Privacy Policy

MonsterKong Auto collects the minimum information needed to run your automation pipeline. From Google sign-in: your name, email, and profile photo. From the YouTube OAuth flow you complete on the Channels page: per-channel metadata (channel ID, title, handle) and an encrypted refresh token. From Stripe: billing identifiers and subscription status — we never see your card number.

From the automation pipeline itself: video metadata for new uploads on connected channels (title, description, duration, transcript), and the assets the AI generates for each video (SEO copy, thumbnail images, short-form clip files, captions, audit logs).

Account data identifies you across sessions. The encrypted YouTube refresh token lets the worker detect new uploads on your connected channels and, as part of the automation you enable, update those videos on your behalf — their SEO title and description, thumbnail, and captions — and publish derived short-form clips. You control which channels are connected and can disconnect at any time. Billing data drives your subscription and credit balance. Pipeline telemetry is used to operate, debug, and improve the service.

MonsterKong Auto's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We access your YouTube account through the YouTube Data API using the youtube.force-ssl scope solely to (a) detect new uploads on the channels you connect and (b) update the SEO metadata, thumbnails, captions, and derived clips of your own videos at your direction. We do not use this data for advertising, we do not sell it, and we do not transfer it to third parties except as needed to provide the service or as required by law. Humans do not read your Google user data except where necessary for security, to comply with the law, or with your explicit consent.

Postgres on Google Cloud holds your account, channel, and job records. Generated assets (thumbnails, MP4 clips, transcripts) are stored in a private Google Cloud Storage bucket and are auto-deleted after 7 days of inactivity. Refresh tokens are encrypted at rest with AES-256-GCM before being written to the database.

Google (sign-in + YouTube Data API), Stripe (payments), and Google Cloud Platform (hosting, storage, Gemini API for SEO + thumbnails + clip selection). We do not sell your data and we do not share it with advertising networks.

You can disconnect any YouTube channel from the Channels page at any time — this revokes the encrypted refresh token immediately. You can delete your account from the dashboard; account data and pipeline outputs are removed within 30 days. Billing records are retained per applicable tax and accounting law.

Questions about privacy or a data-deletion request: daftplanet24@gmail.com.