Privacy Policy
This policy explains how BOOST (“we”, “us”), operated by Abdulrhman Alharbi in Makkah, Saudi Arabia, handles data. It is written so that reviewers of the YouTube API Services, the TikTok developer platform (Content Posting API) and Meta App Review can see what data is accessed, why, how long it is kept, and how access is revoked or deletion requested.
Scope. Our applications publish content only to the owner’s own YouTube, TikTok and Instagram accounts. They are not a public service: members of the public are not asked to sign in with Google, TikTok or Meta.
1. Who is responsible
Abdulrhman Alharbi (BOOST), Makkah, Saudi Arabia, is the data controller. Contact: abdulrhmanalharbi87@gmail.com.
2. Data we access and why
| Data | Source | Purpose |
|---|---|---|
| OAuth access and refresh tokens | The owner, when authorising YouTube, TikTok and Instagram | Act on the owner’s own accounts only |
| YouTube channel and video data (IDs, titles, descriptions, thumbnails, captions, privacy status, comments posted by the owner) | YouTube Data API | Upload and manage videos on the owner’s own channel |
| Analytics (views, watch time, retention, engagement) | YouTube Analytics API, TikTok, Instagram Insights | Measure performance of the owner’s own content and plan what to publish next |
| TikTok account info and video publishing | TikTok Content Posting API | Publish (or save as draft) the owner’s videos on the owner’s TikTok account |
| Instagram professional account data and media publishing | Instagram Graph API (Meta) | Publish Reels/posts and read insights for the owner’s account |
| Google account email and basic profile (only if returned with the grant) | Google OAuth | Identify which channel a token belongs to |
| Email you send us | You | Reply to your message or handle your request |
This website itself does not have accounts, sign-in or forms, and we do not buy data or ask visitors to connect any account.
3. Google API Services User Data Policy & Limited Use
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We use Google user data only to provide or improve the user-facing features described here: uploading and managing the owner’s videos, thumbnails and captions, posting the owner’s comments, and reading analytics for the owner’s channel.
- We do not transfer Google user data to others except as necessary to provide or improve these features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to the user.
- We do not use or transfer Google user data for serving advertisements, including retargeting, personalised or interest-based advertising.
- We do not allow humans to read Google user data unless we have the user’s affirmative consent, it is necessary for security purposes (e.g. investigating abuse), to comply with law, or the data is aggregated and anonymised for internal operations.
- We do not use Google user data to train generalised AI/ML models.
By using YouTube features through our application you agree to the YouTube Terms of Service. Google’s handling of data is described in the Google Privacy Policy. We also follow the YouTube API Services Terms of Service.
4. TikTok and Meta
TikTok tokens are used only for the Content Posting API (draft or direct post) and video analytics on the owner’s account. Instagram tokens are used only to publish content and read insights for the owner’s professional account. This data is used to run the owner’s channels, not to build advertising profiles, and it is never sold.
5. No selling or sharing
We do not sell, rent or trade personal data. We share data only with the platform it came from (to perform the action you authorised), with infrastructure providers that host our tools under confidentiality, or when required by law.
6. Retention
- OAuth tokens: until access is revoked or the integration is removed.
- Analytics data: up to 24 months, then deleted.
- Operational logs: up to 90 days, then deleted.
- Emails: as long as needed to handle your request.
7. How to revoke access
- Google / YouTube: visit Google Account → Security → Third-party access (https://myaccount.google.com/permissions) and remove the app.
- TikTok: TikTok app → Settings and privacy → Security → Manage app permissions → remove the app.
- Instagram / Facebook: Settings → Apps and websites (or Business integrations) → remove the app.
Revocation stops new access immediately; we then delete our stored tokens.
8. Data deletion requests
Email abdulrhmanalharbi87@gmail.com with the subject “Data deletion request” and the account(s) concerned. Within 30 days we will delete the tokens, analytics and logs we hold that relate to the request and confirm in writing. Content already published on YouTube, TikTok or Instagram stays there until removed in that platform.
9. Cookies
This website does not use advertising or tracking cookies and sets no cookies of its own. Our hosting provider (Cloudflare) may process technical data such as IP addresses for security and performance. When you click an affiliate link, the merchant (e.g. Systeme.io, Make, ElevenLabs, Hostinger) may set its own cookies under its own policy.
10. Security
Tokens and keys are stored as protected secrets, never in public code or video descriptions, and are transmitted over HTTPS.
11. Children
Our services are not directed at children under 13 and we do not knowingly collect their data.
12. Changes
We will update this page and its effective date when this policy changes materially.
13. Contact
Abdulrhman Alharbi — BOOST, Makkah, Saudi Arabia · abdulrhmanalharbi87@gmail.com