Back to home

Privacy Policy

Last updated: October 9, 2026

Zeotra ("Zeotra", "we", "us") is a web application at https://www.zeotra.com, operated by Shandarr Blades, Bridgetown, Barbados, that lets you upload, schedule and manage videos on your own YouTube channels and generate video titles, descriptions and tags with AI (the "Service"). This policy explains what information we collect — including the information we receive from Google APIs when you give us permission — how we use, share, store, protect and delete it, and the choices you have. You agree to this policy when you create an account or sign in.

In short:

  • We use Google Sign-In and YouTube API Services only to provide the features you use.
  • We do not sell your information, we do not show ads, and we never use Google user data for advertising.
  • We never use Google user data to develop, improve or train AI or machine-learning models, and we do not send it to AI services.
  • You can disconnect a YouTube channel, revoke our access in your Google Account, or delete your account at any time.

1. Information you give us

  • Account details: your name, email address and password if you register with email. Passwords are stored only as a bcrypt hash; we never store them in readable form.
  • Video details: the titles, descriptions, tags, category, language, privacy setting, schedule, thumbnail images and video files you submit for upload, and the metadata templates and automation rules you save.
  • Settings: your time zone and preferences.
  • Messages: your name, email address and message when you contact support, and your email address if you join a waitlist.
  • Research and competitor tracking: the search terms and public YouTube channels you enter in the research, competitor and free tools features.

2. Information we receive from Google

We only receive Google user data after you grant permission on Google's consent screen. Below is every permission (scope) Zeotra requests, what we access with it, and what we do with it.

2.1 Google Sign-In

Scopes: openid, email, profile

  • What we access: your name, email address, whether Google has verified that email address, your profile picture and your Google account ID.
  • How we use it: to create your Zeotra account, sign you in, and link Google Sign-In to an existing Zeotra account with the same verified email address.
  • What we store: your name, email address, profile picture URL and Google account ID. We do not store the access, refresh or ID tokens Google issues at sign-in.

2.2 YouTube (YouTube API Services)

Scopes: https://www.googleapis.com/auth/youtube.upload and https://www.googleapis.com/auth/youtube.readonly, requested only when you connect a YouTube channel.

  • Uploading (youtube.upload): we upload the videos and thumbnails you submit to your channel, with the title, description, tags, category and privacy setting you choose; a scheduled video is uploaded as private with the publish time you chose, and YouTube publishes it then. We do not edit or delete existing videos, comments, playlists or any other content on your channel.
  • Reading (youtube.readonly): when you connect a channel, and once a day afterwards, we read the channel's ID, name, description and thumbnail to show it in Zeotra and to confirm that your permission is still active. On the Analytics page we read the titles and view, like and comment counts of the videos you uploaded through Zeotra, to show them to you.
  • What we store: the channel's ID, name, description and thumbnail URL (refreshed daily); the YouTube video ID and link of each video you upload through Zeotra; and the OAuth access and refresh tokens, encrypted with AES-256-GCM. Video statistics and any other data the API returns are shown to you but not stored.

2.3 Limited Use of Google user data

Zeotra's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular: we use Google user data only to provide and improve the user-facing features described above; we transfer it to others only as needed to provide those features, to comply with the law, or as part of a merger or acquisition with notice to you; we do not use or transfer it for advertising, and we do not sell it; we do not use it to develop, improve or train generalized AI or machine-learning models; and no person at Zeotra reads it unless you ask us to (for example in a support request), it is necessary for security purposes such as investigating abuse, or it is required by law.

2.4 YouTube API Services

Zeotra uses YouTube API Services. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's handling of your data is described in the Google Privacy Policy (http://www.google.com/policies/privacy). Zeotra is not affiliated with or endorsed by YouTube or Google.

