Legal

Privacy Policy

This policy explains what YouTube Studio MCP, operated by Harper Labs LLC, stores, why it stores it, and how that data is used when a user connects a YouTube channel and operates it through the hosted MCP service.

What this product does

YouTube Studio MCP is a hosted service that lets a user sign in with Google, connect a YouTube channel, and use supported AI clients to read from and write to that channel through the official YouTube APIs.

Data we collect

  • Basic account session data needed to keep a user connected inside the website.
  • YouTube channel identifiers, channel titles, and connection records tied to the authenticated user session.
  • Encrypted OAuth credentials needed to call the YouTube APIs on behalf of the connected channel.
  • OAuth authorization records, access tokens, and refresh tokens needed to let ChatGPT and other supported MCP clients call the hosted service on behalf of the user.
  • Operational logs needed to debug failures, secure the service, and understand product usage.

How we use data

  • Authenticate a user and keep the connected channel available for future MCP requests.
  • Call the official YouTube APIs to read and write channel data when the user or their MCP client asks us to.
  • Secure the service, prevent abuse, and investigate operational issues.
  • Improve the product and documentation.

OAuth credentials and tokens

Google OAuth credentials are used only to access the connected YouTube account. OAuth tokens are stored encrypted at rest. Browser sessions and MCP access tokens are used to authenticate the user and supported MCP clients to the hosted service.

Third-party services

The current hosted product relies on Google APIs, Supabase, and Vercel. Those providers may process data as part of authentication, storage, logging, hosting, and API execution.

Retention and deletion

Connection records, OAuth authorization metadata, and operational records may be retained as long as reasonably necessary to operate and secure the service. If you need data deleted before a self-serve deletion flow exists, use the support path below.

Contact

Privacy requests and questions can be sent to andrew@videotoblog.ai.