Privacy Policy
This policy explains what information CMIT Digital ("we", "us") collects through our client portal, EDI, and its Social Scheduler (together, "the Service"), how we use it, and the choices you have. The Service lets our team and our clients connect their business's social media accounts, schedule and publish posts, and see reports on how those accounts perform.
1. Information we collect
Information you give us
- Your name, email address and role when you are given access to the portal.
- The posts, captions, images and videos you create or upload in the Service.
- Settings you choose, such as posting times and report recipients.
Information from social networks you connect
When you choose to connect an account (for example YouTube, Facebook, Instagram, LinkedIn or Google Business Profile), you sign in with that network and approve the access it lists. We then receive an access token for that account, and use it to read and publish the information described below. We never see or store your password for those networks.
2. YouTube and Google data
The Service uses YouTube API Services. By connecting a YouTube channel you also agree to be bound by the YouTube Terms of Service, and Google's handling of your data is covered by the Google Privacy Policy.
| Permission you approve | What we use it for |
|---|---|
| View your YouTube account (youtube.readonly) | Show your channel name and picture, and list the videos on your channel with their views, likes and comments counts. |
| View YouTube Analytics reports (yt-analytics.readonly) | Show reports in the Service: views, watch time, subscribers gained and lost, traffic sources, audience age, gender and country, devices. |
| Manage your YouTube videos (youtube.upload) | Upload videos that you or your account manager schedule in the Service, with the title, description and settings you choose. |
| Manage your YouTube account (youtube.force-ssl) | Change the publish time, title or description of a video uploaded through the Service when you edit or move its post, and delete a scheduled video that has not gone public yet when you delete or pause its post. |
We only act on your YouTube channel when you, or a CMIT Digital team member working on your account, takes an action in the Service. We do not post, change or delete anything on our own.
Limited use. CMIT Digital's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google or YouTube data for advertising, we do not sell it, and we do not use it to train artificial intelligence models.
3. How we use information
- To run the Service: publish the posts you schedule, show their status, and send the alerts and reports you ask for.
- To support you and keep the Service secure.
- We do not sell personal information, and we do not use it for advertising.
4. Sharing
We share information only as needed to run the Service:
- With the social network you publish to, when you publish (for example, a video and its title go to YouTube).
- With service providers that host the Service or send email for us, under contracts that keep the information confidential.
- When the law requires it.
Information about one client's accounts is only visible to that client and to the CMIT Digital team members working on it.
5. Storage and security
- Access tokens are encrypted at rest and are never sent to your browser.
- The Service is served over HTTPS.
- Access is limited to signed-in users with permission for the client.
6. How long we keep information
- YouTube data (channel details, video lists, statistics and Analytics reports) is kept only as a short-lived copy to make pages load quickly, normally no more than 24 hours, and never more than 30 days before it is refreshed from YouTube or deleted.
- Access tokens are kept while the account stays connected, and deleted when it is disconnected.
- Video files uploaded for publishing are deleted from our server after the network has received them, unless you keep them in your media library.
- Posts and their results are kept while you use the Service, so you can see your history. Ask us and we will delete them.
7. Your choices
- Disconnect an account in the Service at any time. For YouTube this also revokes our access at Google.
- Revoke access to Google and YouTube data yourself at any time on the Google security settings page (also reachable at security.google.com/settings/security/permissions).
- Ask us for a copy of your information, or to correct or delete it, by emailing the address below. When an account is disconnected, its access tokens are deleted straight away and any stored copies of its data within 30 days.
8. Children
The Service is for businesses and is not directed to children under 16.
9. Changes
If we change this policy, we will update the date at the top and, for important changes, tell signed-in users in the portal.
10. Contact
CMIT Digital · cmitdigital.co
Email: nisargnaik@gmail.com