3. Information collected automatically

  • Security and abuse prevention: your IP address and browser (user agent) when you sign in, fail to sign in, change your password or account, or connect or disconnect a YouTube channel; and IP addresses, email addresses and account IDs as short-lived rate-limit counters.
  • Usage counts: how many uploads and AI generations you use each month, to apply your plan's limits.
  • Server logs and errors: our hosting provider keeps short-lived request logs, and we send error reports to Sentry with request bodies, cookies, query strings and IP addresses removed.
  • Analytics (only with your consent): if you choose "Allow all" in our cookie banner, Google Analytics records how pages are used, and Sentry records page-performance data.

4. Payments

Subscriptions are processed by PayPal. You enter your payment details with PayPal, not with us; we never receive or store card or bank details. We receive and store your PayPal subscription ID, plan, status and billing dates, and we pass PayPal your Zeotra account ID so the subscription is linked to your account. PayPal's handling of your data is covered by PayPal's Privacy Statement.

5. How we use information

  • To provide the Service: your account, uploading and scheduling videos to your channels at your direction, and showing your channels and video statistics.
  • To generate AI suggestions when you ask for them (see section 6).
  • To process subscriptions and enforce plan limits.
  • To send you service emails: email verification, password resets, and important account, security or billing notices. We do not send marketing email without your consent.
  • To keep the Service and your account secure: detecting abuse, preventing fraud and unauthorized access, and investigating incidents.
  • To answer support requests, fix bugs and improve the website (using analytics only with your consent).
  • To comply with legal obligations and enforce our Terms of Service.

6. AI features

When you ask for AI suggestions on the upload page, or use our free title generator, we send the text you entered — such as a topic, keywords, a draft title or description, or the name of a file from your own computer — to Google's Gemini API, which returns suggested titles, descriptions and tags. Google processes that text under the Gemini API Additional Terms of Service. We do not send video files, OAuth tokens, or any data obtained through your Google authorization (your Google account details or your YouTube channel data) to AI services, and we do not use any of your information to train AI models.

7. How we share information

We do not sell or rent your personal information, and we do not allow third parties to serve advertisements in Zeotra. We share information only as follows:

  • With YouTube, at your direction: the videos, thumbnails and metadata you choose to upload are sent to YouTube through YouTube API Services.
  • With service providers that process data for us, under terms that limit their use of it to providing their service:
    • Vercel — website and application hosting, and request logs (United States).
    • Supabase — database hosting (United States).
    • Upstash — rate limiting, sign-out records and short-lived caches.
    • Google Cloud (Gemini API) — AI suggestions, as described in section 6.
    • PayPal — subscription billing.
    • Resend — sending service emails.
    • Cloudflare — domain name services, and forwarding email sent to @zeotra.com addresses to our support inbox.
    • Sentry — error monitoring, with request bodies, cookies, query strings and IP addresses removed.
    • Google Analytics — website analytics, only if you consent.
  • For legal reasons: when required by law or a valid legal request, or to protect the rights, property or safety of our users, the public or Zeotra.
  • Business transfers: if Zeotra is involved in a merger, acquisition or sale of assets, your information may be transferred as part of it; we will notify you, and this policy (including the Limited Use commitments) will continue to apply to it.

8. Cookies and similar technologies

Zeotra stores information on your device using cookies and browser storage:

  • Essential (always on): a session cookie that keeps you signed in (up to 30 days), security cookies used during sign-in, and a record of your cookie choice (a cookie and browser storage, kept for one year).
  • Analytics (only if you choose "Allow all"): Google Analytics cookies and Sentry page-performance monitoring. With "Essential only", neither runs. Sentry error reporting, which sets no cookies, runs either way so that we can fix crashes.
  • Payments: on the billing page, PayPal's checkout is loaded from PayPal and may set PayPal's own cookies, under PayPal's policies.

We do not use advertising cookies. Apart from PayPal's checkout, no third party sets cookies through Zeotra unless you allow analytics.

