Legal

Privacy Policy

How we handle your data

This policy explains what information Potapio Publish collects when you edit and publish videos, how we use OAuth tokens and video files, and what rights you have over your data.

Last updated: August 10, 2026

1. Introduction

Potapio Publish ("we," "our," or "us") is a service that helps users edit and publish videos directly to their social media channels, including YouTube, Instagram, and TikTok. We are committed to protecting your privacy and handling your data transparently. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use our website (https://publish.potap.io) and related services.

By using Potapio Publish, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1. Information You Provide to Us

  • Account Connection Data: When you connect your social media accounts, we receive your account identifiers, email address, and basic profile information (name, avatar) through the respective platform's authentication process (Google OAuth for YouTube, Facebook Login for Instagram, TikTok Login Kit for TikTok).
  • Channel / Page Data: We access your channel or page ID, username, and content metadata (titles, descriptions, tags) as needed to upload videos and retrieve analytics.
  • Video Content: The video files you create or upload on our platform are temporarily processed solely to publish them to the destination platform you select.

2.2. Information Collected Automatically

  • OAuth Tokens / Access Tokens: We store access and refresh tokens to maintain your connection to YouTube, Instagram, and TikTok without requiring repeated logins.
  • Log Data: Our servers automatically record standard information such as IP address, browser type, date and time of requests, and pages visited (used only for debugging and service improvement).

3. How We Use Your Information

We use the collected data exclusively for the following purposes:

  • Social Media Integration: To upload videos to your selected platform (YouTube, Instagram, or TikTok) exactly when you click the "Publish" button, and to fetch viewing statistics that you explicitly request.
  • Authentication: To securely connect your social media accounts and keep the session active.
  • Service Operation: To provide, maintain, and improve our video editing and publishing service.
  • Communication: To respond to your support requests or send critical service alerts.

We do not use your data for advertising, profiling, or any purpose unrelated to the direct functionality of Potapio Publish.

4. YouTube API Services and Google Data

Potapio Publish uses YouTube API Services to enable video uploads and analytics. By connecting your YouTube account, you grant our application access to the following Google OAuth scopes:

  • youtube.upload – to publish videos to your channel
  • youtube.readonly – to verify upload status and retrieve basic channel information
  • yt-analytics.readonly – to fetch viewing statistics for your videos

Use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the limited use requirements.

Our use of your Google data is strictly limited to the purposes described in this policy. We do not transfer your data to third parties, nor do we sell or share it for advertising.

5. Instagram (Meta Platforms) Data

If you connect your Instagram account, we utilize the Instagram Graph API and Facebook Login. We request the following permissions:

  • instagram_basic – to access your Instagram account profile and media
  • instagram_content_publish – to publish videos to your Instagram feed or Reels
  • pages_read_engagement – (if applicable) to read engagement data for linked Facebook Pages

The data received from Meta is used strictly to publish content as initiated by you. We do not retain your Instagram media beyond the time necessary for publication. Our use of Instagram data complies with the Meta Privacy Policy and Meta Platform Terms.

You may revoke our access to your Instagram account at any time via your Instagram app permissions.

6. TikTok Data

If you connect your TikTok account, we use TikTok’s API (TikTok for Developers) to publish videos. We request the following scopes:

  • video.publish – to upload and publish videos to your TikTok account
  • user.info.basic – to retrieve your basic profile information (nickname, avatar, open_id)

We process TikTok data solely to publish content you create. Video files are removed from our systems promptly after upload. We do not use your TikTok data for any other purpose.

Our handling of TikTok data complies with the TikTok Privacy Policy and TikTok Developer Terms.

You can revoke access by removing Potapio Publish from your TikTok authorized apps.

7. Data Retention and Deletion

We retain your access tokens and related data only as long as necessary to provide the service. Video files are deleted from our servers immediately after successful publication (or within a short period if you cancel the upload).

Revoking Access: You can revoke Potapio Publish’s access to your accounts at any time:

Upon revocation, we automatically delete the stored tokens associated with that account. If you wish to request manual deletion of all personal data we hold, please contact us at support@potap.io. We will process your request within 30 days.

8. Data Sharing and Third Parties

We do not sell, trade, or otherwise transfer your personal information to third parties. The only external services we interact with are:

  • Google LLC – solely through the official YouTube API to fulfil your publishing requests. Google Privacy Policy.
  • Meta Platforms, Inc. – through the Instagram Graph API to publish your videos. Meta Privacy Policy.
  • ByteDance (TikTok) – through TikTok for Developers API to publish your videos. TikTok Privacy Policy.
  • Hosting Providers – our servers and databases are hosted on secure infrastructure (e.g., AWS, DigitalOcean), which may have access to data strictly for operational purposes and under contractual confidentiality.

9. Security

We implement industry-standard security measures to protect your information. All communication is encrypted via HTTPS, and OAuth tokens are stored securely using encryption at rest. Access to production data is restricted to essential personnel only.

10. Your Rights

Depending on your jurisdiction, you may have the right to access, rectify, or delete the personal data we hold about you. You also have the right to withdraw consent at any time by disconnecting your accounts from our service.

To exercise any of these rights, please email us at support@potap.io.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at: