Privacy Policy
Application: Hanya YouTube Autopublish · Last updated: 25 October 2026
1. Who we are
Hanya YouTube Autopublish (the “Application”) is an internal publishing tool operated by Hanya Investment (“we”, “us”), Beijing, China. The Application is used solely by us to upload our own video content to our own YouTube channel.
Contact for all privacy matters: law@hanya.cn
2. What the Application does
The Application connects to the YouTube Data API v3 using Google OAuth 2.0 in order to:
- upload video files that we ourselves have produced to our own YouTube channel;
- set titles, descriptions, tags, thumbnails and playlists on those videos;
- read back the status of our own uploads so we can detect failures.
3. What data we handle
| Data | Purpose | Storage & retention |
|---|---|---|
| Google OAuth credentials (client ID and client secret) for our own Cloud project | Identify the Application to Google | Held on our own server, access-restricted |
| OAuth refresh token issued by Google for our own account | Keep the upload authorisation valid without repeated manual sign-in | Held on our own server in an encrypted vault with file permissions 0600; retained until we revoke it |
| Video files and metadata (title, description, tags) that we produce ourselves | Upload to our own YouTube channel | Stored on our own server; deleted after successful upload according to our retention schedule |
| Upload log records (video ID, timestamp, status) | Operational troubleshooting and quota accounting | Stored on our own server; retained for up to 12 months |
4. What we do not do
- We do not sell, rent or trade any data.
- We do not share data with third parties, except with Google LLC as the operator of the YouTube API, as strictly required for uploading.
- We do not use data for advertising, profiling or automated decision-making.
- We do not collect analytics about visitors to this page.
- We do not use cookies on this page.
5. Google API Services User Data Policy
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google APIs is used only to provide the upload functionality described in section 2, is not transferred to others except as necessary to provide that functionality or as required by law, and is not used for advertising.
6. Security
Credentials are stored on infrastructure we control, protected by file-system permissions and full-disk encryption. Access is limited to authorised personnel of Hanya Investment. Transmission to and from Google uses HTTPS/TLS. We do not store Google account passwords.
7. Revoking access and deleting data
Access can be revoked at any time at https://myaccount.google.com/permissions, which immediately invalidates our stored refresh token. To request deletion of any data described in section 3, email law@hanya.cn; we will action the request within 30 days.
8. Children
The Application is not directed to children and does not intentionally collect data from children.
9. Changes to this policy
We may update this policy. The “Last updated” date above will reflect any revision, and material changes will be announced on this page.
10. Contact
Hanya Investment · Email: law@hanya.cn · Web: hanyabuy.com