Privacy Policy

Last Updated: August 2026

Avatar Harness ("we," "our," or "platform") operates as an automated video generation and auditing pipeline. This Privacy Policy outlines how operational data and third-party authentication tokens are processed within our systems.

1. Information We Access and Process

To integrate directly with video hosting networks, Avatar Harness requests access to account credentials via OAuth protocol:

• YouTube OAuth Credentials: Access tokens obtained via the YouTube Data API v3 are used exclusively to upload, catalog, and label synthetic videos generated through our pipeline.
• Temporary Token Storage: Tokens are held temporarily in memory during active execution jobs and are automatically invalidated upon session teardown. No authorization tokens are saved to persistent third-party databases.

2. Data Usage and Third-Party Sharing

We adhere to strict data minimization practices. We do not sell, license, or share user identity metrics or OAuth data with advertising networks, third-party brokers, or external data aggregators.

3. Synthetic Media Compliance

In adherence to Google and YouTube API policies, all media processed by the platform carrying synthetic voice or avatar components is hard-coded to trigger the compulsory syntheticMediaDisclosure flag during upload transmission.

4. Data Protection and Security

YouTube OAuth tokens are transmitted exclusively over HTTPS/TLS and are never written to application logs, error reports, or persistent disk storage. Access to any in-memory token data is restricted to the automated pipeline process itself, with no direct access by team members during normal operation.

5. Data Retention and Deletion

OAuth tokens are retained only in memory for the duration of an active pipeline execution and are discarded immediately upon session completion or failure. No Google user data is retained beyond the lifetime of a single upload operation. Users may revoke Avatar Harness's access at any time via their Google Account permissions page, which immediately and permanently invalidates any associated token.