Privacy Policy
This Privacy Policy explains how Fathom Frame (“Fathom Frame”, “we”, “us”, or “our”), operated by Antonio Jesús Roldán Rodríguez as an individual in Granada, Spain, collects, uses, stores, and deletes information when operating our internal editorial publishing tools and related website at https://fathomframe.com.
Contact: antoniorroldan1219@gmail.com
1. Who this policy covers
Fathom Frame is a private, internal tool used by a single operator to research, produce, review, and publish original educational video content to YouTube channels that we own and control. It is not a public SaaS product and is not offered to third-party creators or the general public as a publishing service.
Visitors to this public website may see informational pages only. Authorized operators who sign in to the private dashboard are subject to the practices described below.
2. Information we collect
Depending on how the tools are used, we may process:
- Account and contact data: name, email address, and authentication identifiers for the operator.
- Operational content we create: scripts, titles, descriptions, thumbnails, editorial notes, approval decisions, and publication schedules.
- Technical logs: IP address, browser/user-agent, timestamps, and error logs needed to secure and operate the service.
- Google account data obtained via OAuth: only after explicit authorization, limited to the scopes required for our workflow (for example channel identity, upload permission, and analytics for our own channels).
- YouTube data obtained through YouTube API Services: channel metadata, video metadata, upload status, analytics metrics for our owned channels, comments on our videos when analyzed for editorial feedback, and related API responses necessary to operate the studio.
3. How we use Google APIs and YouTube API Services
Fathom Frame uses Google APIs, including YouTube API Services, solely to manage and analyze YouTube channels that we own. Typical uses include:
- Authenticating the operator with Google OAuth 2.0.
- Uploading and updating videos and metadata on our own channels.
- Reading performance analytics for our own channels to decide what to produce next and when to publish.
- Reading comments on our own videos for editorial classification (for example constructive feedback vs noise).
We do not use YouTube API Services to scrape unrelated channels at scale, resell API access, build a competing public analytics product, or publish content without a human approval step.
Use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Our use of YouTube API Services is also subject to the YouTube API Services Terms of Service and YouTube API Services Developer Policies.
4. Google Privacy Policy
Google processes data according to its own policies. Please review the Google Privacy Policy and, for YouTube specifically, YouTube’s terms and privacy information available through Google’s policy center. Users can manage Google Account permissions at https://myaccount.google.com/permissions.
5. Legal bases and purposes
We process personal data to:
- Operate and secure the internal studio.
- Authenticate against Google and perform authorized YouTube actions on owned channels.
- Produce, approve, schedule, and publish original content.
- Measure performance of our own videos and improve editorial decisions.
- Comply with applicable law and respond to legitimate requests.
Where GDPR applies, our bases include legitimate interests in running our own publishing operations, performance of a contract with service providers, and legal obligations where relevant.
6. Data storage, retention, and deletion (YouTube / Google API data)
We store operational data on infrastructure under our control (for example a cloud virtual private server and related storage) and in databases used by the studio.
YouTube API data retention and deletion:
- For data retrieved through YouTube API Services that is subject to YouTube’s developer storage rules, we refresh or delete that data no later than every 30 days, unless a shorter period applies or an exception permitted by YouTube’s policies applies (for example limited retention of certain public statistics where expressly allowed).
- When an authorized Google Account connection is revoked, or when an operator requests deletion, we delete or de-identify associated OAuth tokens and related YouTube API data from active systems within a reasonable period, and from backups according to our backup rotation schedule.
- Content we create ourselves (scripts, finished videos, editorial notes) is retained as business records for as long as needed to operate the channels, unless we decide to delete it.
To request deletion of personal data we hold, email antoniorroldan1219@gmail.com with the subject “Data deletion request”. We will respond within a reasonable time and no later than required by applicable law.
7. Sharing of information
We do not sell personal data. We may share data only with:
- Google / YouTube, when the operator authorizes API access and performs publishing or analytics actions.
- Infrastructure providers that host our servers, storage, DNS, or email (for example Cloudflare and our cloud VPS provider), acting as processors under their terms.
- Authorities, when required by law.
We do not share YouTube API data with unrelated third parties for advertising, data brokerage, or independent AI/ML training markets.
8. Security
We use industry-standard safeguards appropriate to a small internal system, including encrypted transport (HTTPS), restricted dashboard access, least-privilege API scopes, and server hardening practices. No method of transmission or storage is 100% secure.
9. International transfers
Our primary operators and preferred infrastructure are in the European Economic Area. Some providers (including Google) may process data in other countries. Where required, transfers rely on appropriate safeguards offered by those providers.
10. Children’s privacy
Fathom Frame is not directed to children. Our public channels are educational and intended for general audiences or parents; we do not knowingly collect personal information from children through this website or the private dashboard.
11. Your rights
Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal data, and to lodge a complaint with a supervisory authority. In Spain, that authority is the Agencia Española de Protección de Datos (AEPD). To exercise rights related to data we control, contact antoniorroldan1219@gmail.com.
To revoke Google / YouTube access granted to Fathom Frame, visit Google Account permissions and remove the application.
12. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the website or tools after an update constitutes acceptance of the revised policy where permitted by law.
13. Contact
Antonio Jesús Roldán Rodríguez
Fathom Frame
Granada, Spain
antoniorroldan1219@gmail.com