Privacy Policy

Last updated: 2026-08-10

1. What this is

Patchbay is a personal video-publishing tool: you upload a video once, write a caption for Instagram, TikTok, and YouTube Shorts, and publish to whichever of those you've connected. This policy explains what data the app touches and what happens to it.

2. What we collect

Account info: the email address and password (or Google account) you sign in with, via Firebase Authentication. Content you upload: video files, generated thumbnails, captions, titles, and hashtags you enter. Platform connections: for each social platform you connect, we store your handle, display name, profile picture URL, and an access token issued by that platform. We do not collect payment information, browsing history outside this app, or data from any source you didn't directly provide.

3. How platform access tokens are handled

When you connect Instagram, TikTok, or YouTube, the platform issues an access token scoped only to what's needed to publish and read basic stats for content you post through this app — never broader account access. That token is encrypted (AES-256-GCM) before it's stored, decrypted only in memory on the server for the single API call that needs it, and never sent back to your browser or logged in plaintext. Disconnecting a platform in Settings deletes its stored token immediately.

4. How your data is used

Your data is used solely to operate the app for you: authenticating your session, storing your videos/captions/hashtag groups so you can reuse them, and calling each connected platform's official API to publish content and fetch stats on your behalf — only when you explicitly trigger an upload or a refresh. We do not sell, rent, or share your data with advertisers or any other third party, and we do not use your content or platform data to train any model.

5. Where data lives

Everything is stored in a Firebase project (Firestore for records, Firebase Storage for video/thumbnail files), scoped per-account — security rules restrict every read and write to the signed-in user's own data; no user can read another user's videos, captions, or connected-account tokens.

6. Data retention and deletion

Disconnecting a platform (Settings → Connected accounts → Disconnect) immediately deletes that platform's stored token. Deleting a hashtag group removes it immediately. To delete your account and all associated data (videos, captions, history, connected-account records), contact the address below — this is handled manually rather than through an automated in-app flow today.

7. Third-party platforms

Instagram, TikTok, and YouTube each have their own privacy policies and terms governing how they handle content you publish through this app; connecting an account means you're also bound by that platform's own terms.

8. Children's privacy

Patchbay is not directed at, and is not knowingly used by, children under 13.

9. Changes to this policy

If this policy changes in a material way, the date below will be updated.

10. Contact

Questions about this policy or a data deletion request: serser6669@gmail.com