Privacy policy

Thomas Enterprise Uploader · last updated 7 November 2026

Thomas Enterprise Uploader is an internal tool of Thomas enterprises I B.V. It uploads videos we make ourselves to YouTube channels we own. This page explains which Google user data the tool accesses, how it uses and stores that data, and how you can revoke access.

Google user data we access

The tool only works with the Google accounts of our own team that own our YouTube channels. It asks for these permissions:

• https://www.googleapis.com/auth/youtube.upload: to upload our videos and to read the upload status of a video it uploaded.
• https://www.googleapis.com/auth/youtube.readonly (one channel only): to read the ID of the connected channel, so a video cannot go to the wrong channel.

How we use it

• We send the video file and the video details we wrote ourselves to YouTube: title, description, tags, category, language, privacy status, "not made for kids" and "contains synthetic media".
• We read back the ID and status of the uploaded video, and the ID of our own channel.
• We do not access comments, analytics, subscriber lists, playlists or any data about viewers or other YouTube users.

What we store

• The OAuth refresh token for each connected channel. It is stored on a server we operate, in a file readable only by the server user that runs the tool (file permissions 600). It is never shown in logs or messages.
• The IDs of the videos we uploaded and the outcome of each upload, and, if an upload is stopped because it targets the wrong channel, that channel's ID. These are kept in our own operational logs, on that server and in our private code repository.

Sharing

Apart from the providers that host our own systems (our server and our private code repository), we do not sell, share or transfer Google user data to anyone. We do not use it for advertising. The only party the tool talks to is Google, through the YouTube Data API and Google's OAuth service.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and revoking access

• A refresh token stays on our server until we replace or delete it. Once access is revoked, it no longer works.
• You can revoke the tool's access at any time in your Google Account: myaccount.google.com/permissions. After that the token no longer works, and the tool stops uploading for that account.
• If you want the stored token for your account deleted, ask us through the contact address shown on the Google consent screen for this tool, and we delete it from our server.

Cookies

The tool and these pages do not use cookies or any other tracking.

Google

Google's own handling of data is described in the Google Privacy Policy.

Changes

If the tool starts using Google user data in a different way, we update this page first.