Privacy Policy

B. Information We Collect

We practice strict data minimization. Remotion Uploader accesses and processes only the minimum technical data necessary to authenticate your account, upload rendered videos, and confirm publishing status. We clearly distinguish between data accessed through Google APIs and data provided directly by users:

C. How We Use Google User Data

Google user data is accessed and utilized solely to execute core user-requested video publishing functionality. Specifically, Remotion Uploader performs the following operations:

• Channel Connection & Authentication: Authenticating the user through Google OAuth 2.0 and securely associating their designated YouTube channel with their publishing pipeline.
• Uploading Videos via YouTube Data API: Executing chunked resumable video uploads via the https://www.googleapis.com/auth/youtube.upload scope to transfer rendered Remotion MP4 video files directly to the user's authorized YouTube channel.
• Managing Video Metadata: Setting video titles, descriptions, keyword tags, category IDs, language settings, and privacy statuses (public, unlisted, or private) on uploaded videos as specified by the user.
• Monitoring Processing Status: Querying the YouTube Data API (videos.list via https://www.googleapis.com/auth/youtube.readonly) to track upload completion, video processing status, and surface any processing errors or transcoding status to the user.
• Monitoring API Quotas & Diagnostics: Tracking quota usage units and operational timestamps to prevent rate limiting and maintain reliable automation for user-scheduled video batches.

D. Google API Services User Data Policy & Limited Use Disclosure

In accordance with Google's Limited Use requirements, we explicitly maintain the following operational commitments:

E. Data Storage & Technical Security Controls

We implement industry-standard administrative, physical, and technical security safeguards to protect Google user data against unauthorized access, destruction, disclosure, or alteration:

• Server-Side Token Storage: OAuth 2.0 refresh tokens and client credentials are stored exclusively in secure, encrypted server-side environments and protected backend secrets vaults with access restricted strictly to authorized deployment services.
• Zero Client-Side Exposure: OAuth refresh tokens are never transmitted to client browsers, never written to cookies, and never stored in browser localStorage or session storage.
• Encryption in Transit: All communications between the user's browser, our backend infrastructure, and Google/YouTube API endpoints are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
• Transient Video Storage: Rendered MP4 video files are held on server storage only during the active rendering and chunked upload protocol, after which they are automatically purged.
• Sanitized Operational Logs: Diagnostic and operational logs are strictly sanitized to exclude authentication tokens, secrets, and private payload data.

F. Data Sharing & Third-Party Sub-Processors

Remotion Uploader does not share, disclose, or transfer Google user data with any third parties except as strictly necessary to fulfill the service requested by the user:

G. Data Retention & Deletion Policy

We retain Google user data only for as long as necessary to provide the Remotion Uploader service:

• OAuth Credentials: Retained only while your YouTube channel remains actively connected. If you disconnect your channel or revoke access, your OAuth tokens are immediately and irreversibly deleted from our backend.
• Temporary Video Files: Local server renders of MP4 video files are automatically deleted immediately upon verified completion of the YouTube API upload (or within 24 hours in the event of an unrecoverable rendering failure).
• Operational Diagnostic Logs: Non-identifying API request timestamps, response codes, and YouTube video IDs are retained for up to 90 days for quota management and error debugging, after which they are permanently deleted.

H. Revoking Google Account Access

You maintain full control over your Google Account and may revoke Remotion Uploader's access at any time directly through Google's security portal:

I. Children's Privacy

Remotion Uploader and MintSaaS are intended exclusively for professional creators, businesses, and individuals who are at least 18 years of age (or the age of majority in their jurisdiction). We do not knowingly collect personal information or authorize Google accounts of children under 13 (or under 16 in the European Economic Area / UK) in accordance with the US Children's Online Privacy Protection Act (COPPA) and EU GDPR. If you believe a child has provided us with personal data, please contact us at privacy@mintsaas.net and we will immediately purge the record.

J. International Data Processing

MintSaaS operates globally. Your information may be transferred to, stored, and processed in cloud data centers located in India, the United States, and the European Union. We ensure all cross-border data transfers comply with applicable data protection legislation, including India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the EU General Data Protection Regulation (GDPR) through Standard Contractual Clauses (SCCs).

K. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory updates or changes to Google API policies. When updates are published, the revised version will be posted at https://www.mintsaas.net/privacy-policy with an updated “Last Updated” date. For material modifications, registered users will be notified by email or through an in-app notice prior to the change taking effect.

L. Official Contact Information

For questions, inquiries, data deletion requests, or concerns regarding this Privacy Policy or our Google API integration, please contact our designated privacy and legal team: