Privacy

Connected-account data

This notice explains how C000 handles information received when you connect an external account through C000 Connections.

Google / YouTube data

The initial Google production connection requests exactly this OAuth scope:

https://www.googleapis.com/auth/youtube.readonly

This scope is used to read information about the YouTube channel you authorise and to confirm the connected channel. It does not permit C000 to upload videos, publish content, manage advertising or spend money.

What we store

C000 may store connection metadata such as provider identifiers, channel/account identifiers, the authority granted, connection timestamps and an encrypted refresh credential needed to maintain the authorised connection. Short-lived access credentials are not intentionally retained as durable connection records.

How we use the data

Connected-account data is used only to provide and secure the connection features requested by the C000-powered product you are using, including confirming the correct account and performing actions that fit the authority you approved.

We do not sell Google user data or use connected-account data for unrelated advertising.

Google API Services User Data Policy

C000's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Security and credentials

Durable refresh credentials are encrypted at rest and are handled separately from public connection metadata. Connection state is short-lived, signed and one-time to reduce replay risk.

Revoking access and deletion

You can revoke Google access at any time through your Google Account's connected-app controls. C000 will provide the applicable product connection controls and deletion route before external production use. Revocation prevents future API access once Google has invalidated the credential.

Other providers

Meta and future providers use separate consent flows and provider-specific permissions. Their authority is not inferred from your Google connection.

Contact

Privacy questions can be sent to privacy@c000.co.uk.