Privacy Policy

1. Who We Are

playlist.al ("we", "our", "us") is a content management platform that helps creators manage, schedule, publish, and analyze media content across platforms including YouTube and Facebook.

2. Data We Collect

When you connect a third-party account (such as a Facebook Page or YouTube channel) to playlist.al, we collect and store:

• Your account identifier and display name on that platform
• The names and IDs of pages or channels you manage
• OAuth access and refresh tokens required to act on your behalf
• Content you choose to upload, schedule, or edit through our platform (videos, images, titles, descriptions, tags, captions, thumbnails)
• Per-video metadata and metrics returned by the platform's API (e.g., view counts, engagement, revenue) for display in your dashboard

We do not collect your platform password, personal messages, or any data beyond what is necessary to provide the service.

3. How We Use Your Data

We use your data exclusively to:

• Publish, schedule, and edit content on your connected accounts on your behalf
• Display your connected pages, channels, videos, and history within the platform
• Surface engagement, audience, and revenue analytics to you (the account owner)

We do not sell, rent, or share your data with third parties for advertising or any other purpose. We do not use YouTube API data to train machine-learning models. We do not surface YouTube API data to anyone other than the authenticated owner of the underlying channel.

4. Facebook Permissions

We request the following Facebook permissions:

• pages_show_list — to list the Pages you manage
• pages_manage_posts — to create and schedule posts on your Pages
• pages_read_engagement — to display your existing posts and engagement data

You can revoke these permissions at any time through your Facebook App Settings.

5. YouTube API Services

playlist.al uses YouTube API Services to provide creator tooling for YouTube channels you own and operate. By using the YouTube features of playlist.al, you agree to be bound by the YouTube Terms of Service. Information handled through YouTube API Services is governed by the Google Privacy Policy.

When you connect a YouTube channel, we request the following OAuth scopes:

• youtube and youtube.force-ssl — read and write the videos, playlists, and channel settings you own
• youtube.upload — upload new videos to your channel
• youtubepartner and youtubepartner-channel-audit — manage and audit content for CMS / Content-Owner users (optional)
• youtube.channel-memberships.creator — surface membership data on the memberships dashboard (optional)
• yt-analytics.readonly and yt-analytics-monetary.readonly — display engagement and revenue analytics for your videos

How we handle YouTube API data:

• Use: Solely to provide the creator-tooling features described above to you, the channel owner.
• Storage: Video metadata snapshots and analytics rollups are cached in our database for 30–90 days to power your dashboard without re-fetching on every page load. Older records are pruned automatically by a scheduled job.
• OAuth tokens: Encrypted at rest, scoped per user and channel, and deleted server-side when you disconnect the channel.
• Sharing: We do not sell, license, syndicate, or share YouTube API data with any third party. YouTube API data is never used for advertising and is never used to train AI/ML models.
• Revocation: You may revoke our access at any time through the Google Security page at https://myaccount.google.com/permissions. You may also disconnect a channel from your account settings inside playlist.al, which immediately deletes the associated tokens and cached data from our systems.

6. Data Retention

Your access tokens and connected-account data are stored securely and retained for as long as your account is active. You can disconnect any connected account at any time from your account settings, which will immediately delete all associated tokens and cached data from our systems.

7. Data Security

All data is transmitted over HTTPS. Access tokens are stored securely and are only accessible to your account. We do not log or expose your page tokens in any application output.

8. Your Rights

You have the right to:

• Access the data we hold about you
• Request deletion of your data at any time
• Disconnect any connected account, which removes all associated data immediately
• Revoke OAuth permissions directly through the issuing platform (e.g., Google account permissions for YouTube, Facebook App Settings for Facebook)

To request data deletion, contact us at client@onair.al or use the disconnect option in your account settings.

9. Contact

For any privacy-related questions, contact us at:
client@onair.al