Privacy Policy

2026-09-06

This policy explains what data Brandoers App (app.thebrandoers.com), operated by The Brand Doers Media S.R.L., processes and what your rights are. It is written for the people who use the App and for the owners of the social channels connected to it.

1. The App uses YouTube API Services

This App uses YouTube API Services to upload videos to the YouTube channel you connect.

By using the App you agree to the YouTube Terms of Service.

Google also processes data when we use these services. Please read the Google Privacy Policy.

2. What we collect and store

About the people who use the App:

  • Identity and contact: name, email address, role in the team.
  • Activity in the App: what you created, approved, published, and when.
  • The marketing content you write or upload: text, images, video.

3. What we receive from YouTube

When you connect a YouTube channel, authorisation happens through Google with a single scope: uploading videos (youtube.upload). It is a write-only scope. The App cannot read, and does not read, analytics, comments, subscribers, playlists or any audience data.

From YouTube API Services we store only:

  • the connected channel identifier (channel ID);
  • the channel name, so you can see which account you are publishing to;
  • the identifier of the video we uploaded (video ID);
  • the upload status returned by YouTube at upload time.

4. Authorisation tokens

The Google tokens that allow uploading are held encrypted by our publishing backend and are not stored in the App. They are used solely to upload the videos you approve, and they are deleted when the channel is disconnected.

5. How we use and share the data

We use the data to deliver the service: to prepare content, take it through approval, and publish it to the channels you choose.

We do not sell data. We do not use it for advertising. We do not share it with data brokers.

We share it only with the providers that make the App work, each with a strict role:

  • Leadaro — our publishing backend, which holds the tokens encrypted and performs the upload to YouTube and the other networks.
  • Vercel — application hosting.
  • Supabase — database and authentication, in the European Union (Ireland).
  • Cloudflare R2 — media file storage, in the European Union.
  • Anthropic and Google Gemini — AI assistance for drafting copy and transcribing the material our team uploads. Data received through YouTube API Services is not sent to AI providers.

6. Advertising and third-party content

The App shows no advertising and does not allow third parties to serve advertising or content inside it.

7. What we store on your device

The App uses strictly necessary cookies for authentication, that is, to keep your session open after you sign in. Without them you cannot sign in.

We also use the browser's local storage for interface preferences, such as the chosen language. We use no advertising cookies and we do not track users across sites.

8. How long we keep YouTube data

Data received through YouTube API Services is deleted or refreshed within 30 calendar days. A daily automated job enforces this: video identifiers and upload status older than 30 days are deleted from our database, and the channel name is refreshed or removed.

When a channel is disconnected, we delete the YouTube data associated with it immediately.

Other data, the data that does not come from YouTube, is kept for the duration of the contractual relationship and then according to our legal archiving obligations.

9. How to delete your data and revoke our access

Revoking access: you can withdraw the App's access to your Google account at any time from your Google account permissions page or from your Google security settings. Revoking stops any future upload immediately.

Disconnecting in the App: under Settings → Social accounts you can unlink the channel. The YouTube data stored for it is deleted on disconnect.

Deletion on request: write to us at office@thebrandoers.ro and we will delete your data, including any data received through YouTube API Services, within 7 calendar days.

10. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection under the GDPR. Write to us at the address below and we answer within 30 days. You also have the right to lodge a complaint with the Romanian data protection authority.

11. Contact

The Brand Doers Media S.R.L., Șos. Pipera 48A, București, România. Email: office@thebrandoers.ro. Phone: +40 728 158 077. Write to us with any question or complaint about your data or about our use of YouTube API Services.

12. Changes

We may update this policy. The current version and the date of the last revision are always shown at the top of the page.