Privacy Policy

Effective 9 October 2026

Pushwing ("Pushwing", "we", "us") is operated by Keshav Katwe, an individual, who is responsible for the data described in this policy. Pushwing is not yet a registered company. Pushwing lets you publish to and manage your own YouTube channels and Instagram professional accounts from an AI assistant such as Claude, ChatGPT or Cursor. This policy explains what data we handle, why, who we share it with, how long we keep it, and how you can delete it.

1. Use of YouTube API Services and Google data

Pushwing uses the YouTube API Services to upload and manage videos, read video and channel details, and read and reply to comments on channels you connect. By connecting a YouTube channel you also agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

Pushwing's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Pushwing's access to your Google account at any time from the Google security settings page, or by clicking Disconnect on the Pushwing dashboard (which also revokes the token with Google).

2. Data we collect

Your Pushwing account

  • Your email address and a user identifier, from our sign-in provider (Clerk).
  • API keys you create. We store only a one-way hash and the last four characters; the full key is shown to you once.

Connected YouTube channels (with your permission, via Google OAuth)

  • Channel ID, title, handle and profile image, so we can show which channel is connected.
  • OAuth access and refresh tokens, encrypted at rest (AES-256-GCM). They never leave our servers and are never shown to you, your AI assistant or anyone else.
  • When you ask for it through a tool: your videos' metadata (title, description, tags, privacy, thumbnail), statistics (views, likes, comment counts) and comments. These are fetched live, returned to your AI assistant, and not stored by Pushwing.

Connected Instagram professional accounts (with your permission, via Instagram Login)

  • Account ID, username, name, profile picture and account type.
  • Access tokens, encrypted at rest as above.
  • When you ask for it through a tool: your media, insights (reach, views, likes, comments, saves, shares) and comments. Fetched live and not stored.

Content you publish

  • Media files you or your AI assistant send to Pushwing for publishing. They are held in temporary storage and deleted automatically after 24 hours.
  • Publishing jobs: the target account, the metadata you supplied (for example title, description, caption, scheduled time), the status, and the resulting video or media ID.

Activity records

  • For each tool call: which tool ran, on which connected account, when, whether it succeeded, the estimated YouTube quota it used, and its arguments with anything named like a token, secret or key removed and long values truncated. These records power the Activity page, rate limits and quota estimates, and help us investigate abuse.

Cookies and device information

The dashboard uses cookies set by our sign-in provider (Clerk) to keep you signed in. Pushwing does not use advertising or analytics cookies and does not store information on your device for any other purpose. Our servers keep standard request logs (such as IP address and timestamps) for security and debugging.

3. How we use data

Only to provide the features you ask for:

  • To connect your accounts and keep the connection working (refreshing tokens).
  • To perform the actions you or your AI assistant request: uploading, scheduling and editing videos, setting thumbnails, publishing posts, reading analytics, and reading or replying to comments.
  • To show you your connections, publishing jobs, activity and usage on the dashboard.
  • To enforce limits, prevent abuse, and keep the service secure.

We do not sell your data, use it for advertising, use it to train AI or machine-learning models, or let humans read it, except where you give us permission (for example in a support request), where it is necessary for security or to comply with the law.

4. How data is shared

  • Your AI assistant. Results of tools you run (for example video statistics or comments) are returned to the AI assistant you connected (such as Claude, ChatGPT or Cursor). You choose that assistant and its provider's own privacy policy applies to what it receives.
  • Google and Meta. Content and metadata you publish is sent to YouTube or Instagram, as you request.
  • Service providers that process data on our behalf: Clerk (sign-in), Cloudflare (temporary media storage), and our hosting provider. They may use it only to provide their service to us.
  • Legal reasons, if required by law or to protect the rights and safety of users and the public.

We do not share data received from Google or Meta with anyone else.

5. Retention and deletion

  • Media files: deleted automatically after 24 hours.
  • Connected accounts: clicking Disconnect on the dashboard deletes the connection and its tokens immediately; for YouTube we also revoke the token with Google.
  • Instagram: removing Pushwing under Settings → Apps and websites in Instagram triggers Meta's data-deletion request, and we delete that account's connection and tokens. You receive a confirmation code you can check.
  • Everything else (publishing jobs, activity records, API keys) is kept while your Pushwing account exists. To delete your account and all associated data, email privacy@pushwing.com from the address you signed in with; we complete deletion within 30 days.

6. Security

Provider tokens are encrypted at rest; API keys are stored only as hashes; all traffic uses TLS. Access to production systems is restricted. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by law.

7. Children

Pushwing is not directed to children under 13 (or the minimum age in your country) and we do not knowingly collect their data.

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to or restrict processing. Email privacy@pushwing.com and we will respond within 30 days.

9. Changes

If we change this policy we will update the effective date above, and for material changes notify you by email or on the dashboard before they take effect.

10. Contact

Pushwing is operated by Keshav Katwe. Questions about this policy or your data: privacy@pushwing.com.