Privacy Policy

Last updated November 5, 2026

This Privacy Policy explains how MyraidReach ("MyraidReach", "we", "us") collects, uses, stores, shares and deletes information when you use MyraidReach at https://app.myraidreach.com (the "Service"). The Service is the YouTube publishing workspace our social media agency uses to upload videos to YouTube channels whose owners have authorized us.

1. We use YouTube API Services

The Service uses YouTube API Services to upload videos to YouTube on behalf of channel owners who authorize it. By using the Service you agree to be bound by the YouTube Terms of Service. Google's handling of your information is governed by the Google Privacy Policy (http://www.google.com/policies/privacy).

2. Who this applies to

• Channel owners: people who connect a YouTube channel to the Service through Google sign-in.
• Team members: our agency staff, who sign in with an email and password.
• Visitors: people who browse our public pages or send a data-deletion request.

3. Information we access, collect and store

3.1 From Google / YouTube (when a channel owner authorizes the Service)

We request only these OAuth scopes:

• https://www.googleapis.com/auth/youtube.upload ("Manage your YouTube videos"): used only to upload the videos you approve (videos.insert) and to set their custom thumbnails (thumbnails.set).
• https://www.googleapis.com/auth/youtube.readonly ("View your YouTube account"): used only to read your channel's ID, title, handle and profile image (channels.list) so that you and our team can see exactly which channel is connected. It is also used to check the processing and visibility status of videos we uploaded for you (videos.list).

From these we store: your YouTube channel ID, channel title, handle and profile image URL; an OAuth refresh token (encrypted); the list of permissions you granted; and, for each video we upload, the YouTube video ID and its upload and visibility status. We do not receive or store your Google password, your email address, your contacts, your watch history, your comments, analytics, or any other YouTube data.

3.2 Content and settings you ask us to publish

Video files, thumbnail images, titles, descriptions, tags, category, visibility, scheduled time, "made for kids" declaration and altered/synthetic content disclosure, as provided by you or by our team on your instructions.

3.3 Team-member and visitor information

Team members: name, email, password hash (Argon2), role, sign-in times. Visitors who request deletion: the email, channel details and message they submit. For security we log IP addresses and actions in an audit log.

3.4 Cookies and device storage

We use a single strictly necessary, encrypted session cookie (mr_session) to keep team members signed in and to protect forms against cross-site request forgery. We do not use advertising, analytics or tracking cookies, and we do not store or access any other information on your device.

4. How we use information

• To upload the specific videos you have asked us to publish, with exactly the metadata and settings provided, to the channel you authorized. Every upload is shown on a review screen and confirmed by a person before it is sent.
• To show you and our team which channel is connected and the status of uploads.
• To keep the Service secure, prevent abuse and meet our legal and YouTube API compliance obligations.

We do not use YouTube API data for advertising, we do not sell it, we do not build profiles, and we do not combine it with data from other platforms. We do not change any value you provided (for example, we never append text to descriptions or change a video's visibility) without your express instruction.

5. How we share information

• Google / YouTube: video files and metadata are sent to YouTube when you instruct us to publish them.
• Agency team: authorized MyraidReach staff working on your account can see your connected channel's name and the uploads made for it. Channel data is shown only to the channel owner and to agents the owner has approved (our agency team).
• Infrastructure providers: our hosting provider stores our encrypted database and encrypted temporary media, under confidentiality obligations.
• Legal: if required by law or to protect rights and safety.

We do not share YouTube API data with any other third party, and we do not show third-party advertising.

6. Storage, security and retention

• OAuth tokens are encrypted at rest with AES-256-GCM and are never shown to anyone, including our team.
• Video and thumbnail files are encrypted on disk while queued and are deleted as soon as YouTube accepts them. Files never confirmed for upload are deleted within 7 days.
• Channel data and video status data obtained from the YouTube API are refreshed at least every 30 days, or deleted. If a video is removed from YouTube, we delete its stored YouTube data.
• We check every day that each authorization is still valid. If access has been revoked, we delete that channel's data.
• All traffic uses HTTPS (TLS). More detail is on our Security page.

7. Your choices: revoking access and deleting data

• Revoke via Google: you can remove MyraidReach's access to your data at any time on the Google security settings page: https://security.google.com/settings/security/permissions. We detect this within 24 hours and delete your channel's data, always within 30 days at the latest.
• Disconnect in MyraidReach: use the private "manage" link you received when you connected, or ask our team. We immediately revoke the token at Google and delete all data we hold for that channel, always within 7 days at the latest.
• Request deletion: use our data deletion form or email contact@myraidreach.com. We delete your data as soon as possible and within 7 days.

Deleting data from MyraidReach does not delete videos already published on YouTube. You manage those in YouTube Studio.

8. Children

The Service is for businesses and adult channel owners and is not directed at children under 13 (or the minimum age in your country). For each upload we pass on the "made for kids" declaration you provide to YouTube, as YouTube requires.

9. International users and your rights

Depending on where you live (for example, under the GDPR or the CCPA), you may have the right to access, correct, delete or export your personal data, or to object to its processing. Contact us to exercise these rights. We respond within 30 days, and within 7 days for deletion.

10. Changes

If we change how we use YouTube API data, we will update this policy and ask channel owners to agree again before the new use applies.

11. Contact

Questions or complaints: contact@myraidreach.com
MyraidReach