Legal
Privacy Policy
Effective date: July 2, 2026 · Last updated: July 2, 2026
1. Who we are
ContentPilot AI ("ContentPilot," "we," "us," or "our") is a video publishing tool operated at autopub.store99.pk ("the Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have, including when you connect your Google account.
2. Information we collect
a. Account and Google profile information
When you sign in with Google, we receive your name, email address, and profile picture from your Google account so we can create and identify your ContentPilot account.
b. Google Drive access
With your authorization, ContentPilot uploads the video files you choose to your own Google Drive and reads back the files it has created there, so your source videos remain stored under your Google account rather than on a third-party server.
c. YouTube Data API access
With your authorization, ContentPilot uses the YouTube Data API to upload videos to your YouTube channel, set titles, descriptions, tags, and thumbnails, and check the status of videos you publish through the Service.
d. Other connected platforms
If you choose to connect Facebook, Instagram, TikTok, LinkedIn, or X (Twitter), we request access tokens from those platforms so the Service can publish your video and its AI-generated caption on your behalf. We only request the permissions needed to publish content and read basic publishing status.
e. Video content and AI-generated metadata
We process the video files you upload in order to send them to Gemini AI, which analyzes the video and generates a suggested title, description, tags, and hashtags. You review and approve this metadata before anything is published.
f. Technical and usage data
We automatically collect limited technical data such as IP address, browser type, device information, and log data (for example, publish queue status and error logs) to operate, secure, and troubleshoot the Service.
3. How we use your information
- To authenticate you and maintain your ContentPilot account.
- To upload your videos to your own Google Drive and publish them to the platforms you have connected.
- To generate AI-written titles, descriptions, tags, and hashtags via Gemini AI.
- To show you the status of each video across all connected platforms in your dashboard.
- To maintain the security, integrity, and reliability of the Service, including detecting abuse.
- To communicate with you about your account, such as publishing failures or security notices.
We do not use your Google user data for advertising, and we do not sell, rent, or trade your personal information or your Google user data to third parties.
4. Google API Services User Data Policy
ContentPilot AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only request the Google scopes (Drive and YouTube) that are necessary to provide the upload-once, publish-everywhere functionality you use.
- Data obtained through Google APIs is used solely to provide or improve user-facing features of ContentPilot AI, and is not used for serving advertisements.
- We do not transfer Google user data to third parties except as necessary to provide the Service (for example, sending your video to the YouTube Data API to publish it), to comply with the law, as part of a merger or acquisition, or with your explicit consent.
- We do not allow humans to read your Google user data unless we have your affirmative agreement, it is necessary for security purposes, to comply with applicable law, or the data has been aggregated and anonymized.
This application uses YouTube API Services. By connecting your YouTube account, you also agree to be bound by the YouTube Terms of Service. For more on how Google handles data generally, see the Google Privacy Policy.
5. How we store and protect your data
| Safeguard | Implementation |
|---|---|
| Token & API key encryption | AES-256-GCM encryption at rest before any OAuth token or API key is written to the database |
| Transport security | All traffic to and from the Service is served over HTTPS |
| Session security | HttpOnly, Secure session cookies |
| Request protection | CSRF tokens validated on every state-changing request |
| Database access | Parameterized (prepared statement) queries throughout, to prevent injection |
| File storage | Your videos are stored in your own Google Drive, not a shared ContentPilot bucket; uploaded files are never served as executable code |
6. Data retention and deletion
We retain your account information, connected-platform tokens, and publishing history for as long as your account is active, or as needed to provide the Service. You may delete your ContentPilot account at any time from your account settings, which removes your stored tokens and account data from our systems, subject to any backups that are purged on a routine cycle.
Because your videos live in your own Google Drive, deleting your ContentPilot account does not delete the video files themselves — you control those directly through Google Drive and each connected platform.
7. Revoking access
You can disconnect any platform at any time from your ContentPilot Settings page. You can also revoke ContentPilot's access to your Google account directly at Google Account → Security → Third-party access. Revoking access stops future uploads and publishing but does not retroactively delete content already published to a platform.
8. Sharing of information
We share information only in the following circumstances:
- With the platforms you explicitly connect (YouTube, Facebook, Instagram, TikTok, LinkedIn, X), solely to publish the content you approve.
- With Google's Gemini AI, solely to generate metadata suggestions for the video you upload.
- With service providers who help us operate the Service (such as hosting), under confidentiality obligations.
- If required by law, regulation, legal process, or governmental request.
- In connection with a merger, acquisition, or sale of assets, with continued protection of your data under this policy or a comparable one.
9. Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.
10. Children's privacy
ContentPilot AI is not directed to children under 13 (or the minimum age required by your country), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
11. International users
The Service may be accessed from outside the country where our servers are located. By using ContentPilot AI, you understand that your information may be processed in a country with different data protection laws than your own.
12. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service.
13. Contact us
If you have questions about this Privacy Policy or how we handle your data, contact us at:
Email: support@store99.pk
Website: https://autopub.store99.pk/