Privacy Policy

Last updated: October 6, 2026

1. Who we are

Polyflow is a content-operations tool operated by Videomite Reklamcılık ve Prodüksiyon Hizmetleri A.Ş. ("Videomite", "we", "us"). It is used by Videomite staff and, by invitation, by the rights holders whose channels Videomite manages, to manage the YouTube channels in Videomite's network: to review and edit video titles, descriptions, tags, translations and thumbnails, and to upload videos. Each user sees only the channels assigned to them. Only people whose account an administrator has invited can sign in.

This policy explains what information Polyflow accesses, collects, stores, uses and shares, and the choices you have. Your use of Polyflow is also governed by our Terms of Service.

2. YouTube API Services

Polyflow uses YouTube API Services. By using the YouTube features of Polyflow you agree to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy.

3. Information we access and collect

Signing in with Google

When you sign in, Polyflow requests the openid, email and profile scopes and receives your name, email address, profile picture address and Google account identifier. We store these together with the role and teams an administrator assigned to you and the time of your last sign-in. Your email address is what identifies your account in Polyflow.

YouTube channels

Administrators connect the YouTube accounts of the channels Videomite manages, using the https://www.googleapis.com/auth/youtube and https://www.googleapis.com/auth/youtubepartner scopes. Through this connection Polyflow reads channel and video information (titles, descriptions, tags, translations, thumbnails, privacy status, view and subscriber counts, captions) so that staff can review it, and writes changes back to YouTube only when a person presses Publish or Upload. Videos uploaded through Polyflow are always uploaded as private. We store the authorization token for each connection, encrypted.

Google Drive (optional)

You may connect your own Google Drive to import a video file for upload, using the https://www.googleapis.com/auth/drive.readonly scope. Polyflow lists your folders and files only while you browse them in the import window and copies only the file you choose. We store the email address of the connected Drive account and its authorization token, encrypted. Polyflow never changes or deletes anything in your Drive.

Your activity in Polyflow

• A record of which fields you changed on which video and when (the names of the fields, not their old values), kept so the team can see who changed what.
• Drafts you save, notifications addressed to you, your review decisions on AI suggestions, and the uploads you start.

Technical information

Our servers log requests for security and troubleshooting: the IP address, the signed-in account's email address, the address requested, the time and the result. These logs are kept for a limited period and then deleted automatically.

The demo

Videomite also runs a demonstration of Polyflow at demo.polyflow.videomite.tech, filled with invented channels and videos. The demo does not connect to YouTube, Google Drive or any AI service. When someone signs in to the demo with an access code, the demo records the IP address, the time of sign-in and the time of the last activity for that code, so that Videomite can see how its demo is used.

4. How we use information

We use the information only to provide Polyflow's features to the people using it:

• to sign you in and decide which channels you may see and edit;
• to show, edit and publish video information on YouTube when you ask for it;
• to import and upload the video files you choose;
• to prepare AI suggestions for titles, descriptions, tags, translations and short clips;
• to keep Polyflow secure and to fix problems.

We do not use your information for advertising, we do not sell it, and we do not build profiles of you.

AI suggestions

To prepare suggestions, Polyflow sends video content (titles, descriptions, tags, captions, and for uploads the video file) to Google's Gemini API, a paid service under whose terms Google does not use this content to improve its products. Information about you as a user is not sent. A suggestion is only a preview: nothing is saved to YouTube until a person reviews it and presses Publish.

5. How we share information

• Google: Polyflow runs on Google Cloud, and it uses the YouTube, Google Drive and Gemini APIs as described above.
• Videomite's own tools: public identifiers of YouTube channels (channel ID, name and handle) may be passed to Videomite's internal market-research tool. No information about users is passed.
• When required by law, or to protect the security of Polyflow and its users.

We do not share your information with anyone else.

6. Limited Use of Google user data

Polyflow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve the user-facing features described in this policy. It is not transferred to advertising platforms or data brokers, not used for advertising, and not read by people except with your agreement, for security, or to comply with the law. Data obtained through Google Workspace APIs, such as Google Drive, is not used to develop, improve or train generalized AI or machine learning models.

7. How we protect information

• All traffic to Polyflow is encrypted (HTTPS only).
• Authorization tokens for YouTube and Google Drive are stored encrypted (AES-256-GCM).
• Each user sees only the channels of the teams they belong to; administrative functions are limited to administrators.
• Data is stored with Google Cloud in the European Union.

8. How long we keep information

• Your account information is kept while your account exists. When an administrator deactivates your account, you can no longer sign in and your Google Drive connection is deleted and revoked at Google.
• Channel and video information is refreshed from YouTube when channels are synchronized, and it is deleted when the video or channel is removed from YouTube or from Polyflow.
• Uploaded video files are deleted after they are published and in any case within 30 days.
• Notifications are deleted after 60 days. A draft is deleted when the video is published.
• The record of changes is kept as long as the video is managed in Polyflow.
• In the demo, the IP address and the times recorded for an access code are deleted when a new set of access codes is issued; the demo's invented data is reset every night.

You can ask us to delete your information at any time by writing to privacy@videomite.com.

9. Revoking access

You can disconnect Google Drive inside Polyflow at any time: this deletes the token we stored and also revokes the access at Google. For administrator accounts, whose Google account may also hold a YouTube connection, Polyflow deletes the token and leaves the revocation to the Google security settings page, because a revocation ends every permission that Google account gave Polyflow. When an administrator disconnects a YouTube connection, its token is deleted and revoked at Google. You can also revoke Polyflow's access to your Google account at any time on the Google security settings page (Third-party apps with account access).

10. Cookies and storage on your device

• polyflow_auth: keeps you signed in for up to 8 hours.
• XSRF-TOKEN: protects your actions against cross-site request forgery.
• JSESSIONID: used only during sign-in and discarded right after.
• Your browser also remembers your light or dark theme choice and, for the current tab, your video list filters.

Polyflow uses no analytics, advertising or tracking cookies. Fonts are loaded from Google Fonts, and video thumbnails and channel pictures are loaded from YouTube's and Google's image servers, which therefore receive your IP address. Polyflow does not allow any other third party to serve content.

11. Children

Polyflow is a work tool for Videomite staff and its partners and is not intended for children.

12. Changes to this policy

If we change how Polyflow uses Google user data, we will update this page and inform users in Polyflow before the change applies. The date at the top shows the latest version.

13. Contact

Questions or complaints about this policy or your information: privacy@videomite.com.
Videomite Reklamcılık ve Prodüksiyon Hizmetleri A.Ş.