Privacy policy

SocialAI helps authorized channel owners review and respond to YouTube comments. Google sign-in checks your verified email against the owner allowlist. YouTube access is authorized separately and can be disconnected at any time.

The application stores channel identifiers, comment text and author information, draft replies, reading references, settings, and recent activity in its configured PostgreSQL database. OAuth refresh tokens are encrypted at rest. Session cookies are signed and HTTP-only.

Comment text is sent to the configured OpenAI model to classify comments and propose replies. Requests disable response storage through the API’s store setting; OpenAI’s applicable API data policies still apply. When enabled by the owner, question text is also sent to the configured readings retrieval service. No video or audio is downloaded.

Stored comments, drafts, and activity are deleted after 29 days by scheduled cleanup. Disconnect & delete data on the Channels page removes stored channel data, credentials, and related records immediately from the active database. Published YouTube replies remain on YouTube. Operator-managed database backups follow the database provider’s backup retention policy.

You can also revoke authorization through Google account permissions. If SocialAI detects revoked authorization, it removes the stored channel and associated data. The operator must keep scheduled cleanup running and handle any deletion requests through the channel’s usual contact route.

This application uses YouTube API Services. See the Google Privacy Policy and YouTube Terms of Service. This is a private owner-operated tool and is not affiliated with Google or YouTube.