1. What this policy covers
NoirGen Replay Studio is a private Windows application operated by NoirGen LLC for its own authorized YouTube channels. This policy covers the public information website and the application's access to Google/YouTube data and selected production providers. The website does not offer public accounts or access to the local production workspace.
2. Google and YouTube information
After an authorized owner grants Google OAuth access, the app can retrieve channel identifiers, names and statistics; owned-video identifiers, metadata, processing and publication status; captions and thumbnail status; and available YouTube Analytics reports such as views, watch time, engagement and subscriber changes. The app also sends owner-authorized video uploads, metadata, captions, thumbnails and scheduling requests to YouTube.
OAuth access and refresh credentials are used to maintain that authorized connection. They are stored in the channel's encrypted local credential vault. The app does not request Gmail, Google Drive or payment-account access as part of this YouTube connection.
3. Why information is used
Channel information identifies the account being managed. Video information supports publishing, scheduling, processing checks and duplicate prevention. Analytics supports performance reporting and bounded editorial improvements. The operator controls channel connections, publishing authorization, production settings and provider budgets.
NoirGen LLC does not sell Google user data or use it for advertising targeting, credit decisions, or general-purpose model training. Use of information received from Google APIs is limited to the enabled, owner-authorized features and is subject to the Google API Services User Data Policy, including the Limited Use requirements where applicable.
4. Local storage and external processing
Application databases, source records, production media, operational logs, diagnostic evidence and backups are stored on the operator's workstation. Credentials are encrypted locally; this does not imply that every local database, media file or backup is encrypted. Google/provider API requests use HTTPS. Optional phone access exposes the authenticated dashboard on the operator's trusted local network.
Retrieved YouTube analytics remains local by default. If the owner explicitly enables Codex analytics sharing, selected video identifiers, format/duration labels and performance measurements can be sent to OpenAI through the subscription-authenticated Codex CLI for strategy recommendations. Google OAuth credentials are excluded from those requests.
Other enabled production features can send selected scripts, transcripts and footage frames to OpenAI/Codex; narration text and a selected stock-voice identifier to ElevenLabs; and finished video to Higgsfield for optional processing or assessment. Twitch provides permitted creator/clip metadata and authorized media access. These providers process the necessary inputs under their own terms and the operator's account settings. Hosted AI processing is distinct from the local hosting of the production application.
5. This public website
This site contains static information and policy pages. Its source includes no advertising, audience analytics scripts, tracking pixels, account forms or upload endpoints. The hosting and DNS providers necessarily process standard request information, such as IP addresses, browser information and access times, to deliver and secure the site. The host may inject Cloudflare security/challenge scripts to distinguish legitimate traffic from automated requests. Their infrastructure practices are governed by their own policies. Production credentials, private videos and channel databases are not included in this website.
6. Retention and deletion
The operator controls local retention and backup handling. Google API data must be refreshed or deleted in accordance with the applicable YouTube API policies; authorized analytics may be retained while authorization remains valid. Revoking access stops future authorized access but does not itself erase previously stored local records.
An authorized user can request deletion of Google credentials and associated cached API data from the workspace operator. The operator will handle such requests within seven days, including review of relevant local diagnostics and backups. Independently owned production files, licensing records and records required for legal or security purposes may be handled separately. Deleting local app records does not automatically delete videos already uploaded to YouTube.
7. Control and revoke access
You can revoke this app's Google access through Google Account connections. Google's permissions-management page is also available at Google security settings. The app can then require a fresh owner authorization. Publishing authorization can be disabled separately in the local Studio.
Google's own collection and processing are described in the Google Privacy Policy. Use of YouTube is governed by the YouTube Terms of Service.
8. Contact and privacy requests
For access, correction, deletion or other privacy questions, authorized workspace users should contact their NoirGen LLC workspace operator using the User support email displayed in this app's Google authorization screen. This is a private operator-managed application; the public website does not register new users or collect a visitor contact list.
9. Changes
The operator will update this policy when the application's data practices change. The effective date above identifies this version. Material changes affecting authorized Google data require appropriate notice and consent before the changed processing begins.