01
Introduction & Scope
UtkarshLabs (“we”, “our”, or “us”) is committed to transparent and responsible data practices. MemePilot is an autonomous content engine designed to streamline content research, idea generation, media production, and video publishing for content creators and teams.
This Privacy Policy applies specifically to the MemePilot web application, services, and associated integrations. We do not sell your personal information, nor do we access data beyond what is strictly necessary to provide the features you explicitly initiate.
02
Information We Collect
We collect only the categories of information required to provide and operate MemePilot:
- Account & Contact Information: When you register or contact us, we receive your email address (such as your Google account email if authenticating via Google) and basic user profile identifiers.
- Content & Project Inputs: Content outlines, script drafts, video preferences, templates, and publishing schedules that you create or configure inside MemePilot.
- Connected Platform Information: When you connect your YouTube channel, we retrieve your channel identity (channel ID, channel title, thumbnail) to display the active destination in your workspace.
- Technical & Operational Logs: Standard HTTP request logs, IP addresses, browser user-agent strings, timestamps, and error diagnostics generated during ordinary API and web service operation to maintain reliability and security.
03
YouTube API Integration & OAuth Permissions
MemePilot integrates directly with the YouTube API Services to allow you to publish video content and monitor upload statuses from within your dashboard. When you authorize MemePilot to connect to your YouTube account, we request only the minimal set of scopes needed for these operations.
The current YouTube OAuth scopes requested are:
-
https://www.googleapis.com/auth/youtube.upload: Requested exclusively to upload user-authorized videos, titles, descriptions, tags, and thumbnails directly to your connected YouTube channel upon your explicit schedule or publish command. -
https://www.googleapis.com/auth/youtube.readonly: Requested exclusively to identify and verify the connected channel (retrieving channel ID and channel name for dashboard display) and to inspect the processing or publication status of videos uploaded through MemePilot.
MemePilot does not request permission to manage your comments, edit unrelated channel settings, access private subscriber contact lists, or read private messages.
04
Google User Data & Limited Use Disclosure
MemePilot’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Google User Data Limited Use Commitments
1. No Selling of Data: We do NOT sell Google user data to any third party under any circumstances.
2. No Advertising Profiling: We do NOT use Google user data to build advertising profiles, retarget users, or serve personalized advertisements.
3. No Unrelated Uses: We do NOT use Google user data for any purpose other than providing and maintaining user-authorized MemePilot video creation and publishing workflows.
4. No Generalized AI Model Training: We do NOT transfer Google user data to third parties or use it to train generalized AI/ML foundation models.
External generative AI providers (such as third-party language models or rendering microservices) used in MemePilot receive only the specific prompt text, creative outlines, and scripts you author. Private Google account tokens and YouTube credentials are never shared with or transmitted to external AI providers.
05
Security & Encrypted Credential Storage
Security is central to our architectural design. We implement rigorous administrative, technical, and physical safeguards to protect your data and connected credentials:
- AES-256-GCM Encryption at Rest: All sensitive OAuth credentials, including YouTube access tokens and refresh tokens, are encrypted at rest in our databases using industry-standard AES-256-GCM authenticated encryption.
- Zero Plaintext Storage: Tokens are never logged or stored in plaintext. Decryption keys are maintained strictly in server-side environment configurations inaccessible to client browsers.
- Encrypted in Transit: All communication between your browser, our servers, and third-party APIs is encrypted in transit using modern Transport Layer Security (TLS/HTTPS).
- Principle of Least Privilege: Server access is tightly restricted, and internal administrative access to database infrastructure requires multi-factor authentication.
06
Data Retention, Disconnection & Deletion
We retain your data only for as long as your account remains active and as needed to provide our services. You retain full control over your connected accounts and stored information:
- Disconnecting YouTube in MemePilot: You can disconnect your YouTube channel at any time from your MemePilot settings. When disconnected, your stored OAuth tokens and cached channel details are immediately marked revoked and permanently deleted from our active database.
- Revoking Access via Google Account: You can revoke MemePilot’s access to your Google account at any time via your Google Security Permissions page. Upon revocation, our tokens become invalid, and our backend purges the invalid credentials upon detecting the revoked status.
- Account & Data Deletion Requests: You may request complete deletion of your account, project history, and any associated data by emailing us directly at uttkarshyadav@gmail.com. We process verified deletion requests within 30 days.
07
Third-Party Services
MemePilot interacts with trusted infrastructure providers to deliver its services:
- YouTube / Google APIs: Subject to Google’s Privacy Policy at policies.google.com/privacy and YouTube Terms of Service at youtube.com/t/terms.
- Cloud Infrastructure: Cloud hosting and managed databases with ISO 27001 and SOC 2 certified providers.
- Generative Intelligence Providers: Utilized strictly for stateless prompt generation, script formatting, and video rendering based on your direct inputs.
08
Your Rights & Choices
Depending on your location, you may have statutory rights under applicable privacy laws (such as GDPR or CCPA/CPRA), including:
- The right to access the personal information we maintain about you.
- The right to rectify inaccurate or incomplete data.
- The right to request deletion of your personal data.
- The right to withdraw consent at any time without affecting lawful processing prior to withdrawal.
To exercise any of these rights, please contact our privacy desk using the contact details below.
10
Updates to This Policy
We may update this Privacy Policy from time to time to reflect modifications in our features, security enhancements, or legal obligations. When changes are made, we will update the “Effective Date” at the top of this document. Continued use of MemePilot following an update indicates acceptance of the revised policy.
11
Contact Information
If you have questions, feedback, or concerns regarding this Privacy Policy or our data protection practices, please contact us directly:
UtkarshLabs — Privacy & Data Protection
Developer: UtkarshLabs
Contact Person: Utkarsh Yadav
Email: uttkarshyadav@gmail.com
Website: https://utkarshlabs.com