PinPilot Privacy Policy
Who we are
PinPilot is a private, internal application built and operated by Boi Boi to prepare, schedule and publish Boi Boi's own social media content to Boi Boi's own accounts, and to read how that content performs. It is not offered to the public and has no users other than its operator. Its home page is auth.boiboi.ca.
This policy describes how PinPilot handles data it receives from Google (YouTube) and from TikTok, and how this website behaves.
This website
These pages are informational and are served as static files. They contain no analytics, no advertising, no third-party scripts and no tracking. They set no cookies and store nothing in your browser.
The page at /tiktok-callback exists solely to receive the
redirect at the end of a TikTok authorization that the operator started. It
displays the authorization values returned in the URL so the operator can copy
them, clears them from the address bar immediately afterwards, and sends them
nowhere. Nothing from that page is stored on this website or transmitted to
any third party.
Google user data (YouTube)
PinPilot connects to Boi Boi's own YouTube channel only after Boi Boi's operator signs in with Google and approves it on Google's consent screen. It acts only on that authorized Boi Boi account and does not access data about any other Google or YouTube user.
PinPilot requests these Google permissions, each for the reason shown:
| Permission | What PinPilot does with it |
|---|---|
youtube.readonly |
Identifies the authorized channel (its channel ID, name and handle), lists the channel's own playlists so the operator can choose one, and reads back the details of a video PinPilot has just uploaded to confirm it arrived. |
yt-analytics.readonly |
Reads the channel's daily performance figures (views, likes, comments and shares) so the operator can see how Boi Boi's content performs. |
youtube.upload |
Uploads a video the operator has chosen and pressed Publish for, with the title, description, tags and settings the operator entered, and sets the video's thumbnail to the cover the operator picked. |
youtube.force-ssl |
Adds an uploaded video to one of the channel's own playlists that the operator chose, after checking the playlist belongs to the channel and the video is not already in it. PinPilot does not use this permission to edit or delete existing videos, playlists or comments. |
What PinPilot stores. The channel's identifier and name; the identifiers of videos and playlist entries PinPilot created; the daily performance figures listed above; and the Google access token and refresh token that let PinPilot keep acting on the operator's authorization without asking the operator to sign in again every hour. The videos themselves come from Boi Boi's own files and are sent directly to YouTube.
How it is protected. Tokens are stored encrypted at rest in PinPilot's local database on equipment Boi Boi controls. The refresh token is used only by PinPilot's backend to obtain new access tokens; it is never displayed, never written to logs, never sent to a web browser and never shared. Google user data is not stored on this website.
Sharing. PinPilot does not sell, rent or share Google user data with anyone, does not use it for advertising, and does not transfer it to third-party AI services. Data goes only between PinPilot and Google's own APIs.
Limited Use. PinPilot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the PinPilot features described above to Boi Boi; it is not used to develop, improve or train generalized artificial intelligence or machine learning models, it is not read by humans except when the operator views Boi Boi's own channel information in PinPilot, for security purposes or as required by law, and it is not used to serve advertising.
Revoking access. Access can be removed at any time from the Google Account's third-party access settings. Once removed, PinPilot can no longer read or publish anything for that account. The operator can also delete PinPilot's stored Google tokens from PinPilot itself.
Using PinPilot's YouTube features relies on YouTube API Services. YouTube's Terms of Service and the Google Privacy Policy apply to that use.
TikTok data
When the operator authorizes PinPilot against a TikTok account Boi Boi owns, PinPilot requests these TikTok permissions:
user.info.basic, which provides the account's TikTok user identifier and display name.user.info.profile, which provides the account's username.video.publish, requested for PinPilot's TikTok Direct Post feature, which posts a video the operator has chosen to Boi Boi's own TikTok account when the operator presses Publish. This feature is in testing: its live test has not passed, and it is not in everyday use. While PinPilot's TikTok app has not been audited by TikTok, TikTok restricts such posts to private viewing.
PinPilot stores the account identifier and username so it can tell which account a channel refers to, and, for a post it submitted, TikTok's reference and the post's processing status. It does not request or read follower counts, other videos, or engagement statistics from TikTok.
The TikTok access token is stored encrypted at rest on equipment the operator controls. It is never written to logs, never displayed and never shared, is held only while the connection is in use, and is revoked through TikTok's revocation endpoint when no longer needed. PinPilot accesses only data belonging to the TikTok account that authorized it.
Where data is stored and who sees it
All data PinPilot handles is stored locally on equipment operated by Boi Boi and is seen only by Boi Boi's operator. There are no user accounts to create. We do not sell, rent or share personal information with third parties, and we do not use this data for advertising or profiling.
Retention and deletion
Stored identifiers and tokens are kept only while the corresponding connection is in use, and are removed or revoked when it is not. Performance figures are kept in PinPilot's local database so Boi Boi can compare its content over time. Access can be revoked at any time from Google's or TikTok's own settings, which immediately ends PinPilot's ability to act on that account.
Changes to this policy
If our practices change, this page is updated and the effective date above is revised before the change takes effect.
Contact
Questions about this policy: jackie@boiboi.ca.