Privacy policy

This website and the waitlist

• The waitlist form stores your email address, the time, and which of the two forms on the home page you used. It stores nothing else.
• We use your email address for one purpose: to tell you when Verseshot opens. When you join, we also send you one email to confirm it.
• Cloudflare hosts this website, stores the waitlist and sends the confirmation email for us.
• When you use the form, an automatic check makes sure that a person sends it, and not a bot. Cloudflare runs this check.
• This website has no analytics and no advertising.
• To take your address off the waitlist, write to [email protected].

The Verseshot app and YouTube

The Verseshot app uses YouTube API Services. You can connect your own YouTube channel to the app, so that Verseshot can upload a finished music video to it. Google handles your data as the Google Privacy Policy says, and your use of YouTube is under the YouTube Terms of Service.

The permission that Verseshot asks for

When you connect your channel, you sign in to Google, and Google asks you to give Verseshot access to your YouTube account. Verseshot asks for one permission, the scope youtube.force-ssl. Google describes it as access to see, edit and permanently delete your YouTube videos, ratings, comments and captions.

Verseshot uses this permission for one thing only: to upload a finished music video that you select. Each upload sends this to your channel:

• the video, as a private video
• its title, description and tags
• the thumbnail that you picked
• the lyrics of the song, as a subtitle track
• the category Music
• the setting that says that the video has altered or synthetic content.

The video stays private until you publish it yourself in YouTube Studio. Verseshot never publishes, changes or deletes a video. It does not read your other videos, your comments, your ratings or your captions.

The Google user data that Verseshot gets and stores

• A refresh token from Google. With it, Verseshot can upload when you ask, and you do not have to sign in to Google for each upload. It is encrypted and kept in the storage of your Verseshot account.
• An access token from Google. Verseshot uses it to upload. It works for about one hour.
• For each upload, the ID of the YouTube video and the name of your channel. With them, the app shows a link to the video in YouTube Studio in the history of your project.

Verseshot uses this data only to upload the videos that you select and to show you where they went.

Who gets the data

• We do not sell your Google user data. We do not use it for advertising, and we do not use it to train AI models.
• We do not give it to any other party, with one exception: the company that hosts Verseshot stores Verseshot's data for us.
• When you upload a video, Verseshot sends the video and its details to YouTube.

How the data is protected

• The refresh token is encrypted. It is never in a backup.
• An access token stops working after about one hour.
• Verseshot sends data to Google and YouTube only over encrypted connections (HTTPS).
• While you connect your channel, a one-time code for the sign-in to Google is in a cookie that the scripts on the page cannot read (an HttpOnly cookie).

How long the data is kept

• The refresh token stays until you disconnect your channel. When Google tells Verseshot that the token is revoked or expired, Verseshot deletes it.
• An access token works for about one hour.
• The cookie of the connection goes away at the end of the connection. If you do not complete the connection, it expires after 15 minutes.
• Verseshot deletes the ID of an uploaded video and the name of your channel 30 days after the upload. It deletes them at once when you disconnect your channel, and when Google tells Verseshot that its access is revoked or expired. The record of the upload stays in your project, with its date, title and status, but without the link to the video. You can find the video in YouTube Studio.
• To delete your Verseshot account and all its data, write to [email protected] from the email address of your account. Within 7 days, Verseshot deletes your projects and their files, your notes, the keys and tokens that you gave Verseshot, your YouTube connection (Verseshot first revokes its token at Google), the video IDs and the channel name of your uploads, and your sign-in. To remove Verseshot's access to YouTube at once, use one of the two ways in How to remove Verseshot's access.

How to remove Verseshot's access

You can remove Verseshot's access to your YouTube account at any time:

• In the Verseshot app, open Settings and choose Disconnect. Verseshot revokes its token at Google and deletes it. It also deletes the video IDs and the channel name of your uploads.
• Or, in your Google Account, open myaccount.google.com/permissions and remove Verseshot's access. When Google tells Verseshot that its access is revoked, Verseshot deletes the token, the video IDs and the channel name.

The videos that Verseshot uploaded stay on your channel. You manage them in YouTube Studio.

Google API Services User Data Policy

Verseshot's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

• This website sets no cookies. When you use the waitlist form, Cloudflare runs the check against bots in a frame on the page. Cloudflare's privacy notice for this check says which data it uses.
• When you connect your YouTube channel, the Verseshot app sets one cookie. It holds a one-time code for the sign-in to Google, and the scripts on the page cannot read it (it is HttpOnly). The end of the connection removes it. If you do not complete the connection, it expires after 15 minutes.
• The sign-in of the Verseshot app uses cookies to keep you signed in.

Contact

For a question about this policy or about your data, write to [email protected].

Changes to this policy

When Verseshot changes what it does with your data, we change this page and the date at the top.