YouTube Comment Automater
Privacy Policy
Effective and last updated: October 15, 2026
This legal document is provided in English. The English version is authoritative.
1. Introduction
This Privacy Policy explains how YouTube Comment Automater collects, uses, stores, and protects information when creators use the service. The service is operated under the product name shown above.
2. Information creators provide
We may process account and login information, uploaded video files, titles and descriptions, affiliate or product links, automation rules and templates, publishing preferences and history, and information included in support or privacy requests.
3. Connected accounts
YouTube and Google
When a creator connects YouTube, the service may use the permissions they grant to identify the connected channel; synchronize video and comment information; upload, publish, or schedule videos; send creator-configured comment replies; and retrieve authorized YouTube analytics. Access depends on the scopes granted by the creator.
TikTok
When a creator connects TikTok, the service currently requests basic profile information and public-video metadata through TikTok's authorized APIs. This may include the creator's TikTok open ID, display name, avatar, public video IDs, captions, thumbnails, share URLs, publication timestamps, duration, and dimensions when TikTok provides them.
The service does not receive the creator's TikTok password. Official TikTok APIs supply identity and public-video metadata. When the creator requests supported media preparation, a separate media-resolution provider may resolve the public video and BRILLA may copy it into private shared source storage for the creator's posting workflow. BRILLA does not use the media provider as its TikTok account identity system.
4. OAuth credentials
Access and refresh tokens may be stored so authorized integrations continue to function. Social tokens are encrypted at rest and remain server-side. Local disconnection can retain encrypted credentials and history; it does not itself revoke provider authorization.
5. How information is used
Information is used to provide and secure the service, connect authorized accounts, import requested metadata, publish and schedule content, run creator-configured comment automation, display analytics, maintain publishing history and settings, prevent duplicate imports, diagnose failures, and comply with legal obligations.
6. TikTok import history
Imported TikTok metadata may remain in the creator's Library so previously discovered posts are not duplicated, creators can search and browse imported content, and future posting linkage or history can be maintained. Historical setup imports are distinguished from newly discovered posts.
7. Uploaded media
Creator-uploaded media may be stored in private infrastructure to complete uploads, publish or schedule videos, and support retry or recovery. Storage duration depends on operational needs, publishing state, creator actions, and applicable retention requirements.
8. Sharing and service providers
Information may be processed by providers needed to operate the service, including hosting, infrastructure, database and storage providers, and connected services such as Google/YouTube and TikTok. We do not sell personal information merely for third-party advertising.
9. Data retention
Information is retained for as long as reasonably necessary to provide creator-requested history and settings, operate and secure the service, resolve problems, and meet legal obligations. Retention depends on the type and status of the information.
10. Disconnecting services
Creators can disconnect supported accounts in Settings. Disconnecting TikTok stops future discovery, while previously imported Library metadata may remain unless separately deleted. Disconnecting YouTube disables use of its stored credentials for future YouTube operations; existing publishing, activity, and configuration history may remain where operationally necessary.
11. Data deletion requests
To request deletion, open Settings, Account, Delete BRILLA account, or follow the data deletion instructions. Requests are recorded for review; automatic deletion and provider revocation are not enabled. New external processing is paused for the requesting workspace. Legacy records whose ownership has not been verified remain quarantined and may require manual review. Contact contact the service administrator who issued your account access if you cannot access your account. No fixed completion period is promised.
12. Security
We use reasonable administrative and technical safeguards designed to protect information. No storage or transmission method is completely secure, and absolute security cannot be guaranteed.
13. Children's privacy
The service is intended for creators who are legally able to use the service and connected platforms. It is not directed to children under 13 or a higher minimum age where local law requires one.
14. Third-party services
Connected services are independent and governed by their own terms and privacy policies, including Google and YouTube policies and TikTok policies. Their processing practices and platform decisions are outside this service's control.
15. Policy changes
This policy may be updated as the service or legal requirements change. The effective date at the top identifies the current version.
16. Contact
For privacy questions or requests, contact the service administrator who issued your account access.