Privacy Policy

Last Updated: September 3, 2026

At ScriptToReel Studio, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our SaaS platform.

1. Information We Collect

Personal Data

We may collect personally identifiable information, such as your name, email address, and account details when you register for our Service.

Third-Party Social Media Data (e.g., Meta, TikTok)

Our platform integrates with social media networks. When you connect your accounts (such as Facebook, Instagram, or TikTok) via their respective APIs or Login Kits, we may collect basic profile information (such as your display name, open_id, and avatar) required to establish the connection.

Google and YouTube Data

Where you connect a YouTube channel, we use YouTube API Services and the Google OAuth flow. With your explicit consent we request these scopes, and no others:

youtube.upload — to upload videos to the channels you connect.
youtube and youtube.force-ssl — to set titles, descriptions, tags, thumbnails, playlists and comments on those videos.
youtube.readonly — to read the channel and video list of the account you connect.
yt-analytics.readonly — to read view counts and audience retention statistics for those videos, so the service can judge which content performed well.

We access only channels the authenticating Google Account already owns or manages. We do not access any other Google service — no Gmail, Drive, Contacts, Calendar or Photos data is requested or received.

2. How We Use Your Information

We use the information we collect primarily to provide, maintain, and improve our services. Specifically:

To authenticate your identity and manage your account.
To process and upload video content to your connected social media profiles (via Content Posting APIs) strictly based on your explicit commands.
To communicate with you regarding updates, security alerts, and support messages.

3. Disclosure of Your Information

We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties. We only share information with third parties in the following circumstances:

Service Providers: We may share data with trusted vendors who assist us in operating our application, provided they agree to keep this information confidential.
Legal Requirements: We may disclose information if required by law or in response to valid requests by public authorities.

4. Data Security

We implement a variety of security measures to maintain the safety of your personal information. Access tokens and refresh tokens obtained from third-party APIs (including Google/YouTube, Meta Graph API and TikTok API) are encrypted at rest and stored securely. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

5. Google API Services — Limited Use

ScriptToReel Studio's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data obtained through Google APIs is:

used only to provide and improve the user-facing features described above;
never transferred to others except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition;
never used for advertising, ad targeting, or resale;
never read by humans, unless we have your explicit consent, it is necessary for security purposes such as investigating abuse, to comply with applicable law, or the data is aggregated and anonymised;
never used to develop, improve or train generalised artificial intelligence or machine learning models. Video scripts are generated from topic inputs, not from your Google user data.

6. YouTube API Services

By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service. Information handled by Google is described in the Google Privacy Policy.

You may revoke this application's access to your Google Account at any time via the Google security settings page. Revoking access immediately invalidates the stored refresh token, and we delete our copy of it.

7. Data Retention & Deletion

We retain your personal information and API tokens only for as long as necessary to provide you with our services. You can disconnect your social media accounts at any time from our dashboard, which will immediately remove our access to your accounts. You may also request full deletion of your account and associated data by following the instructions on our Data Deletion Instructions page, or by contacting us.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at support@scripttoreel.duckdns.org.