Legal
Effective June 11, 2026
This Privacy Policy explains what information Autoretto (“we”, “us”) collects, how we use and share it, and the choices you have. It applies to the Autoretto website, studio, automation tools, and related services (the “Service”). By using the Service you agree to this Policy and our Terms of Service.
We use information to operate and improve the Service: to authenticate you, store your configuration, generate and render releases, evaluate releases against platform policies before publishing, publish to channels you connect, provide analytics and self-optimization, process payments, prevent abuse, and meet legal obligations.
We rely on third parties strictly to deliver the Service. These include Google/YouTube (authentication, channel data, and uploads), Supabase (authentication and database), Stripe (payments), and generative-AI providers (audio, image, and text generation, and the pre-publish policy evaluation). Their handling of data is governed by their own privacy policies. We share only what is necessary for the requested operation.
We request these permissions progressively under the principle of least privilege, never all at once. When you first connect a YouTube channel, Autoretto asks Google for the upload scope only, which is all publishing requires. The analytics scope and the channel-management scopes below are requested later, incrementally, and only when you enable the features that use them. Here is each scope, in plain language, and exactly what we use it for - nothing more:
How the authorization is protected: Google hands Autoretto a refresh token scoped to exactly these permissions. That token is sealed with authenticated encryption (AES-256-GCM) the moment it reaches our server - we store only ciphertext and can never read the credential directly. It is decrypted in-process, only to mint short-lived access tokens for the actions you configured, and it is never returned to any browser, written to logs, or exposed in responses.
You stay in control: you can revoke the grant at any time from your Google Account third-party access settings, remove individual scopes there, disconnect the channel inside Autoretto, or delete your Autoretto account. Disconnecting inside Autoretto calls Google's token-revocation endpoint and deletes the stored encrypted token, so the grant also disappears from your Google Account list and no copy of the credential remains with us. Account deletion does the same revoke-and-delete and additionally erases your stored data (see Section 7). Declining the optional scopes still leaves publishing fully functional.
Connected-platform refresh tokens are encrypted at rest using authenticated encryption (AES-256-GCM) and are decrypted only in-process to mint short-lived access tokens for the actions you configured. Credentials are never returned to the browser and are never exposed in client-side code.
We use cookies and browser local storage that are necessary to keep you signed in, remember your preferences (such as your light/dark theme choice), and operate the studio. We do not sell your personal information.
We retain account, configuration, and release data for as long as your account is active or as needed to provide the Service, then delete or anonymize it within a reasonable period unless a longer retention is required by law.
Disconnecting a connected platform: disconnecting YouTube inside Autoretto immediately revokes the OAuth grant at Google and deletes the stored encrypted refresh token. Nothing else about your account changes.
Deleting your account: you can delete your account at any time from the studio. Account deletion revokes and deletes your connected-platform tokens, removes your profile and the data linked to it (channel configuration, generations, billing records, activity logs), erases your release history and pipeline state, and deletes your authentication identity. This is a permanent, irreversible erasure of the personal data we hold, performed promptly on request.
Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and you may revoke connected-platform access at any time from your Google Account or the studio. To exercise these rights, contact us at the address below.
The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children.
We may process and store information in the United States and other countries. By using the Service you consent to the transfer of your information to jurisdictions that may have different data-protection rules than your own.
We may update this Policy. Material changes will be communicated through the Service or another reasonable method, and continued use after the effective date constitutes acceptance.
Questions about this Policy may be sent to support@autoretto.org.