Creator Automation privacy notice
Effective October 28, 2026.
This notice covers Tito Creator Automation, the private desktop YouTube connection, analytics and approved publishing tool. It does not replace the privacy notice for Tito Peso's public website or calculators. Contact the operator at mediamonks@gmail.com.
What the tool accesses and why
The adult owner chooses a Google account and consents directly with Google. The tool requests https://www.googleapis.com/auth/youtube.readonly, https://www.googleapis.com/auth/yt-analytics.readonly, and https://www.googleapis.com/auth/youtube.force-ssl. It uses these permissions to verify the owner's selected channel and obtain read-only channel performance reports. Current reports include daily views, estimated minutes watched, average view duration and subscriber gains and losses. The management scope supports owner-approved private uploads, thumbnails, metadata changes, scheduling and publication. Google describes this permission as including editing and permanent deletion of videos, ratings, comments and captions. This app exposes no deletion, rating, comment or caption operations. It does not request Gmail, Drive or monetary analytics permissions.
The tool stores OAuth access and refresh credentials, their scope and expiry information, and the verified channel identity so it can maintain the authorized connection. Google passwords are not collected by the tool.
Storage, access and use
Publishing jobs also use the owner-supplied video and thumbnail, their SHA-256 hashes, titles and descriptions, audience and synthetic-media disclosures, privacy settings and schedule. A local queue binds approval to these exact details. Files and metadata are sent to YouTube only for an approved operation. Changing the approved details requires a new review; an approval field inside a submitted manifest is not accepted as owner authorization.
Connection records are encrypted locally using AES-256-GCM, with their encryption key held in macOS Keychain. Local files have restricted permissions. The desktop OAuth client configuration is held in a separate restricted local file. Credentials are not placed in the public website or source repository, and the tool suppresses raw credential details in logs.
Queue records, including resumable upload session information, are encrypted locally. Video and thumbnail snapshots are stored as permission-restricted local files; those media files are not encrypted by the queue. Local audit records contain job hashes, event names and video IDs, not credentials or resumable session URLs. Queue records, files and audit history are retained until the operator removes them; no automatic deletion period is implemented.
The current command-line tool displays requested channel checks and reports to the operator; it does not maintain a separate analytics database. Reports or summaries saved by the operator, including in an authorized assistance session, may persist in those locations. Connection records remain until removed; there is no automatic retention-period deletion in the current tool.
Google receives authorization, token and API requests necessary to provide the connection, reports and approved publishing operations. Videos, thumbnails and metadata are shared with YouTube as directed by the owner’s approval; public or unlisted release settings determine how viewers may access that content. Data is used for the owner's channel administration. It is not sold or used for advertising or general-purpose AI model training. The operator must not share Google user data beyond the uses permitted by Google's policy and the owner's authorization. Public information pages contain no channel credentials or private analytics.
Tito Creator Automation's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. The tool uses YouTube API Services; Google's Privacy Policy describes Google's own practices.
Control, revocation and deletion
The owner can remove this app's access through Google Account connections. The local tool also offers an explicit revoke command that requests Google revocation and removes its local connection record after successful revocation. Revocation may affect other connections for the same app and Google account.
The explicit local-removal command deletes the selected encrypted connection record but does not revoke Google access. Queue media, job records, audit history, separately saved reports, backups and assistance-session records must be removed from their respective locations; local removal does not erase them or delete YouTube content. Contact the operator for assistance with records under the operator's control. Removal of local queue data does not remove videos or cancel schedules already accepted by YouTube. Manage those separately in YouTube Studio. No fixed deletion turnaround is promised.
Adult-owner use
The integration does not request children's Google-account data or provide child-facing account sign-in. Aggregate channel reports are not individual children's profiles. Any material change in data use or permissions must be reflected in this notice before the new use begins.