Privacy Policy

Curios Vault · Effective date: 25 August 2026

This policy explains what data Curios Vault ("the Service") accesses and how it is used. The Service is a private, single-operator publishing tool. It operates only on social accounts that the operator owns and has explicitly authorized (currently YouTube, TikTok and Instagram), to upload the operator's own videos and read those videos' own statistics. It has no other users.

1. YouTube API Services

The Service uses YouTube API Services. By using the Service you also agree to the YouTube Terms of Service, and Google's Privacy Policy applies to data accessed through YouTube API Services.

Through YouTube API Services the Service uses only these scopes, on the operator's own channel:

• youtube.upload — to upload the operator's own videos and set their metadata (title, description, tags, privacy).
• youtube.readonly — to read the public statistics (views, likes, comments) of the operator's own uploaded videos.

The Service does not access, collect, store, or display any third party's YouTube data, and it does not use YouTube data for advertising or to build user profiles.

2. Other platforms

On TikTok and Instagram (Meta) the Service likewise uses the platforms' official APIs only to upload the operator's own videos to the operator's own accounts and to read those accounts' own statistics. The same principles below apply to all platforms.

3. Data we access

• Basic account information: a stable account identifier and public display name, used only to confirm which authorized account a video is uploaded to.
• Authorization tokens: the access and refresh tokens issued when you authorize the Service, used to act on your behalf.
• The operator's own video content and its public statistics.

4. How we use it

Data is used solely to upload the operator's own videos to the authorized accounts and to report those videos' own performance back to the operator. The Service does not build advertising profiles and does not access private messages, contacts, or browsing activity.

5. Sharing

We do not sell, rent, or share your data with third parties. Data is exchanged only with the destination platform's official API (YouTube, TikTok, Meta) to perform the action you requested.

6. Storage, retention and deletion

Authorization tokens and the fetched statistics are stored privately on the operator's own machine and server, and are kept only as long as needed to operate the Service. They are never made public. You can have all stored data deleted at any time by revoking access (below) and emailing the contact address; revoked tokens are removed and stop working immediately.

7. Revoking access

You can revoke the Service's access at any time:

• YouTube / Google: at myaccount.google.com/permissions (Google Account → Security → Third-party access).
• TikTok: Settings → Security & permissions → Manage app permissions.
• Instagram / Meta: Settings → Apps and websites.

Once revoked, the stored tokens stop working immediately.

8. Contact

Questions about this policy or your data, or to request deletion: thecuriosvault@gmail.com.