WooshOut logoWooshOut

Privacy Policy

Last updated: June 9, 2026

This Privacy Policy describes how WooshOut ("we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, create an account, connect social media accounts, publish content, make a purchase, or otherwise communicate with us through https://www.wooshout.com (the "Site") or our related applications (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date, and take any other steps required by applicable law.

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

Information We Collect

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

When you register for an account, we collect account information such as your name, email address, authentication details, account preferences, workspace information, billing status, and connected-account records. If you subscribe to a paid plan, payment and billing information is handled by Stripe; we store billing identifiers and subscription status needed to manage your account, but we do not store full payment card numbers.

Google API Services and YouTube Data

If you choose to connect a YouTube account, WooshOut uses Google API Services only after you authorize the requested permissions. The YouTube permissions we request let us upload videos to your YouTube channel, read basic channel details, and post YouTube comments that you choose to publish through the Services.

Depending on the features you use, we may access, receive, or store Google user data such as OAuth access and refresh tokens, granted scopes, token expiry information, YouTube channel identifiers, channel title, channel handle, channel thumbnail URL, basic channel statistics, the list of channels available to the authorized account, video files and metadata you submit for publishing, YouTube privacy status and publishing options, upload progress, YouTube video identifiers, and first-comment text that you ask us to post.

We do not use Google user data for advertising, retargeting, personalized ads, data brokerage, credit decisions, or unrelated profiling. Google Analytics data described below is separate from YouTube account data obtained through Google API Services.

How We Use Your Information

We use the information we collect in various ways, including to:

  • Provide, operate, and maintain our website
  • Improve, personalize, and expand our website
  • Understand and analyze how you use our website
  • Develop new products, services, features, and functionality
  • Communicate with you about customer support, security, account notices, product updates, and billing
  • Send you service-related emails
  • Find and prevent fraud

How We Use Google User Data

We use Google user data only to provide and improve user-facing YouTube features that are visible in the Services, including connecting your YouTube channel, showing connected-account status, refreshing tokens when needed, preparing and uploading videos that you select, applying your chosen YouTube title, description, tags, privacy status, paid-product-placement, subscriber-notification, made-for-kids, and altered-content settings, posting first comments when you request them, displaying publish status, troubleshooting failed uploads, and protecting the Services from abuse.

Log Files

We collect server logs and diagnostic events to operate, secure, debug, and improve the Services. These logs may include IP address, browser type, device information, referring and exit pages, date and time stamps, request identifiers, and application events. We use this information for security, troubleshooting, abuse prevention, service administration, and aggregate usage analysis.

Cookies and Similar Technologies

We use cookies and similar technologies to run the Services, keep accounts secure, remember preferences, and understand website usage.

Essential Cookies

Essential cookies are required for login sessions, account security, fraud prevention, cookie preference storage, and core application functionality. These cookies are always on because the website and app cannot work properly without them.

We do not use Google AdSense or advertising cookies to serve ads on the Site.

Analytics Cookies

Where consent is required for analytics cookies, we ask for your choice before loading Google Analytics. Where consent is not required, analytics may be enabled by default unless you have previously rejected analytics cookies.

Third-Party Services

We use selected third-party services to operate, secure, and improve the Services. These providers have their own privacy policies for how they process data.

Sharing, Transfer, and Disclosure of Google User Data

We do not sell Google user data. We do not share Google user data with advertisers, advertising networks, data brokers, or analytics providers for advertising or independent profiling.

We share, transfer, or disclose Google user data only in the limited circumstances needed to provide the Services:

  • With Google and YouTube, when you authorize us to read your channel information, upload videos, refresh OAuth tokens, or post YouTube comments on your behalf.
  • With infrastructure providers that host, store, secure, or process the Services, including application hosting, database, object-storage, queue, and worker providers, only as needed to operate WooshOut.
  • With service providers that help us diagnose errors, prevent abuse, maintain security, provide customer support, or process payments, under confidentiality or data-processing obligations where applicable.
  • When required to comply with law, legal process, enforce our terms, protect rights and safety, investigate abuse, or complete a business transaction such as a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.
  • With other third parties only when you direct us to do so or give us explicit consent.

Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Protection of Google User Data and Sensitive Data

We use administrative, technical, and organizational safeguards designed to protect Google user data and other sensitive data against unauthorized access, disclosure, alteration, and loss.

  • OAuth access tokens and refresh tokens are stored server-side and encrypted at rest using AES-GCM with environment-managed encryption keys.
  • Google client secrets, token encryption keys, media signing secrets, and storage credentials are kept in server-side runtime environment variables and are not intentionally exposed in client bundles.
  • Data is transmitted over HTTPS/TLS where supported, including OAuth callbacks, authenticated app requests, and provider API calls.
  • Uploaded media is stored in object storage and accessed through authenticated application routes, provider publishing workers, or short-lived signed URLs.
  • We apply least-privilege access controls so Google user data is available only to authorized users, operational systems, and service providers that need it to provide, secure, maintain, or troubleshoot the Services.
  • Access to connected-account data is limited to the authenticated account owner and authorized operational systems that need the data to provide publishing, retry, support, security, and debugging functions.
  • We limit diagnostic logs and API responses so OAuth tokens and client secrets are not intentionally returned to users or exposed in normal troubleshooting output.
  • We retain Google user data only for as long as reasonably needed to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support retry or debugging windows. You may disconnect your YouTube account or contact us to request deletion of your data.

Third-Party Privacy Policies

Third-party services may process data according to their own privacy policies. Please review those policies for more detail about their practices and available controls.

You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers' respective websites.

Google Analytics

We use Google Analytics to understand how users interact with our Site. Google Analytics collects information such as how often users visit the Site, what pages they visit, and what other sites they used prior to coming to the Site.

Google Analytics may process device, browser, interaction, and approximate location information according to Google's own policies and your analytics-cookie choices.

For more information on how Google collects and processes data, please visit How Google uses information from sites or apps that use our services.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

CCPA Privacy Rights (Do Not Sell My Personal Information)

We do not sell your personal information.

Under the CCPA, among other rights, California consumers have the right to:

  • Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.
  • Request that a business delete any personal data about the consumer that a business has collected.
  • Request that a business that sells a consumer's personal data, not sell the consumer's personal data.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at hello@wooshout.com.

GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

  • The right to access: You have the right to request copies of your personal data.
  • The right to rectification: You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
  • The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
  • The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
  • The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at hello@wooshout.com.

Children's Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

WooshOut does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately at hello@wooshout.com, and we will do our best efforts to promptly remove such information from our records.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Effective Date: This Privacy Policy is effective as of June 9, 2026.