Privacy Policy

Last updated: 11 November 2026. This policy explains what Upmol ("we") collects, why, and how you control it. Upmol is operated by an individual developer in Türkiye. Contact: miraclebrain@gmail.com.

What we collect

• Account data: the e-mail address and password hash of the Upmol account you create.
• Content you provide: videos you upload or select from your Google Drive, and the texts you write or approve.
• Connected accounts: OAuth tokens for the services you connect (for example YouTube and Google Drive). Tokens are stored encrypted (AES-256-GCM) and are used only to perform the actions you request.
• Technical logs: error logs without IP addresses. We do not use advertising or tracking cookies.

How we use Google user data

• YouTube (youtube.force-ssl, youtube.readonly, yt-analytics.readonly): to upload the videos you approve to your own channel, to set or update their title, description, schedule and thumbnail, and to show you view statistics of those videos.
• Google Drive (drive): to read the video files in the folder you choose, to store your uploaded videos in your own Drive, and to organise them into folders you see in your Drive.

Upmol's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not use it to train general-purpose AI models. Humans do not read your data unless you ask for support, it is required for security, or required by law.

AI processing

To draft texts, a copy of your video (picture and audio) is sent to an AI model provider through OpenRouter. The result (a transcript and a short description of the video) is stored in your workspace. Only the videos you upload or select are processed.

Sharing

We share data only with the services needed to run Upmol: the platforms you connect (to publish), the AI provider (to draft texts), and our server host in Türkiye. We do not share data with anyone else.

Retention and deletion

• Working copies of videos on our server are deleted automatically after processing; the original stays in your Google Drive.
• You can disconnect any account at any time in Upmol settings or at myaccount.google.com/permissions; the stored tokens are then deleted.
• To delete your Upmol account and all its data, e-mail us; we complete deletion within 30 days.

Security

Data is transferred over HTTPS, secrets are encrypted at rest, and access to the server is limited to the operator.

Changes

If this policy changes, we update the date above and, for important changes, notify signed-in users.