Privacy policy

Produce.so ("we", "our", "us") is an AI-powered video generation platform that helps content creators produce and publish videos directly to their YouTube channels. This Privacy Policy explains how we collect, use, store, and protect your personal information and any data accessed through third-party services such as Google and YouTube.

This policy applies to all users of the Produce.so platform, including our web application accessible at https://produce.so. By using our services, you agree to the terms of this Privacy Policy.

We collect the following categories of information:

Account Information

When you create an account on Produce.so, we collect your name, email address, and any other details you provide during registration. This information is used to manage your account and communicate with you about our services.

YouTube and Google OAuth Data

When you choose to connect your YouTube account, we initiate an OAuth 2.0 authorization flow with Google. Through this process, we may access and store the following:

• Your YouTube channel ID and channel name — used to identify and display your connected channel within our platform.
• OAuth access and refresh tokens — used to authenticate API requests on your behalf for uploading videos to YouTube. These tokens are encrypted at rest using AES-256-CBC encryption and stored securely in our database.
• A YouTube video ID and thumbnail URL — retrieved after a successful upload to provide you with a link to your uploaded video on YouTube.

We do NOT access, retrieve, or store any of the following YouTube data:

• View counts, likes, comments, or any engagement metrics
• YouTube analytics or audience data
• Your existing YouTube videos or channel content
• YouTube Shorts data or any other content beyond what is explicitly listed above

Video Files

Videos you generate using our AI tools are temporarily stored on our cloud infrastructure (AWS S3) during the creation and upload process. These files are streamed directly to YouTube upon upload and are not permanently cached or stored by us beyond the generation and upload workflow.

Usage and Technical Data

We may collect technical information such as your IP address, browser type, device identifiers, and usage patterns to improve platform performance, fix bugs, and ensure security. This data is anonymized and aggregated where possible.

We use the information we collect for the following purposes:

• Service Delivery — To power the core functionality of Produce.so, including video generation and uploading videos to your YouTube channel on your behalf.
• Authentication & Security — To verify your identity, manage OAuth sessions, and protect your account from unauthorized access.
• Platform Improvement — To analyze usage patterns, debug issues, and continuously improve our platform experience.
• Communication — To send you relevant notifications, updates, and support responses related to your account and uploads.
• Legal Compliance — To comply with applicable laws, regulations, and respond to lawful requests.

We do not use your data for advertising, profiling, or any purpose unrelated to the services described above.

Our integration with YouTube is strictly limited to uploading videos. Here is a transparent breakdown of how we interact with Google and YouTube APIs:

Upload Only

We use the YouTube Data API v3 exclusively to upload videos that you have generated or selected within our platform. We do not download, scrape, or bulk-access any YouTube content.

OAuth Token Storage

Your Google OAuth tokens (access token and refresh token) are stored encrypted in our database using AES-256-CBC encryption. These tokens are used solely to authenticate upload requests made on your behalf. Tokens are refreshed automatically and revoked immediately when you disconnect your YouTube account.

Data Accessed After Upload

After a successful upload, we retrieve only the YouTube video ID and a default thumbnail URL. This is used to display a confirmation link to you and to store a record of your upload history.

No Analytics or Metrics Access

We do not access YouTube Studio analytics, audience demographics, video performance data, or any metrics derived from YouTube. Our integration has no read access to your channel's content or statistics beyond what is required for the upload confirmation.

Disconnect and Revocation

At any time, you may disconnect your YouTube account from Produce.so. Upon disconnection, all stored OAuth tokens are immediately deleted, and we cease all API interactions with your YouTube channel. You may also revoke access directly through your Google Account settings at myaccount.google.com.

We retain your data only as long as necessary to provide our services or as required by law. The following retention periods apply:

• OAuth Tokens — Retained in encrypted form until you disconnect your YouTube account or delete your Produce.so account. Automatically purged if your account is inactive for more than 12 months.
• Channel Information (channel ID, channel name) — Retained until you disconnect your YouTube account.
• Upload History (video titles, dates, YouTube URLs) — Retained for up to 90 days for your reference. After 90 days, records are automatically deleted.
• Generated Video Files — Stored temporarily on AWS S3 during the creation and upload process. Files are deleted after the upload is completed or after 7 days if the upload is not initiated.
• Account and Usage Data — Retained for the lifetime of your account. Deleted within 30 days of account deletion upon your request.

We do not retain any YouTube analytics, metrics, comments, or content data.

We take the security of your data seriously and implement industry-standard measures, including:

• Encryption at Rest — All OAuth tokens and sensitive data are encrypted using AES-256-CBC before being stored in our database.
• Encryption in Transit — All communication between your browser, our servers, and third-party APIs (including Google and YouTube) is secured using HTTPS/TLS.
• Access Control — Only authorized personnel and systems have access to your data. Access is logged and audited regularly.
• Secure Infrastructure — Our platform is hosted on AWS with regular security updates, firewalls, and intrusion detection.

While we implement robust security measures, no system is entirely immune to breaches. We encourage you to use strong, unique passwords and enable two-factor authentication where available.

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers — We may share data with trusted third-party service providers (e.g., AWS for hosting, Firebase for real-time notifications) who assist in operating our platform. These providers are bound by confidentiality agreements and are not permitted to use your data for their own purposes.
• Legal Requirements — We may disclose information if required by law, court order, or governmental regulation.
• Business Transfers — In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you of any such transfer.
• With Your Consent — We will not share your personal data for any other purpose without your explicit consent.

Depending on your location, you may have the following rights regarding your personal data:

• Access — You may request access to the personal data we hold about you.
• Correction — You may request that we correct any inaccurate personal data.
• Deletion — You may request the deletion of your personal data, including all stored OAuth tokens, upload history, and account information. We will fulfill this request within 30 days.
• Portability — You may request your data in a machine-readable format.
• Revocation of Consent — You may revoke your consent to data processing at any time by disconnecting your YouTube account and deleting your Produce.so account.
• Disconnect YouTube — You can disconnect your YouTube account from within your Produce.so settings at any time. This will immediately revoke our access and delete all stored OAuth tokens.

To exercise any of these rights, please contact us at hello@produce.so.

We use cookies and similar technologies to improve your experience on our platform. These may include:

• Essential Cookies — Required for the platform to function correctly (e.g., session management, authentication).
• Analytics Cookies — Used to understand how users interact with our platform so we can improve it. Data collected is anonymized.

We do not use cookies for advertising or tracking across third-party websites. You can manage your cookie preferences through your browser settings.

Produce.so is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at hello@produce.so so that we can delete it.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Your continued use of Produce.so after any changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Produce.so

Email: hello@produce.so

Address: 21 Paul St, Panania, Sydney, NSW, Australia

Website: https://produce.so