Privacy Policy

Who we are

News Factory produces video news content for broker and media clients. News Factory Social (social.newsfactory.tv) is the internal tool our production team uses to schedule and publish that content to the social channels our clients own. It is not a consumer product and is not open to public sign-up.

What Google user data we access

When you connect a YouTube channel, Google asks you to grant the permissions below. We request each one because a specific feature of this service needs it, and we access nothing beyond this list:

We do not read your private videos, your comments, your messages, your subscriber list, or any content we did not publish ourselves, and we do not access any Google data outside of YouTube (no Gmail, no Drive, no Calendar, no Contacts) — beyond what is needed for the uses listed above.

How we use your Google user data

We use the Google user data described above only for the following purposes, all in direct support of the publishing service you asked us to provide:

• Publish and schedule the videos we produce directly to your connected channel(s).
• Update titles, descriptions, thumbnails and privacy settings on the videos and playlists we created, and remove a post we published if you ask us to.
• Show you which channel is connected in our dashboard, and confirm to our production team that a scheduled publish succeeded or failed.
• Display channel performance metrics (views, watch time, subscribers) back to you in our reporting dashboard.
• Match the Google account that authorised a connection to the correct client channel, so content is never published to the wrong account.

We do not use Google user data for advertising, for building user profiles across services, or for any purpose unrelated to publishing and reporting on the content we produce for you.

What we store

We store the access and refresh tokens Google issues when you authorise the connection, the channel name, channel id and channel avatar, and a record of the posts we published or scheduled. Tokens are held in our own database on our hosting provider and are used only to act on the channel you connected.

Data sharing, transfer and disclosure

We do not sell your data, and we do not transfer or disclose your Google user data to any third party for advertising, profiling, resale, or any purpose other than the ones described in this policy. We do not use Google user data to train generative AI models, and Google user data is never sent to any AI or language model we use — the AI features of this service only ever process our own editorial text (headlines we write), never your account data.

The only parties who ever handle your Google user data are the infrastructure providers that host this service on our behalf — currently Railway (application hosting and database) — strictly as data processors bound to keep it confidential and to use it only to run the service for us. We do not have any other subprocessor, and we do not share your data with advertisers, data brokers, analytics networks, or any other News Factory client.

If we are ever required to disclose account data by law (for example, a valid court order), we will disclose only what is legally compelled and, where legally permitted, will attempt to notify you first.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

How we protect your data

We treat Google account tokens and channel data as sensitive information and protect them accordingly:

• All traffic to and from this service, including the OAuth exchange with Google, is encrypted in transit with TLS/HTTPS. We never transmit tokens or account data over an unencrypted connection.
• Google access and refresh tokens are stored in our production database, which sits on a private, access-controlled network and is not directly reachable from the public internet.
• Only authorised News Factory engineers can reach the database or the underlying infrastructure, and access is limited to what is needed to operate and support the service.
• Tokens and account identifiers are never written to application logs, error trackers, or any analytics tool.
• Access to a connected channel can be revoked instantly and independently by you (see "Retention and deletion" below) or by us, without needing the other party.

Retention and deletion

We keep the tokens and channel record for as long as the channel is connected. When a channel is disconnected, or when our engagement with the client ends, the tokens and the channel record are deleted from our database.

You can revoke our access yourself at any time at myaccount.google.com/permissions. Revoking access stops all publishing to that channel immediately. To have the stored record deleted as well, email us and we will remove it.

Other networks

The same principles apply to every other social network a client connects here: we request the narrowest permissions the publishing feature needs, store only the tokens and channel identity, and use them only to publish and report on the content we produce for that client.

Contact

News Factory — pa@newsfactory.tv