1. Who we are
Publisher OS is a workspace for authors and independent publishers to organise books and brand profiles, prepare social content, and manage supported publishing workflows. This policy covers publisheros.app and the Publisher OS application, including its current deployment at publisher-content-os.vercel.app.
Publisher OS is marketing software operated by Mandarin-Gear Ltd. Manuel Becvar is the privacy contact. Contact: manuel@manuelbecvar.com.
Business/contact address
Publisher OS
Unit B5, 8/F, Yau Tak Industrial Building,
No. 21 San On Street, Tuen Mun,
Hong Kong SAR
2. Information we process
| Information | Why it is used |
|---|---|
| Account and workspace information | Email address, account identifiers, workspace membership and preferences to provide and secure your account. |
| Content you provide or create | Book details, uploaded files, images, videos, prompts, captions and drafts to prepare, store and deliver your content. |
| Connected platform information | Account, Page or channel identifiers, display names, granted permissions and authorization tokens to connect the account you choose. |
| Publishing and performance records | Publishing instructions, times, destination identifiers, upload results, processing status and available platform metrics to manage supported workflows. |
| Technical and support information | Request logs, IP addresses, browser information, errors and communications to operate the service, troubleshoot problems and protect accounts. |
Only information relevant to the features you use should be processed. Avoid uploading confidential or sensitive personal information unless you have authority and a specific need to do so.
3. How information is used
We use information to provide your workspace, prepare the content you request, carry out approved uploads and scheduled publications, show delivery status and supported analytics, provide support, prevent abuse and meet applicable legal obligations.
Connecting an account is separate from approving a publication. A scheduled publication authorizes the selected action at the requested time, including when you are not signed in. Platform errors or expired access may prevent or delay delivery.
Where applicable law requires a legal basis, the relevant bases include performing our agreement with you, consent for optional account connections, legitimate interests in operating and securing the service, and compliance with legal duties. You may withdraw consent for a connection at any time.
4. Google and YouTube data
Publisher OS uses YouTube API Services. When you connect YouTube, Google asks you to authorize the permissions requested by the app. The current integration uses channel-read and video-upload access to identify your channel, upload a video you approve and check its status. It does not request access to your Gmail messages.
We store the channel identifier and title, authorization information, and records needed to track the upload, including the video identifier, submitted title and description, audience and synthetic-content selections, privacy status and processing status. The current YouTube feature uploads privately; connecting does not make a video public.
Publisher OS’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Google user data is used only for the disclosed, user-facing connection and upload features. It is not sold, used for advertising, used to determine creditworthiness, or used to train general-purpose AI models. Google authorization tokens are not sent to content-generation models. Human access to Google user data is limited to circumstances permitted by Google’s policies, such as your affirmative permission, necessary security investigation or legal obligations.
See Google’s Privacy Policy. You can revoke access at Google Account permissions. Removing access does not itself delete a video from YouTube.
5. Instagram and Facebook
When you connect Meta accounts, we use the account and Page information, permissions and authorization needed to provide the supported features you select. This can include content delivery, publishing status, eligible music catalogue searches and performance information. Information and content you authorize for publication are transmitted to the selected platform.
Instagram music availability depends on Meta and your account. Catalogue previews and track metadata support music selection; Instagram music is not automatically embedded in exported videos. You can manage connected business integrations in your Meta account settings. Meta’s handling of information is described in its Privacy Policy.
6. Service providers and AI-assisted features
The service relies on providers for hosting, authentication, database and file storage, and content generation. The current infrastructure includes Vercel and Supabase. Content you submit to an AI-assisted feature, together with relevant book or profile context, may be sent to the AI provider used for that feature. Review generated material before using it.
Providers receive information necessary for their function. Connected platforms receive the content and instructions you authorize. We may also disclose information where necessary to comply with law or protect the security and rights of users and the service. Google data remains subject to the additional restrictions above.
The exact AI providers, processing locations and contractual safeguards must be confirmed and listed before this draft is published. Do not assume that connecting a social account authorizes unrelated use of its private data for AI generation.
7. Storage, security and retention
We use access controls and security measures designed to protect information. Saved social authorization credentials are encrypted by the application. No online service can guarantee absolute security.
Workspace content is retained while needed to provide the service or until you request deletion, subject to applicable legal obligations. Technical records and backups require defined retention periods; these periods must be confirmed before publication. Service providers may process information in countries other than your own. Applicable transfer safeguards and processing locations must be documented before launch.
For YouTube data, applicable API rules require certain stored data to be refreshed or deleted within 30 days, and require deletion following a user’s deletion request or in-app revocation within seven days. Revocation through Google’s settings also requires deletion within the applicable platform deadline. These are operational requirements to verify before publishing this policy, not a claim that an unverified automated deletion process already exists.
8. Disconnecting and requesting deletion
To disconnect YouTube in Publisher OS, go to Settings → Social connections → YouTube and choose Disconnect for the relevant profile. You can also revoke the authorization directly in Google Account permissions. If a connection has expired, reconnect only if you want Publisher OS to regain access.
To request deletion of your account, workspace content or stored connected-platform data, email manuel@manuelbecvar.com with the subject “Publisher OS data deletion”, the account email and relevant profile or channel. We may need to verify your authority before handling the request. Never send passwords or access tokens.
Deleting data in Publisher OS does not delete posts or videos held by Instagram, Facebook or YouTube. Manage those publications directly through the relevant platform. Cancel outstanding publishing instructions if you no longer want them carried out.
9. Your privacy rights
Depending on your location, you may have rights to access, correct, delete or obtain a copy of your information; restrict or object to processing; withdraw consent; and complain to a competent data-protection authority. Contact us using the address above. We will handle requests in accordance with applicable law and platform requirements.
11. Children and policy changes
Publisher OS is intended for adult authors and publishers, not for children. Do not create an account if you are under 18. A video’s “made for kids” setting relates to its audience and does not make Publisher OS a service for children.
We will update the policy when practices change and provide additional notice or request consent where required. The published policy will show its effective or updated date. Questions may be sent to manuel@manuelbecvar.com.