Privacy policy for Google and YouTube

Who we are

Zapket is a tool that social media agencies use to plan, approve and publish posts for their clients. Asket Studio runs Zapket and is responsible for the data described here. You can reach us at help@asketstudio.in.

This page covers data from Google: YouTube and Google Business Profile. It adds to our main privacy policy, which covers everything else.

Limited Use

Zapket's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

YouTube API Services

Zapket uses YouTube API Services to publish videos and read channel numbers. By connecting a YouTube channel to Zapket, you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

Who this covers

People who connect a YouTube channel or a Google Business Profile to Zapket. They sign in with their own Google account, on Google's own screen, and choose what to allow. They're usually the business itself or the agency that manages its channel or profile.

What we receive from Google

Only what the person connecting allows on Google's permission screen.

From YouTube

• The channel: its name, ID, handle and picture, so you can choose the client's channel.
• Videos Zapket uploads: the video file, title, description, tags, category, visibility, thumbnail and playlist the agency chose, and the video's ID once it's published. We also use this to change a video's description or delete it when the agency asks.
• Channel and video numbers: subscribers, views, likes, comments and shares, for each day and for each video. These are counts, not the people behind them.
• Comments on videos Zapket published: the comment text and the commenter's public YouTube name, so the agency can read and answer them in Zapket's inbox. Replies the agency writes are posted from the channel.
• The channel's playlists: their names and IDs, so a new video can be added to one.

From Google Business Profile

• The business locations you manage: each location's name and ID, so you can choose the client's.
• Updates Zapket publishes: the text, photo and link the agency prepared, and each update's ID once it's published.
• Reviews: the review text, star rating and the reviewer's public Google name, so the agency can read and answer them in Zapket's inbox.
• Profile numbers: views, searches, calls, direction requests and website clicks. These are counts, not the people behind them.

From both

• Access keys: the tokens Google issues so Zapket can act for the channel or profile. They are stored encrypted.

We don't receive Google passwords, and we don't access Gmail, Google Drive, contacts, calendars or anything in the Google account beyond the channel or business profile that was connected.

How we use it

Only to provide the features the agency uses in Zapket:

• Publishing the videos and updates the agency prepares and the client approves, at the scheduled time.
• Showing how the channel, the profile and their posts performed, in the agency's analytics and in each client's monthly report.
• Showing comments and reviews in the inbox, so the agency can reply.
• Keeping the connection working and telling the agency when it needs attention.

We never sell data from Google, never use it for advertising, retargeting or to build profiles of people, and never share it with data brokers or information resellers. We don't use it to train or improve AI or machine learning models, and we don't send it to the AI tools Zapket uses to suggest captions. People at Zapket don't read it, except with the agency's permission for a support request, when needed for security, or when the law requires it.

Who can see it

Only the agency that connected the channel or profile, and the client's own logins where the agency gives them access. Each agency can only ever see its own clients.

If someone at the agency connects their own AI assistant to Zapket, it can see that person's clients, connected accounts and posts, including links to published videos. It can't see channel numbers, comments or reviews.

We share data only with the providers Zapket needs to run, such as hosting, backups and email, each bound to keep it confidential, and with authorities when the law requires it.

Cookies

Zapket doesn't place cookies on your device for YouTube or Google Business Profile, and doesn't let Google or anyone else do so through Zapket. The only cookies Zapket uses keep team members signed in.

How we protect it

All connections to Zapket and to Google are encrypted. Access keys are stored encrypted and are never shown to anyone, including the agency. Team members can protect their sign-in with a code from an authenticator app.

How long we keep it

• Access keys: until the channel or profile is disconnected in Zapket, when we delete them straight away. If access is removed in your Google account, the keys stop working at once.
• Numbers, comments and reviews: refreshed from Google every day while the account stays connected. If they go 30 days without a refresh, because the account was disconnected or access was removed, we delete them.
• A deleted account: kept hidden for 30 days, so a mistake can be undone by reconnecting it. After that, everything we stored from it is deleted.
• Posts: while the agency keeps that client in Zapket. When the agency deletes the client, or anyone asks us to delete their data, we delete it within 30 days.

Removing a post from Zapket's records doesn't delete it from YouTube or Google. The channel or profile owner can delete it there at any time.

Removing access and deleting your data

• In Zapket, an agency admin or manager can open the client, go to Accounts and choose Disconnect.
• In your Google account, open Third-party apps and services (also at security.google.com/settings/security/permissions), choose Zapket and remove its access.
• To have your data deleted, email help@asketstudio.in. We confirm within 30 days.

More detail is on our data deletion instructions page.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask to see the personal data we hold about you, correct it or delete it, and withdraw your consent. Write to help@asketstudio.in. If you have a concern, our grievance officer answers at the same address within 7 days, and you can also complain to the Data Protection Board of India.

Changes

If we change how we use data from Google, we'll update this page and tell agency admins by email before the change applies.