Privacy Policy
Last updated: October 17, 2026
Publish Assistant ("the app", "we") is a Windows desktop application made by the-Automator. This policy explains what data the app uses, where it goes, and how you can remove it.
The short version
- The app runs on your PC. We do not run a server that receives your videos, transcripts or Google data.
- The app asks Google for one permission: upload videos to your YouTube channel (scope
youtube.upload). - Your Google sign-in tokens are encrypted and saved only on your computer.
- We do not sell, share or use your data for advertising.
YouTube API Services
Publish Assistant uses YouTube API Services to upload videos. By using the app you agree to be bound by the YouTube Terms of Service. Google's handling of your data is covered by the Google Privacy Policy.
What Google data the app accesses
With the youtube.upload permission, the app can only upload new videos and set their thumbnails on the channel you sign in with. It sends YouTube:
- the video file you choose,
- the title, description, tags, category, visibility (public, unlisted or private) and "made for kids" setting you approve,
- the thumbnail image you choose.
The app does not read, change or delete your existing videos, comments, playlists, subscribers, analytics or any other account data.
How your Google data is stored
After you sign in, Google gives the app an access token and a refresh token. These are encrypted with Windows Data Protection (DPAPI) and saved in your Windows user profile at %APPDATA%\PublishAssistant\tokens.dat. Only your Windows account on that PC can decrypt them. The tokens are never sent to us or anyone other than Google.
The app keeps a local log file in the same folder to help troubleshoot failed uploads. It stays on your PC.
Other services the app uses
To transcribe and summarize your video and make thumbnails, the app can send your audio, transcript or prompts to AI services that you choose and configure with your own API keys:
- AssemblyAI (speech-to-text and summaries): privacy policy
- OpenRouter (titles, tags, summaries and thumbnail images): privacy policy
- A local transcription engine on your own PC, if you set one up. Nothing leaves your computer in that case.
No Google or YouTube data (tokens or account information) is ever sent to these services. They only receive the media and text you ask the app to process.
Revoking access and deleting your data
- Revoke Google access: go to your Google Account permissions page (Security > Third-party apps & services) and remove Publish Assistant.
- Delete stored tokens: delete the folder
%APPDATA%\PublishAssistanton your PC.
Since we do not store your data on our servers, there is nothing for us to delete on our side. If you have questions, email us and we will help.
Children
The app is not directed at children under 13.
Changes
If this policy changes, we will update the date at the top of this page.
Contact
Email joe@publish-assistant.com.