Privacy Policy

1. Who We Are

Commeno ("we", "us", "our") is a YouTube comment management workspace for content creators. We are an independent developer product. For any privacy-related questions, contact us at privacy@commeno.app.

2. What Data We Collect

When you connect your YouTube account to Commeno, we collect and store the following:

From Google / YouTube (via OAuth 2.0):

• Your Google account email address and display name — used to identify your Commeno account.
• Your YouTube channel ID and public profile information (channel name, profile picture URL).
• Your YouTube videos and their metadata (title, video ID, publish date, view/comment counts).
• Comments and replies on your YouTube videos, including commenter usernames, content, timestamps, and like counts.
• Live stream chat messages from your YouTube live streams.
• OAuth access tokens and refresh tokens — required to communicate with the YouTube API on your behalf. These are encrypted at rest using AES-256 encryption.

Generated within Commeno:

• Reply drafts you write inside the app, including draft content and status (draft, sent, failed).
• Records of replies sent to YouTube through Commeno.
• "Save for Later" marks you apply to comments.
• Sync history, quota usage logs, and event logs — used to operate, debug, and monitor the service.

3. Google API Scopes We Request

Commeno requests the following Google OAuth 2.0 scopes, each for a specific purpose:

• youtube.force-ssl — to read your videos, comments, channel information, and live stream chat data; and to post and edit replies to YouTube comments on your behalf (only with your explicit approval).
• openid, email, profile — to identify your Google account and display your name and profile picture.

Commeno's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy , including the Limited Use requirements.

4. How We Use Your Data

We use your data exclusively to:

• Display your YouTube comments, videos, and live chat in the Commeno workspace.
• Sync your YouTube content periodically so your workspace stays up to date.
• Post replies to YouTube on your behalf — only when you explicitly approve and send a reply.
• Save your reply drafts, "Save for Later" marks, and other workspace state across sessions.
• Operate, monitor, debug, and improve the Commeno service.
• Respond to your support requests.

We do not use your data to serve advertisements, build advertising profiles, or for any purpose unrelated to operating Commeno.

5. Data Sharing

We do not sell, rent, or trade your personal data. We do not share your data with third parties except in the following limited circumstances:

• YouTube / Google: We send your approved replies to YouTube via the YouTube Data API. This is the core function of the service.
• Infrastructure providers: We use Railway for hosting and database infrastructure. Railway processes data solely to operate the infrastructure and is bound by its own privacy and security policies. No YouTube content is shared with them beyond what is stored in the database to operate Commeno.
• Legal requirements: We may disclose data if required by law or to protect the rights, property, or safety of Commeno, our users, or others.

6. Data Retention

• Your data is retained as long as your Commeno account is active.
• If you disconnect your YouTube channel from Commeno, your OAuth tokens are revoked and deleted immediately.
• If you delete your Commeno account, all associated data (comments, drafts, marks, tokens, logs) is permanently deleted within a reasonable period after request.
• Event logs and sync history may be retained in anonymized or aggregated form for up to 90 days for operational purposes.
• Comments that have been removed from YouTube may be retained in your Commeno workspace until you choose to permanently delete them.

7. Your Rights and Choices

• Revoke access: You can disconnect Commeno's access to your YouTube account at any time via Google's permissions page at myaccount.google.com/permissions. This immediately invalidates Commeno's ability to access your YouTube data.
• Data deletion: To request deletion of your Commeno account and all associated data, email privacy@commeno.app. We will complete the deletion within a reasonable period after your request.
• Data access: To request a copy of the data we hold about you, contact privacy@commeno.app.
• Correction: If any data we hold is inaccurate, contact us and we will correct it.

8. Data Security

• OAuth access tokens and refresh tokens are encrypted at rest using AES-256 encryption.
• User passwords are hashed using bcrypt and are never stored in plaintext.
• All data transmission occurs over HTTPS (TLS).
• Access to the production database is restricted to authorized infrastructure only.

9. Children's Privacy

Commeno is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at privacy@commeno.app.

10. International Data Transfers

Commeno's infrastructure is hosted in the United States. If you are located outside the United States, your data may be transferred to and processed in the United States. By using Commeno, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Commeno after changes are posted constitutes your acceptance of the updated policy.

12. Contact

For privacy-related questions or data requests, contact us at:
privacy@commeno.app

For general support:
support@commeno.app