1. Scope
Ghosty Publisher is an internal AI-assisted video production and publishing tool operated by Onyx. It is currently used only by authorized Onyx operators to publish original or properly licensed content to company-operated or expressly authorized YouTube channels.
By using Ghosty Publisher, users also agree to be bound by the YouTube Terms of Service and acknowledge the Google Privacy Policy.
2. Information we access
After an authorized user grants access through Google OAuth 2.0, Ghosty Publisher may process the minimum information necessary to perform requested channel operations:
- OAuth access and refresh tokens issued by Google;
- the authenticated channel identity and authorization status;
- video files and metadata selected by the operator, including titles, descriptions, tags, thumbnails, audience settings, visibility settings, and playlist identifiers;
- upload results, such as the resulting YouTube video identifier and processing status.
Ghosty Publisher does not collect Google passwords, viewer browsing histories, contacts, payment information, or data from unauthorized channels.
3. How information is used
Information obtained through YouTube API Services is used only to authenticate authorized operators; upload completed videos; set operator-approved metadata and thumbnails; organize uploaded videos into playlists; and confirm the result of an operator-requested action.
Onyx does not sell YouTube user data, use it for targeted advertising, build user profiles, manipulate engagement, or share it with data brokers.
4. Storage and security
OAuth credentials are stored only in access-controlled local or server environments used by authorized Onyx operators. Reasonable technical measures, including restricted file permissions and limited operator access, are used to protect credentials and upload records.
No system can guarantee absolute security. Onyx limits retained information to what is reasonably necessary for authorized publishing and operational troubleshooting.
5. Sharing and third parties
Ghosty Publisher transmits data to Google and YouTube only as required to perform actions requested by the authorized operator. Onyx does not disclose YouTube user data to unrelated third parties, except where required by law or necessary to protect the security and integrity of the service.
Google's handling of data is governed by the Google Privacy Policy.
6. Control, revocation, and deletion
Authorized users can revoke Ghosty Publisher's access at any time through the Google Account permissions page. Revoking access prevents future API operations until authorization is granted again.
Users may request deletion of locally stored OAuth credentials and related API data by contacting the Onyx operator responsible for the deployment. Onyx will delete applicable user data within 30 days of a verified request, unless retention is required by law. Operators may also delete the local authorization token directly from the Ghosty Publisher deployment.
7. Data retention
OAuth credentials are retained only while authorization is active and operationally required. Upload logs and resulting video identifiers may be retained for operational records. Data obtained from YouTube API Services is refreshed or deleted in accordance with the YouTube API Services Developer Policies.
8. Children
Ghosty Publisher is an internal professional tool and is not directed to children. Onyx does not knowingly collect personal information from children through this service.
9. Policy changes
This policy may be updated to reflect product, legal, or policy changes. The effective date above will be revised when material changes are published.
10. Contact
Privacy and data-deletion requests should be directed to the authorized Onyx representative identified in the applicable Google API compliance submission.