytics.readonly, and the email address of the connected channel, used to confirm that the right channel was connected.
• The connected channel's information from the YouTube Data API: channel ID, title, picture, and public counts (subscribers, views, number of videos).
• The channel's list of videos from the YouTube Data API: ID, title, thumbnail, publish date, duration, privacy status, and view, like and comment counts.
• YouTube Analytics reports for the channel and its videos: views, watch time, average view duration and percentage, subscribers gained and lost, likes, shares, comments, and aggregated breakdowns by day, traffic source, country, device type, content type, and age group and gender (as percentages).
• IDs and links of videos the tool uploaded, and whether each upload succeeded.
• Subtitles and playlists we add: after an upload the tool can add the subtitle file our team created for that video and add the video to a playlist on our own channel. It does not read or change other captions or playlists.
• Comments under videos the tool uploaded, only when comment replies are turned on for a channel: comment ID, the commenter's public display name and channel ID, the comment text and time, and our reply.

We do not access other users' channels, subscriber lists, or any data about individual viewers other than the public comments described above. Members of our team sign in to the tool's dashboard with an email address; the dashboard uses cookies only to keep that session signed in.

3. How we use the data

• To upload videos with their titles, descriptions and settings to the connected channel at the scheduled time.
• To check that the connection still works and to show the channel's connection status to our team.
• To show our team how our own videos perform, so we can improve future videos.
• To add our own subtitles to videos the tool uploaded and to add them to our own playlists.
• To answer comments under our own videos: the comment text is sent to the Google Gemini API to classify the comment and draft a reply. Replies to simple comments (thanks, requests to try the product) may be posted automatically; all other replies are reviewed by a member of our team before they are posted.

We do not sell data, use it for advertising, or use it to train AI models.

4. Storage and security

• OAuth tokens are encrypted with public-key encryption (libsodium sealed boxes) before they are written to our database. The key that decrypts them exists only on the internal server that publishes videos, never in the web dashboard.
• Data is stored with our infrastructure providers: Supabase (database) and Cloudflare R2 (video files). Access is limited to members of the Gia Kiệm Số team.

5. Sharing

We do not share data obtained from YouTube API Services with third parties, except with the infrastructure providers above that store it on our behalf, the Google Gemini API (comment text only, to draft replies as described in section 3), or when required by law.

6. Retention and deletion

• Data obtained from the YouTube Data API (channel information, the list of videos and their counts) is refreshed from the API regularly while the channel is connected; any such data that has not been refreshed within 30 days is deleted automatically every day.
• Performance figures kept over time are taken from the YouTube Analytics API. When Analytics has no figures yet for a new video, figures from the YouTube Data API are used temporarily; they are replaced with Analytics figures later, or deleted after 30 days.
• Comments obtained from the YouTube Data API, with our replies, are deleted automatically 30 days after they were collected.
• When a channel is disconnected, the tool revokes its access token with Google immediately. When a channel is disconnected or access is revoked, all data obtained for that channel, including Analytics reports, is deleted within 30 days.
• A request to delete data can be sent to the contact below at any time; we complete it within 7 days.

7. Revoking access

A channel owner can revoke GIKIDI Clip's access at any time on the Google security settings page: https://security.google.com/settings/security/permissions. After revocation the tool can no longer upload videos or read data for that channel.

8. Changes to this policy

We update this page when the tool's data practices change and show the date of the latest update above.