Publisher Privacy Notice

Who we are

Publisher is a SiteLift-operated customer workspace product for short-form video scheduling across approved workspaces. Access is controlled by account login, admin approval, workspace roles, rate limits and audit logs.

Data controller: Malik Roland egyeni vallalkozo, 2800 Tatabanya, Szabo Ignac utca 5. B. em.: FS ajto: 3., Hungary. Tax number: 92019175-1-31. Registration number: 62254809. Contact: info@sitelift.hu.

Data we process

• Account identity: name, email address, login provider identifier and approval status.
• Workspace data: member roles, invited users, audit events, settings and operational flags.
• Content data: uploaded media, filenames, metadata, draft text, captions, hashtags and schedules.
• Social account data: platform account IDs, display names, granted scopes and token status.
• Technical data: request timing, rate-limit decisions, error codes and security audit records.

Google API data

Google Sign-In is used for account login. Publisher may receive your Google account email, name and profile image so it can create or locate your approved Publisher account.

When you connect YouTube Shorts, Publisher asks for YouTube upload permission. That access is used only to connect your channel and upload videos that you create, approve or schedule from your own workspace.

Requested YouTube scope: https://www.googleapis.com/auth/youtube.upload.

Google access tokens and refresh tokens are stored server-side in encrypted form. They are never shown in the web app, CLI output, audit logs or support views.

Publisher's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use data

• Authenticate approved users and keep each workspace isolated.
• Prepare, schedule and publish user-approved short-form video posts.
• Generate optional AI-assisted titles, captions, descriptions and hashtags.
• Protect the service with rate limits, abuse review, audit trails and operational diagnostics.
• Show account connection state without exposing credentials.

Data sharing

Publisher sends content and metadata to connected social platforms only when needed for the user-requested scheduling or publishing workflow. Optional AI processing may send draft text or media metadata to a configured AI provider, but not social access tokens. If AI processing is enabled for a workspace, the active provider and processing path are documented in that workspace setting before production use.

Publisher does not sell Google user data or use it for advertising profiles.

Retention and removal

Workspace content is kept while the workspace is active. Operational audit records are kept for up to 24 months after workspace deactivation unless a longer period is required for security review, dispute handling or legal compliance. Account and workspace removal requests are reviewed within 30 days.

Disconnecting a social account revokes its active Publisher connection and prevents future scheduled jobs from using it. You can also remove Publisher's Google access from your Google Account permissions page at https://myaccount.google.com/permissions.

To request account, workspace or connected-account removal, contact info@sitelift.hu.

Security

Publisher keeps social credentials server-side, encrypts token vault data, redacts secret material from responses, and records sensitive actions in audit logs.

Age limitation

Publisher is not directed to users under 16.