Privacy Policy

zalipator.ru («Service», «we», «us») is a content-management system that helps creators schedule and publish video content to social platforms (YouTube, VK, Telegram, OK, Rutube, Dzen, and others). This policy explains what data we collect, how we use it, and how we comply with the Google API Services User Data Policy, including the Limited Use requirements.

• Account data you provide: email, name, organization name.
• Channel metadata you connect (channel ID, channel name, public channel URL).
• OAuth tokens (access_token, refresh_token) issued by the social platform after you authorize the connection.
• Media files you upload to the Service for editing and publication.
• Operational logs (publication status, timestamps, error messages, IP address) for debugging and security.

When you connect a YouTube channel, you grant the Service the OAuth scope https://www.googleapis.com/auth/youtube.upload (and may briefly call youtube.channels.list to fetch your channel name and ID).

• We use this scope only to upload videos that you explicitly publish from zalipator.ru to your channel.
• We do not read, download, transfer, or sell any other YouTube data.
• We do not use Google user data for advertising, profiling, or training AI models.
• We do not share Google user data with third parties except sub-processors strictly necessary to operate the Service (see §6).
• Human access to Google user data is limited to (a) explicit user-initiated support requests and (b) security investigations, both audited.

This is a binding statement of compliance with the Google API Services User Data Policy «Limited Use» requirements.

• OAuth tokens are stored in our PostgreSQL database, on servers we control, with access restricted to the application service account.
• Media files are stored on object storage (S3-compatible) within Russia / EU regions.
• Backups are encrypted at rest.
• All traffic between your browser and the Service uses TLS 1.2+.

• You can disconnect any channel at any time on the «Channels» page; this immediately deletes the OAuth tokens for that channel.
• You can also revoke access from your Google Account at myaccount.google.com/permissions; we honor revocation automatically on the next API call.
• To delete your entire account and all associated data, email info@zalipator.ru. We process deletion within 30 days.
• Operational logs are retained up to 90 days.

• Hosting infrastructure (Russia, dedicated server).
• Object storage for media files (S3-compatible).
• Yandex.Metrica — site analytics (no Google user data is sent).

Under Russian Federal Law 152-ФЗ and applicable international standards, you have the right to access, correct, restrict, or delete your data, and to withdraw consent. Send requests to info@zalipator.ru; we respond within 30 days.

We may update this policy. Material changes will be announced in-app and at the top of this page. The current version is always available at https://zalipator.ru/privacy.

Questions, complaints, or data requests: info@zalipator.ru. Russian users may also contact Roskomnadzor.