9. How long we keep information

  • Account information, video details, templates and automation rules: while your account is active. They are deleted when you delete your account.
  • YouTube channel data and tokens: until you disconnect the channel, delete your account, or revoke Zeotra's access in your Google Account (see section 10). Stored channel details are refreshed daily.
  • Video files: passed through our servers in small pieces while they are being uploaded to YouTube, and never stored. We do not keep copies of your videos.
  • Public YouTube data for competitor tracking and research: refreshed by a daily job, and deleted if it has not been refreshed for 30 days. Search results are cached for up to 6 hours, and channel-name lookups for up to 7 days.
  • Upload logs: 12 months.
  • Security logs (sign-ins, failed sign-ins, password and account changes, YouTube channel connections, with IP address and browser): 12 months, including after account deletion, so that misuse of an account can still be investigated.
  • Email verification and password-reset links: expire after 10 minutes and are removed within a day.
  • Rate-limit counters: minutes to hours; sign-out records up to 30 days.
  • Error reports: for a limited period under our error-monitoring provider's retention settings.

Zeotra no longer offers Google Drive import (removed on October 9, 2026). We asked Google to revoke the Drive access granted for it and deleted the stored Drive tokens.

Deleted data may remain in our database provider's backups for a short period until those backups are overwritten.

10. Your choices: disconnect, revoke and delete

  • Disconnect a YouTube channel on the Channels page. We ask Google to revoke Zeotra's access right away, and delete the stored data and tokens for that channel. You can also revoke access yourself, as described next.
  • Revoke access from your Google Account at any time on the Google security settings page (https://security.google.com/settings/security/permissions). Zeotra loses access immediately. We check every stored permission daily; once one has stopped working, we delete the data and tokens obtained with it 7 days later, and in any case within 30 days. If you reconnect a YouTube channel within those 7 days, your Zeotra upload history for it is kept.
  • Delete your account in Settings. We ask Google to revoke Zeotra's YouTube access, cancel any PayPal subscription, and immediately delete your account and all associated data, except the security logs described in section 9. You can also ask us to delete your data by emailing support@zeotra.com; we will do so within 7 days.
  • Data on YouTube is not affected: deleting data in Zeotra, or deleting your Zeotra account, does not delete videos or other data already on YouTube. Manage those in YouTube Studio.
  • Analytics: choose "Essential only" in the cookie banner, or clear this site's cookies and storage in your browser to choose again.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete or export the personal information we hold about you, to object to or restrict certain processing, and to withdraw consent at any time. To exercise any of these rights, email support@zeotra.com; we will respond within 30 days. We will not treat you differently for exercising your rights.

EEA and UK: we process your information to perform our contract with you (providing the Service), for our legitimate interests (keeping the Service secure and preventing abuse), with your consent (analytics cookies), and to meet legal obligations. You may lodge a complaint with your local data protection authority.

California: we do not sell personal information or share it for cross-context behavioral advertising.

12. How we protect information

All traffic to Zeotra is encrypted with HTTPS. YouTube OAuth tokens are encrypted at rest with AES-256-GCM, and passwords are stored only as bcrypt hashes. Database access is restricted with row-level security; sign-ins and sensitive actions are rate-limited and recorded in security logs; actions such as deleting your account or disconnecting a channel require you to confirm your identity again; and pages use a strict Content Security Policy. No method of storage or transmission is completely secure, but we work to protect your information and will notify you and the authorities of a breach affecting your data as required by law.

13. International transfers

Zeotra and its service providers store and process information in the United States and other countries where they operate. Where the law requires it, these transfers rely on safeguards such as the European Commission's Standard Contractual Clauses.

14. Children

You must be at least 18 to use Zeotra (see our Terms of Service), and we do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.

15. Changes to this policy

We may update this policy. The date at the top shows the latest version. If we make material changes — in particular to how we use Google user data — we will notify you by email or in the app before they take effect, and ask for your consent where required.

16. Contact us

Zeotra is operated by Shandarr Blades, Bridgetown, Barbados, who is responsible for (the "controller" of) the personal information described in this policy.

Questions or complaints about this policy or our privacy practices: email support@zeotra.com or use our support page.