BatchHarborBack to home

Privacy Policy

Last updated: February 2026

1. What is BatchHarbor

BatchHarbor is a web application that helps YouTube creators bulk upload and schedule YouTube Shorts. We act as an authorized tool on your behalf — you connect your YouTube channel, upload video files, and we publish them according to your schedule.

2. Data we collect

When you use BatchHarbor, we collect and store the following:

  • Google account email — used to identify your account and for communication purposes.
  • YouTube channel ID and channel name — used to identify which YouTube channel to publish videos to.
  • YouTube OAuth refresh token (encrypted) — used to upload videos on your behalf. This token is encrypted with AES-256-GCM before storage and is never stored in plaintext.
  • Video files you upload — temporarily stored in Google Cloud Storage for processing. Files are deleted after successful upload to YouTube or after 7 days, whichever comes first.
  • Job metadata — titles, descriptions, scheduling times, and upload status for each video job you create.
  • Billing information — subscription status and Stripe customer ID. Payment details (card numbers) are handled entirely by Stripe and are never stored on our servers.

3. How we use your data

  • Upload and publish YouTube Shorts on your behalf according to your configured schedule.
  • Display your channel name and job history within the application.
  • Process subscription payments via Stripe.
  • Send you operational alerts if something goes wrong with your uploads (future feature).

4. YouTube API Services

BatchHarbor uses the YouTube Data API v3 to upload videos and read channel information. By using BatchHarbor, you also agree to be bound by the YouTube Terms of Service and Google Privacy Policy.

We request the following permissions (OAuth scopes):

  • youtube.upload — to upload videos to your YouTube channel.
  • youtube.readonly — to read your channel name and ID for display purposes.
  • userinfo.email and userinfo.profile — to identify your account and retrieve your email address.

5. Data storage and security

  • All data is stored in Google Cloud Platform (Firestore and Cloud Storage) within secured, access-controlled environments.
  • YouTube OAuth tokens are encrypted with AES-256-GCM before storage.
  • Session cookies are encrypted with iron-session (AES-256-GCM).
  • Video files are temporarily stored and automatically deleted within 7 days.
  • Payment information is processed by Stripe and never touches our servers.

6. Data retention and deletion

  • Video files: Deleted from our servers after successful upload to YouTube or automatically after 7 days.
  • Job metadata: Retained as long as your account exists, so you can view your upload history.
  • YouTube tokens: Deleted when you disconnect your channel or delete your account.

7. Revoking access

You can revoke BatchHarbor's access to your YouTube account at any time by visiting your Google Account Permissions page and removing BatchHarbor. This immediately invalidates our stored token, and we will no longer be able to access your YouTube channel.

To request complete deletion of your account and all associated data, contact us at xandroapps@gmail.com.

8. Third-party services

  • Google / YouTube — authentication, video uploading, channel information.
  • Stripe — payment processing for subscriptions.
  • Google Cloud Platform — application hosting, database, and file storage.

9. Data sharing

We do not sell, rent, or share your personal data with third parties. Data is only shared with the service providers listed above as necessary to operate BatchHarbor.

10. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of BatchHarbor after changes constitutes acceptance of the updated policy.

11. Contact

For any questions or concerns about this Privacy Policy or your data, contact us at xandroapps@gmail.com.