Privacy Policy
Loop Labs ("Loop Labs", "we", "us") helps YouTube creators plan, edit and publish videos. This policy explains what information we collect when you work with us (the "Service"), how we use it, how we store it, and the choices you have. It is written in plain English on purpose.
The short version. If you own a YouTube channel we work on, you connect it by opening a link we send you and approving on Google's consent screen. We then read that channel's videos, statistics and analytics reports and, only when a team member presses Upload, upload a video. We never sell your data. You can disconnect at any time.
Contents
- Who we are
- What we collect
- Google sign-in and YouTube access
- How we use your information
- How we store and protect it
- Who we share it with
- How long we keep it
- Your choices and rights
- Cookies
- Children
- Changes to this policy
- Contact
1. Who we are
Loop Labs is operated by Jason Russak. Loop Labs is the "controller" of the information described below.
2. What we collect
Information you give us
- Account details. When you sign in with Google we receive your name, email address and profile picture from Google. We use these to create your account.
- Work you create. Video plans, titles, descriptions, thumbnails, and similar content you type or upload while using the Service.
- Messages. Anything you send us when you get in contact.
Information from YouTube (only if you connect a channel)
- Channel information — the channel's name, ID and public details, so we can confirm you connected the right channel.
- Video information — the titles, descriptions, publish dates, durations, thumbnails and view, like and comment counts of videos on your channel to track how your videos perform.
- Analytics — YouTube Analytics reports for your channel and its videos: views and watch time over time, impressions and click-through rate, audience retention, traffic sources and subscriber changes. We use these to compare how your videos perform.
- Upload confirmation — when a team member uploads a video to your channel, we receive the new video's ID and status back from YouTube so we can confirm it landed as a private draft.
Information collected automatically
- Technical logs. Our servers record standard request logs (IP address, browser type, pages requested, time and date, error messages) to keep the Service running and secure.
- Session cookie. A single cookie that keeps you signed in. See Cookies.
We do not use analytics trackers or advertising pixels on this website.
3. Google sign-in and YouTube access
The Service uses Google OAuth to let you sign in and, separately, to let you connect a YouTube channel. These are two different permissions and you are asked for each one explicitly.
Signing in
Signing in with Google only asks for your basic profile (name, email, picture). It does not give us any access to YouTube.
Connecting a YouTube channel
A channel is connected by its owner. A member of the Loop Labs team creates a one-time connect link and sends it to you. When you open it, Google asks which account and channel to use and shows you a consent screen listing exactly what we are asking for. You do not need an account to do this, and the link stops working after it is used or after 24 hours. We request only these scopes:
- View your YouTube account (
youtube.readonly) — to confirm which channel you connected and to check that each upload landed as a private draft. - View YouTube Analytics reports for your YouTube content (
yt-analytics.readonly) — to read the performance reports described above. This is read-only and does not include revenue or payment information. - Upload YouTube videos (
youtube.upload) — to upload a finished video to your channel and set its thumbnail, as a private draft, and only when a team member presses "Upload".
What we do with that access:
- We read your channel identity, the details of videos we uploaded, and your analytics reports to show performance.
- We upload a video only when a team member explicitly starts an upload. Every upload lands as a private draft on your channel. Review and publishing of the video is handled on YouTube.
- We never make a video public, and never edit, schedule, delete or comment on any video after the upload. We never touch playlists, captions or channel settings.
Google API Services User Data Policy. Loop Labs' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell it, do not use it for advertising, do not use it to train AI or machine-learning models, and do not let humans read it except with your permission, for security purposes, to comply with the law, or in aggregated, anonymised form.
Because the Service uses YouTube API Services, by connecting a channel you also agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.
4. How we use your information
- To let you sign in.
- To show your channel's videos and how they are performing.
- To upload finished videos and their thumbnails to your channel as private drafts when a team member starts an upload.
- To respond when you contact us.
We do not sell your information and do not build profiles about you for any purpose other than running the Service.
5. How we store and protect it
- YouTube credentials. The token Google gives us to access your channel is stored encrypted in a dedicated secrets store, separate from the main database. It is only ever read by the one isolated part of our system that talks to YouTube, and it is read fresh each time — it is never cached, never shown to anyone, and never sent to your browser or to third parties.
- In transit. Every connection to the website uses HTTPS/TLS.
- Access. Only the small number of people who operate Loop Labs can access the systems that hold your data, and only to run and support the Service.
- Backups. The database is backed up continuously so we can recover from an outage. Backups are kept for a short, rolling window.
No system is perfectly secure. If we ever become aware of a breach that affects your information we will tell you as soon as we reasonably can.
6. Who we share it with
We share your information only in these cases:
- Service providers who host our infrastructure (cloud hosting, database, object storage, content delivery). They process data on our behalf and are not allowed to use it for their own purposes.
- Google / YouTube, when you sign in or when you ask us to read from or upload to your channel.
- People you work with. If you are part of a team on the same channel, your name and the changes you make are visible to the other members of that team.
- Legal reasons. If we are required to by law, or to protect the rights, safety or property of Loop Labs, our users or others.
We never sell or rent your information, and we never share Google user data with advertisers or data brokers.
7. How long we keep it
- Your account is kept while you use the Service and deleted when you ask us to close it.
- YouTube credentials are deleted immediately when you disconnect the channel or close your account.
- YouTube information we read (video details, statistics and analytics reports) is refreshed regularly while the channel is connected and deleted when you ask us to delete it.
- Technical logs are kept for a short period for security and troubleshooting, then discarded.
8. Your choices and rights
- Disconnect YouTube at any time. Revoke our access from your Google account at myaccount.google.com/permissions — this takes effect immediately and needs nothing from us. You can also ask us to disconnect: a team member presses Disconnect in the channel's settings, which revokes the credential at Google and deletes our stored copy.
- Access, correct or delete your data. Contact us (see below) and we will give you a copy of the information we hold about you, fix anything that is wrong, or delete it. We'll respond within 30 days.
- Close your account. Ask us and we will delete your account, your credentials and the data we hold about you, except what we must keep to comply with the law.
- Regional rights. Depending on where you live (for example the EU/UK or California) you may have additional rights, including the right to object to or restrict certain processing and the right to complain to your local data-protection authority. We honour these rights for everyone, wherever you are.
9. Cookies
This website sets one strictly necessary cookie (cs_session) that keeps you signed in; it is HttpOnly, sent only to our own domain, and deleted when you sign out. We do not use advertising or tracking cookies, and we do not load third-party trackers. Fonts on this website are served by Google Fonts, which may log the request in line with the Google Privacy Policy.
10. Children
The Service is for adults who run or help run YouTube channels. It is not directed at children under 13 (or the age of digital consent where you live) and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.
11. Changes to this policy
If we change this policy we will update the effective date at the top of this page. If a change meaningfully affects how we use Google user data we will tell you on the website or by email before it takes effect.
12. Contact
Questions, requests or concerns about this policy or your data: email [email protected], or get in touch with Jason Russak on Instagram.