Privacy Policy
Last updated: 14 November 2026
Scope
This policy explains how Rinveta Video Manager (the "App") accesses, uses, stores and shares data obtained from Google and YouTube APIs. The App is an internal tool used only to manage Rinveta's own YouTube channel; it does not collect data from members of the public. For the rinveta.com website, see the general Rinveta privacy policy at https://rinveta.com/privacy/.
Who is responsible
The data controller is the individual who runs Rinveta. Contact for any privacy matter, including a request for the controller's full identity details: privacy@rinveta.com.
Data the App accesses
Only data of the Rinveta channel that the channel owner authorises through Google OAuth: basic channel information (channel ID, name, settings); the channel's videos, playlists and their metadata (titles, descriptions, thumbnails, privacy status, upload status); and aggregated channel and video statistics from the YouTube Data API and YouTube Analytics API (for example views, watch time, likes and subscriber counts). The App does not request access to Gmail, Google Drive, contacts or any other Google service, and it does not read comments or private messages.
How the data is used
Solely to operate the Rinveta channel: publishing and updating Rinveta's own videos and playlists, and measuring the performance of that content to decide what to publish next. The data is not used for advertising, is not sold, and is not used to build profiles of individual viewers. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements (https://developers.google.com/terms/api-services-user-data-policy).
AI processing
Rinveta's operations are run with the help of an AI software agent. Channel metadata and aggregated statistics obtained through the App may be processed by the AI model provider that powers this agent (Anthropic), only to carry out the uses described above. Data obtained from Google APIs is not used to develop, improve or train generalised AI or machine-learning models.
Storage and retention
OAuth tokens are stored only on Rinveta's private server, in a file readable only by the dedicated service account, never in the website, in public code repositories, in emails or in chat messages. API data is kept only as long as needed: stored YouTube API data is refreshed or deleted within 30 days, except aggregated figures about Rinveta's own channel kept in internal performance reports. Tokens are kept until access is revoked or the App is retired, and are then deleted.
Sharing
Data obtained from Google APIs is not sold, rented or shared with third parties, except: the infrastructure and AI providers needed to run the App (server hosting and the AI model provider mentioned above), acting on Rinveta's behalf; or where required by law.
Security
Access to the App's credentials is limited to the service that needs them; credentials are never displayed or logged; connections to Google use HTTPS; actions taken on the channel are recorded in an internal audit log.
Revoking access
The channel owner can revoke the App's access at any time from the Google Account permissions page (https://myaccount.google.com/permissions). Google's privacy policy applies to data processed by Google: https://policies.google.com/privacy.
Your rights and changes
You can ask to access, correct or delete personal data, or object to its processing, by writing to privacy@rinveta.com. You may complain to your data protection authority (in Italy, the Garante per la protezione dei dati personali). If this policy changes, the updated version will be published on this page with a new date.