1. Operator and scope
BeyondCurious-Auto is operated by the owner of the Beyond Curious YouTube channel. Contact kr657858@gmail.com for questions about this policy, access or deletion. This policy describes the existing Telegram review workflow and the prepared Cloud-v1 scheduling extension. Cloud-v1 is not yet activated.
2. YouTube API Services and Google authorization
The application uses YouTube API Services and Google OAuth. The cloud extension requests https://www.googleapis.com/auth/youtube.force-ssl to check channel ownership, read video metadata, privacy, processing status and planned publication time, and set a future publication time after the owner's two-step confirmation. The scope can permit more operations than this application performs. The cloud module does not delete videos or post comments.
OAuth takes place on Google pages. The application does not request or store your Google password. Google handles information under the Google Privacy Policy. Use of YouTube is also subject to the YouTube Terms of Service.
3. Information handled
Operational records include channel and video IDs; video titles and descriptions supplied for review; MP4 hashes and quality summaries; proposed and confirmed publication times; review decisions, timestamps, processing/privacy status and bounded error codes. Telegram supplies owner/chat identifiers and callback or command information used to authorize actions. Private MP4 previews and review messages are sent to the owner's Telegram chat. OAuth access and refresh credentials enable authorized API requests.
The existing integration can retain system telemetry and summaries of channel analytics supplied by the local system. The cloud scheduler reads only the channel and video information needed for scheduling and reconciliation; it does not independently collect the audience's personal Google accounts.
4. Storage and recipients
Approval records, scheduling reservations and supplied telemetry use Cloudflare D1. The prepared separate OAuth credential is currently encrypted locally using Windows DPAPI. If the owner authorizes cloud activation, the cloud OAuth credentials are intended to be stored as Cloudflare Worker secrets. Tokens are not intentionally included in application reports or messages; this is not a guarantee against every security incident.
Google/YouTube processes OAuth and video API requests. Cloudflare hosts the Worker and database. Telegram processes preview videos, messages and button interactions. The application's scheduling path does not sell user information or use YouTube API data for advertising or AI model training. The bot's optional AI drafting features are separate from this scheduling path.
5. Retention and deletion — current implementation
Review expiry and short-lived confirmation limits prevent stale actions; they do not automatically delete database records. Current staging code does not implement a comprehensive automatic deletion or retention policy for review history, backups or copies in Telegram. Records may remain until the operator removes them. No claim of automatic deletion after seven days is made.
To request deletion or stop use, contact kr657858@gmail.com. Requests require manual operator handling. Before production activation, the operator must approve and implement a procedure meeting applicable Google/YouTube retention and deletion requirements, including handling revocation and requests. This operational gap is disclosed here rather than presented as an implemented guarantee.
6. Revoke access
You can revoke the application's Google access at Google Account third-party connections or the Google permissions page. Revocation stops future authorized API access when the credential is no longer accepted; it does not itself erase D1 records, Telegram messages, backups or videos stored by YouTube. Request removal of application-held records from the operator.
A publication schedule already saved in YouTube may still run after app access is revoked. Review or cancel that schedule directly in YouTube Studio if needed. The application does not claim to cancel it automatically.
7. This informational website
These static pages contain no login form, analytics script, advertising pixel, embedded video, cookies or browser storage code. The hosting provider may process ordinary request/network information to deliver and secure the site, subject to its configuration and policies. External links take you to those providers' sites.
8. Changes and contact
Material changes to data use should be reflected on this page. This informational website is public. Cloud-v1 automated scheduling is not yet activated; this policy does not claim otherwise. Contact: kr657858@gmail.com.