Privacy Policy

1. Scope

This policy covers GIKIDI Clip, an internal tool that Gia Kiệm Số ("we") uses to schedule and publish videos to YouTube channels and social media pages we own. It explains what data the tool accesses through YouTube API Services, why, where it is stored, and how it is deleted. GIKIDI Clip uses YouTube API Services; use of the tool is also subject to the YouTube Terms of Service, and Google's handling of data is governed by the Google Privacy Policy.

2. Data we access and collect

When a YouTube channel is connected, GIKIDI Clip accesses only:

• OAuth tokens issued by Google for the scopes youtube.upload, youtube.readonly and yt-analytics.readonly, and the email address of the connected channel, used to confirm that the right channel was connected.
• The connected channel's information from the YouTube Data API: channel ID, title, picture, and public counts (subscribers, views, number of videos).
• The channel's list of videos from the YouTube Data API: ID, title, thumbnail, publish date, duration, privacy status, and view, like and comment counts.
• YouTube Analytics reports for the channel and its videos: views, watch time, average view duration and percentage, subscribers gained and lost, likes, shares, comments, and aggregated breakdowns by day, traffic source, country, device type, content type, and age group and gender (as percentages).
• IDs and links of videos the tool uploaded, and whether each upload succeeded.

We do not access other users' channels, subscriber lists, viewers' comments, or any data about individual viewers. Members of our team sign in to the tool's dashboard with an email address; the dashboard uses cookies only to keep that session signed in.

3. How we use the data

• To upload videos with their titles, descriptions and settings to the connected channel at the scheduled time.
• To check that the connection still works and to show the channel's connection status to our team.
• To show our team how our own videos perform, so we can improve future videos.

We do not sell data, use it for advertising, or use it to train AI models.

4. Storage and security

• OAuth tokens are encrypted with public-key encryption (libsodium sealed boxes) before they are written to our database. The key that decrypts them exists only on the internal server that publishes videos, never in the web dashboard.
• Data is stored with our infrastructure providers: Supabase (database) and Cloudflare R2 (video files). Access is limited to members of the Gia Kiệm Số team.

5. Sharing

We do not share data obtained from YouTube API Services with third parties, except with the infrastructure providers above that store it on our behalf, or when required by law.

6. Retention and deletion

• Data obtained from the YouTube Data API (channel information, the list of videos and their counts) is refreshed from the API regularly while the channel is connected; any such data that has not been refreshed within 30 days is deleted automatically every day.
• Performance figures kept over time are taken from the YouTube Analytics API. When Analytics has no figures yet for a new video, figures from the YouTube Data API are used temporarily; they are replaced with Analytics figures later, or deleted after 30 days.
• When a channel is disconnected, the tool revokes its access token with Google immediately. When a channel is disconnected or access is revoked, all data obtained for that channel, including Analytics reports, is deleted within 30 days.
• A request to delete data can be sent to the contact below at any time; we complete it within 7 days.

7. Revoking access

A channel owner can revoke GIKIDI Clip's access at any time on the Google security settings page: https://security.google.com/settings/security/permissions. After revocation the tool can no longer upload videos or read data for that channel.

8. Changes to this policy

We update this page when the tool's data practices change and show the date of the latest update above.