Privacy Policy

This Privacy Policy describes the information Risca Studio accesses, collects, stores, uses, and deletes when you use Risca Social Scheduler, including its Windows desktop application, public website, and optional cloud scheduling service.

1. Information accessed and collected

• Account and YouTube API Data: Google/YouTube authorization tokens, connected channel IDs and names, and channel information returned by the YouTube Data API to identify your authorized publishing destinations.
• Publishing data: user-selected videos, thumbnails, titles, descriptions, destination channels, privacy choices where supported, scheduling dates and times, upload status, and technical error or retry records.
• Other connected platforms: authorized account and Page identifiers and publishing information needed for supported Facebook and Instagram features.
• Technical data: information needed for app operation and security, such as local application settings and server request or error logs.

2. How YouTube API Data is used

Risca Social Scheduler uses YouTube API Services to identify channels you authorize, upload your selected videos and Shorts-targeted videos, and set custom thumbnails when you request them. Authorization and API Data are used to carry out your requested actions, including scheduled uploads. We do not sell YouTube API Data or use it to create advertising profiles.

For additional information about Google's handling of information, review the Google Privacy Policy.

3. Storage, access, and sharing

The desktop app stores connection information and authorization credentials locally, with sensitive credentials protected by encrypted storage. When you choose cloud scheduling, the service transfers the media, selected publishing metadata, and necessary authorization information to its Hostinger-hosted backend over HTTPS. The backend stores the information required to execute the scheduled job and record its outcome. Hosting infrastructure and the connected platform process information only as necessary to provide the requested service. We do not sell your personal information or share YouTube API Data with unrelated advertisers.

4. Device storage, cookies, and similar technologies

The Windows application reads and writes local app settings, media file paths, and encrypted connection credentials on your device. The public website does not intentionally use advertising or tracking cookies. Our hosting provider may process standard server logs or use technical mechanisms needed for security and delivery. Risca Social Scheduler does not use device information for cross-site advertising tracking.

5. Retention and deletion

Local connection settings and authorization data remain on your device until you disconnect an account or remove the relevant local app data. Cloud scheduling requires temporary retention of uploaded media, encrypted authorization information, job metadata, and status/error records for processing, retries, and troubleshooting. A completed upload to YouTube remains on YouTube and is controlled through your YouTube account; deleting data from Risca Social Scheduler does not delete a published YouTube video.

To request deletion of stored cloud data or ask what data is retained, email orlandorisca@gmail.com with the subject “Risca Social Scheduler Data Deletion Request.” Identify the connected channel or job concerned without sending passwords or access tokens. We will verify that the request is authorized, delete applicable data under our control, and explain any data that must temporarily be retained for security or legal reasons. You can also uninstall the app or remove its local app data to delete information stored on your device; uninstalling alone may not remove every local data file.

6. Disconnecting and revoking Google access

In the desktop app, open Accounts → YouTube → Configure and disconnect or remove the connected channel. You can independently revoke the app's access at any time through Google Account third-party connections and security settings. Revoking access prevents new authorized API actions using that connection, but does not by itself delete already stored scheduling records or videos already published on YouTube. For deletion of stored cloud data, contact us using the address above.

7. Security

We use HTTPS for data in transit and encrypted storage for sensitive credentials in the application and cloud backend. No internet service can guarantee absolute security.

8. Google API Services disclosure

Risca Social Scheduler's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

9. Contact

For privacy questions, access requests, revocation help, or data deletion requests, email orlandorisca@gmail.com. Operator: Risca Studio. Website: riscastudio.com.