Privacy Policy — Automated Publishing Tool (“Al HaMashmaut”)

Last updated: 6 July 2026

1. Purpose of this policy

This policy describes how the automated content-publishing tool operated on behalf of Tamir Dortal / “Al HaMashmaut” (“we”, “us”) accesses and handles data when it publishes video content to our own social media accounts on YouTube, Instagram, and TikTok.

2. What the tool does

The tool publishes short video clips that we ourselves provide, on a preset schedule, to our own YouTube, Instagram, and TikTok accounts, together with a title/caption we write. It acts only on our own accounts.

3. Data we access

To publish on our behalf, the tool uses official platform APIs authorized via OAuth. It accesses only what is required to upload a video and set its title/caption/description on our own accounts. It does not read private messages, does not collect data about other users, does not read followers’ personal information, and does not access analytics beyond confirming that a post succeeded.

4. Google user data

When publishing to YouTube, the tool uses Google account data solely to upload video files and set their metadata to our own YouTube channel via the YouTube Data API, under the youtube.upload scope. This access is used only for that purpose. Google user data is not transferred to others except as necessary to provide this feature, and is not used for advertising or sold.

5. Storage and security

OAuth access tokens are stored securely on our own private server and are used only to publish to our own accounts. Video files are stored temporarily on private object storage only for the moment of publishing and are removed afterward. We do not sell, rent, or share any data with third parties.

6. Retention

Access tokens are retained only while the tool is authorized and are deleted upon revocation. Temporary video files are deleted after publishing is complete.

7. Revoking access

Access can be revoked at any time from each platform’s connected-apps or security settings, which immediately stops the tool from publishing to that account.

8. Data deletion requests

To have the tool’s access removed and any associated data deleted: (1) revoke its access at any time from the connected-apps / security settings of the relevant platform (Google/YouTube, Meta/Instagram, TikTok) — this immediately stops the tool and the stored access token is deleted; and (2) you may email us at mcdortals@gmail.com to request deletion of any related data. Because the tool only publishes our own content to our own accounts and does not collect other users’ personal data, there is normally no personal user data to delete; access tokens and temporary video files are deleted as described in sections 5–7.

9. Contact

For questions about this privacy policy or how data is handled, please contact us via the contact form on mashma.net or by email at: mcdortals@gmail.com.