Privacy Policy

Who we are

Jarvis Innhald is a private, internal tool operated by Indokalo AS (Norwegian organisation number 937 822 553). It is used only by Indokalo AS to run the company's own YouTube channels. It is not offered to the public, and no one outside the company can sign in to it.

Contact for anything in this policy: bobhelpstore@gmail.com.

What Google data the app uses

The app signs in only with Google accounts that Indokalo AS owns and controls, and asks for these permissions:

• youtube.upload - to upload short videos to Indokalo AS's own channels;
• youtube.readonly - to read the details of those same channels and their videos (for example upload status);
• yt-analytics.readonly - to read the analytics YouTube gives a channel owner for those channels: engaged views, average percentage viewed, and subscribers gained and lost.

The app does not request the separate monetary analytics permission (yt-analytics-monetary.readonly), so it cannot read revenue or other money figures from YouTube.

The app uses YouTube API Services. It does not access, collect or store personal data about other people: not about viewers, commenters or other YouTube users, and not the Google account data of anyone outside the company. Analytics are aggregated figures per channel and video, as YouTube provides them to the channel owner.

How the data is used

• to publish the company's videos on the company's channels;
• to measure how those videos perform, so the company can decide what to make next and report the results internally.

The data is not sold, not used for advertising and not shared with anyone for their own purposes.

Where it is stored and who processes it

• Google's sign-in gives the app a refresh token for each channel. It is stored in two places: as a GitHub Actions secret in the company's private GitHub repository (GitHub stores these secrets encrypted), and in a configuration file on the company's own computer. That local file is not encrypted; it is kept out of the repository and never published.
• The short-lived access tokens the app gets from a refresh token are kept in memory only while a run lasts, and are not saved.
• Channel and video figures are stored in the company's private GitHub repository (GitHub, Inc.) and may be shown in the company's own dashboard web app hosted on Cloudflare Pages (Cloudflare, Inc.).
• When the company's internal reporting software writes summaries, aggregated channel figures may be processed by its AI model provider (Anthropic PBC). No personal data about viewers is included, because the app has none.

How long it is kept, and how to remove access

There is no automatic deletion today. Figures stay in the company's repository, including its version history, until someone removes them. Access can be revoked at any time from the Google account's security settings: myaccount.google.com/permissions. A revoked refresh token stops working at once, but the stored copy stays where it is until it is removed by hand.

To ask for stored tokens or figures to be deleted, write to bobhelpstore@gmail.com; the deletion is done by hand.

Google and YouTube

Because the app uses YouTube API Services, Google's own privacy policy also applies to the data Google handles: policies.google.com/privacy. The YouTube Terms of Service apply as well: youtube.com/t/terms.

This page sets no cookies and loads nothing from other websites. The app does not place cookies on anyone's device.

Changes

If this policy changes, the date at the top changes with it.

Norsk samandrag

Jarvis Innhald er eit internt verktøy som berre Indokalo AS (org.nr. 937 822 553) brukar til sine eigne YouTube-kanalar. Appen loggar berre inn med Google-kontoar selskapet eig, og brukar løyva til å laste opp videoar og lese kanalstatistikk for desse kanalane. Appen ber ikkje om løyvet til inntektstal, og kan difor ikkje lese inntekt. Han hentar ingen opplysningar om andre personar, sel ingenting og deler ingenting til reklame. Innloggingsnøkkelen (refresh token) for kvar kanal ligg som kryptert hemmelegheit i GitHub og i ei ukryptert innstillingsfil på selskapet si eiga maskin, som aldri blir publisert; dei kortlevde tilgangsnøklane ligg berre i minnet medan ei køyring varer. Tala ligg i selskapet sitt private GitHub-repo. Ingenting blir sletta automatisk i dag. Løyvet kan trekkjast attende i Google-kontoen når som helst; då sluttar nøkkelen å verke, men kopien blir berre fjerna for hand. Spørsmål og ønske om sletting (gjort for hand): bobhelpstore@gmail.com.