Privacy Policy

Last Updated: May 9, 2025

1. Introduction

At Slacker, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

  • Account information (name, email, contact details)
  • Content you upload or create on our platform

2.2 Social Media and Platform Data

When you connect your social media accounts, we collect platform-specific data as detailed below.

2.2.1 Google and YouTube Data

When you connect your Google account, we collect:

  • Google OAuth access and refresh tokens (never your passwords)
  • Google account profile information (profile photo, display name, email)
  • YouTube channel list and channel information
  • YouTube video metadata (titles, descriptions, thumbnails, categories)
  • YouTube Analytics data (views, watch time, audience demographics, retention)

We request these specific Google API scopes:

  • youtube.readonly: To access your channel information and basic analytics
  • youtube.upload: To publish content to your YouTube channel
  • youtube.force-ssl: To mange your YouTube videos and ensure secure communications
  • youtube.yt-analytics.readonly: To access views, watch time, audience demographics, retention

2.2.2 Other Social Platforms

For other connected social media accounts, we may collect:

  • OAuth access tokens (never your passwords)
  • Profile information
  • Published content information
  • Audience and engagement metrics

2.3 Information We Automatically Collect

  • Device and browser information
  • IP address and location data
  • Usage patterns and platform interactions
  • Cookies and similar tracking technologies

3. How We Use Your Information

3.1 General Usage

  • To provide and maintain our services
  • To communicate with you about our services
  • To improve and personalize your experience
  • To detect and prevent fraud or abuse
  • To comply with legal obligations

3.2 Platform-Specific Data Usage

3.2.1 Google and YouTube Data Usage

When you connect your Google/YouTube account, we use the data specifically to:

  • Enable secure, authorized video uploads directly to your YouTube channel
  • Display and manage your video catalog in our Content Library interface
  • Provide performance analytics and audience insights for your channel
  • Generate content recommendations based on your audience demographics
  • Optimize publishing schedules based on historical performance data
  • Enable your viewers to discover your content through our platform

Important Google Data Policy Compliance: Our use of YouTube and Google data complies with the Google API Services User Data Policy, including the Limited Use requirements. We do not:

  • Sell your Google account data to third parties
  • Use your Google account data for advertising purposes
  • Use your Google data for creditworthiness assessment
  • Use your YouTube data to train generalized machine learning models unrelated to your content

4. Data Sharing and Third Parties

  • We share data with service providers who assist our operations
  • We do not sell your personal information
  • We may share data when required by law
  • We ensure third parties maintain appropriate security

4.1 Google Data Sharing Specifics

Google user data (including YouTube data) is shared only with the following third parties:

  • Cloud hosting providers (Google Cloud) for secure storage
  • Error logging and monitoring services for platform stability
  • Analytics providers for our own internal usage metrics

Google user data is never provided to:

  • Advertising networks
  • Data brokers
  • Social media platforms
  • Information resellers
  • Other third parties not essential to service operation

5. Data Security

  • We implement industry-standard security measures
  • We use encryption for sensitive data
  • We regularly update our security practices
  • We limit access to personal information
  • We conduct regular security audits

5.1 Security for OAuth Data

We implement the following specific security measures for Google and other OAuth data:

  • TLS 1.2+ encryption for all data in transit
  • AES-256 encryption for sensitive data at rest, including OAuth tokens
  • Role-based access controls that limit internal access to user data
  • Regular security audits and vulnerability scanning
  • Automatic session timeouts and token rotation
  • Immediate token revocation upon account disconnection

6. Your Rights

  • Access your personal information
  • Correct inaccurate information
  • Request deletion of your data
  • Opt-out of marketing communications
  • Export your data in a portable format

7. Cookies and Tracking

  • We use cookies for essential platform functions
  • We use analytics to improve our services
  • You can control cookie settings in your browser
  • We respect Do Not Track signals

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. OAuth access and refresh tokens are stored encrypted at rest and are purged 30 days after a user disconnects their account or upon request. Backups containing user data are automatically aged‑out within 30 days.

8.1 Platform-Specific Retention Periods

8.1.1 Google and YouTube Data

When you disconnect your Google or YouTube account from our platform, we will delete all collected Google user data within 30 days of disconnection. This includes:

  • OAuth tokens (immediately revoked upon disconnection)
  • YouTube channel information and metadata
  • All analytics data and insights gathered from your Google account
  • Any cached content or information derived from your Google account

You can request immediate deletion of your data at any time by contacting us at privacy@slacker.dev.

9. No Credential Storage

Slacker never stores Google account passwords. We only store OAuth tokens issued by Google, which are encrypted using AES‑256 and rotated automatically.

10. Children's Privacy

Our services are not intended for users under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the effective date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@slacker.dev