Privacy Policy

1. Overview

YSRCP Communications ("we", "our", "us") is a platform that enables users to manage and participate in social media campaign workflows through a simple, authenticated experience. We are committed to protecting your privacy and handling your data transparently.

2. Information We Collect

When you sign in with Google, we collect:

• Profile information: Your name, email address, and profile picture from your Google account.
• Authentication credentials: Securely encrypted authorization tokens that allow the app to post comments on your behalf. These tokens are encrypted using AES-256-GCM and are never shared with third parties. You can revoke access at any time.
• Activity records: A log of comments you have posted through our platform, including the video identifier, your comment text, and the time of posting.

3. How We Use Your Information

• Authentication: To verify your identity and manage your session.
• Video notifications: We share YouTube video links with users and provide a convenient interface for them to write and post their own comments.
• Posting comments: To post comments to YouTube on your behalf when you explicitly click the "Post Comment" button. Comments are never posted automatically.
• Activity tracking: To show you your comment history and provide admins with engagement reports.

4. Data Storage & Security

• OAuth tokens are encrypted at rest using AES-256-GCM encryption.
• All data is stored in a secure database with access controls.
• We use HTTPS for all data transmission.
• Session cookies are httpOnly and secure, preventing client-side access.

5. User Consent & Control

• Comments are never posted automatically. You must review and explicitly click "Post Comment" for each comment.
• You can edit the suggested comment before posting.
• You can view your complete comment history on the Activity page.
• You can revoke YSRCP Communications' access at any time through your Google Account permissions.

6. Data Sharing

We do not sell, rent, or share your personal data with any third parties. Your data is only used to provide the YSRCP Communications service. The only external service we interact with is the YouTube Data API v3 to post comments on your behalf.

7. Data Retention

We retain your account information and comment history for as long as your account is active. You may request deletion of your data by contacting us. Upon account deletion, all associated data including OAuth tokens and comment history will be permanently removed.

8. YouTube API Services

YSRCP Communications uses the YouTube Data API v3. By using our service, you also agree to be bound by the YouTube Terms of Service and Google Privacy Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated date. Continued use of the service after changes constitutes acceptance of the updated policy.