Privacy Policy

Last updated: May 3, 2026

What This App Does

Trafficator is a video management tool that helps channel owners generate, publish, and manage engagement on YouTube Shorts across their own YouTube channels. All actions are taken on YouTube channels you own and have explicitly connected to the Service.

Data We Access

When you connect your YouTube account, we request the following Google API scopes:

• youtube.upload — to upload generated videos as Shorts to your YouTube channel on your behalf, only when you explicitly approve a video (or have enabled auto-approve for that account).
• youtube.readonly — to read basic channel information (channel ID, channel title, public statistics for your videos) so the dashboard can identify which account a video belongs to and display upload counts.
• youtube.force-ssl — to manage cross-account engagement on your behalf when you have enabled it from the Engagement page in the dashboard. Specifically: posting likes and comments from one of your connected channels onto videos uploaded by another of your own connected channels (Internal Engagement), and posting likes and comments onto YouTube Shorts that you have explicitly chosen as targets via the Targeted Engagement feature. This scope is also used by an optional External Engagement mode that schedules likes and comments on randomly discovered Shorts so that each connected account has natural-looking activity. Every engagement action is recorded in a per-action audit log inside the dashboard, is rate-limited per account, and can be paused at any time. Engagement is off by default and is enabled per-feature by you, the account owner.

How We Use Your Data

• We store your OAuth refresh tokens encrypted at rest on our server using Fernet symmetric encryption, solely to maintain your YouTube connection. Tokens are decrypted only at the moment they are needed to call the YouTube API on your behalf.
• We use your channel information solely to identify which connected account a video, action, or engagement record belongs to inside the dashboard.
• We upload videos only when you explicitly approve them, or when you have enabled auto-approve for that specific account.
• We post likes and comments only when you have enabled the corresponding engagement feature on the Engagement page, and only on YouTube videos selected by the rules of that feature (your own connected channels' videos for Internal Engagement, videos you choose for Targeted Engagement, randomly discovered Shorts for External Engagement).
• We use Google's Gemini and Anthropic's Claude APIs to generate scripts, prompts, and comment text. The text passed to these APIs is the video metadata or context needed to produce that output. We do not send your YouTube credentials, OAuth tokens, or other account-identifying data to third-party AI providers.
• We do not sell, rent, or transfer your data to advertisers or unrelated third parties. Use of YouTube data obtained via these APIs is limited to the purposes listed above and complies with the YouTube API Services Terms of Service and the Google Privacy Policy.

Data Storage and Retention

OAuth credentials are stored encrypted on a secured private server. Generated video files (raw footage, music-mixed copies, voiceover-mixed copies, source images) are stored locally on the same server so the dashboard can play them back, re-mix them, or re-burn subtitles after upload. Engagement action records (timestamps, action type, status, error messages, generated comment text) are retained so the dashboard can show an audit log. You may request deletion at any time using the contact below.

Data Deletion

You can disconnect any YouTube account at any time from the app's Accounts page. Disconnecting removes the account's stored OAuth tokens and stops all engagement actions for that account. You can additionally revoke the Service's access at any time directly in your Google Account at https://myaccount.google.com/permissions. To request full deletion of all stored data associated with your account (including video files and engagement history), contact us at the email below.

Third-Party Services

This app interacts with the YouTube Data API v3 (Google). Google's privacy policy applies to data processed by their services: https://policies.google.com/privacy. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

For questions about this privacy policy or to request data deletion, contact: admin@trafficator.info