In one sentence: HEKAYA Publisher is a personal tool that runs on its author's own computer, serves no other users, and sends nothing anywhere except the author's own posts to the author's own accounts.
Who this covers
HEKAYA Publisher has exactly one user: its author, who is also the owner of the YouTube channel, Facebook Page and Instagram account it publishes to. It is not offered to anyone else and has no way for anyone else to sign in.
What data it handles
- Access tokens for the author's own YouTube, Facebook and Instagram accounts, obtained through each platform's own consent screen.
- The author's own videos and their descriptions, which the author wrote and owns, before they are uploaded.
- Public statistics about the author's own posts — views, likes, comments, retention — read back from each platform.
It handles no data belonging to any other person. It does not read other people's accounts, does not collect viewer information, and has no analytics of its own.
Where that data lives
On one Windows computer, and nowhere else. Access tokens are encrypted at rest with the Windows Data Protection API, which binds them to that user account on that machine: copied elsewhere, the file cannot be opened. Nothing is sent to any third party and nothing is sent to a server of our own, because there is no server.
Google user data
HEKAYA Publisher's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. YouTube data obtained through the API is used only to upload the author's own videos, manage their metadata, and read statistics for those same videos. It is never transferred to anyone, never used for advertising, and never read by a human other than the author.
The tool uses YouTube API Services. By authorising it you are also bound by the YouTube Terms of Service, and Google's own Privacy Policy applies to Google's handling of your data.
Retention and revoking access
Tokens are kept until they expire or are deleted. They can be removed at any time by deleting the local credential file, and access can be revoked independently at Google account permissions or in each platform's own settings. Revoking access stops the tool immediately.
Changes and contact
If this policy changes, the date above changes with it. Questions: send a message to the HEKAYA Facebook Page.