Privacy Policy
Last updated: May 2026
1. Information We Collect
When you sign in with Zoom, we receive your Zoom profile information (name, email address, Zoom user ID). We also access your Zoom cloud recordings metadata and video files when processing them for YouTube upload.
When you connect YouTube, we receive an OAuth token that allows us to upload videos and manage playlists on your behalf.
2. How We Use Your Information
- Authenticate you and manage your account
- Download your Zoom cloud recordings
- Generate video titles, descriptions, and tags using AI
- Upload processed videos to your YouTube channel
- Send you email notifications about upload status
3. Data Storage & Security
OAuth tokens are encrypted at rest using AES-256-GCM. Recording video files are downloaded temporarily for processing and deleted immediately after upload. We do not store your video content permanently.
User data is stored in a PostgreSQL database with encrypted connections. All API communication uses HTTPS.
4. Data Sharing
We do not sell your personal information. We share data only with the following third-party services necessary to provide the app:
- Zoom — to access your recordings (via API)
- YouTube/Google — to upload videos (via API)
- OpenAI — to generate video metadata (recording topic and duration are sent; no video content is shared)
5. Data Retention & Deletion
When you disconnect PublishFlow from your Zoom account or deauthorize the app, we delete your OAuth tokens and revoke all sessions. You can request full account deletion by contacting support.
Recording metadata (titles, status, timestamps) is retained for your dashboard history. Video files are never stored beyond the processing window (typically under 30 minutes).
6. Your Rights
You can access, export, or delete your data at any time through the Settings page or by contacting us at the support email below.
7. Contact
For privacy questions, email us at privacy@publishflow.app.