Privacy Policy

Last updated: August 24, 2026

ScrollBait Engine is a web application for creating, managing, rendering, scheduling, and publishing short-form video content to social media accounts explicitly connected and authorized by the user.

Information We Store

ScrollBait Engine may store information required to operate the application, including user account records, Series and Episode data, generated scripts, media metadata, rendered video information, publishing settings, background job status, publishing history, API responses required for workflow status, and authorization information for social accounts connected by the user.

When a social account is connected, ScrollBait Engine may store platform identifiers, account or channel information, granted OAuth scopes, access tokens, refresh tokens where provided, and token expiration information.

Google and YouTube User Data

ScrollBait Engine uses Google OAuth and the YouTube Data API to allow users to publish videos to YouTube channels that they own or are authorized to manage.

The application requests the following Google OAuth scope:

https://www.googleapis.com/auth/youtube.upload

This permission is used only to upload videos selected or generated by the user through ScrollBait Engine to the user's authorized YouTube channel. ScrollBait Engine does not require broader YouTube account permissions when a narrower permission is sufficient for the publishing workflow.

Depending on information returned as part of the authorized YouTube publishing workflow, ScrollBait Engine may process the user's YouTube authorization information, channel identifiers, video identifiers, publishing status, upload responses, and metadata necessary to complete and track uploads initiated by the user.

Google user data is used solely to provide user-requested YouTube functionality. It is not sold, used for advertising, shared with data brokers, or used to create advertising profiles.

Google user data obtained through Google APIs is handled in accordance with the Google API Services User Data Policy, including its Limited Use requirements.

TikTok User Data

ScrollBait Engine may use TikTok Login Kit and the TikTok Content Posting API to connect an authorized TikTok account and upload or publish content selected by the user.

Depending on the features enabled and approved for the application, ScrollBait Engine may request TikTok permissions such as user.info.basic, video.publish, or video.upload.

TikTok information processed by ScrollBait Engine may include the TikTok Open ID, basic creator or account information returned by TikTok, granted permissions, access tokens, refresh tokens, token expiration information, creator publishing capabilities, publishing status, and identifiers associated with content submitted through the application.

TikTok data is used only to identify the authorized creator, display information required for the publishing workflow, refresh authorization, prepare publishing requests, and upload or publish content explicitly selected by the user.

Facebook and Instagram User Data

ScrollBait Engine may integrate with Meta APIs to allow users to connect Facebook Pages and Instagram accounts that they own or are authorized to manage.

When these integrations are enabled, ScrollBait Engine may process account or Page identifiers, basic account information, granted permissions, authorization tokens, publishing capabilities, media container identifiers, publishing status, and other information required to upload or publish content requested by the user.

Facebook and Instagram data is used only to provide the connected-account and publishing functionality requested by the user.

Other Connected Platforms

ScrollBait Engine may support additional social platforms in the future. For any connected platform, the application will request only permissions reasonably necessary to provide the feature selected by the user and will use platform data only for the disclosed integration functionality.

How Authorization Tokens Are Used

Connected social account authorization tokens are used only to authenticate API requests, refresh authorization when permitted by the platform, retrieve information required for the connected account or creator workflow, and upload or publish content requested through ScrollBait Engine.

ScrollBait Engine does not intentionally expose OAuth access or refresh tokens to other users or include them in publicly accessible content.

Data Protection

ScrollBait Engine uses technical and organizational safeguards intended to protect sensitive information from unauthorized access, disclosure, alteration, or destruction.

Application traffic containing authentication credentials or OAuth data is transmitted using HTTPS/TLS. Authorization tokens and other sensitive credentials are stored on the server side and access is limited to the application components and authorized users that require them to perform the requested functionality.

Sensitive authentication credentials are not intentionally included in public pages, generated media, publishing metadata, or application logs.

Third-Party Services

ScrollBait Engine may communicate with configured third-party services, including social media platforms, AI generation providers, storage providers, or other APIs required to generate or publish content.

Information is shared with these services only when necessary to perform functionality requested by the user and subject to the relevant provider's terms and privacy practices.

AI and Model Training

ScrollBait Engine does not use Google user data, social account authorization data, or OAuth credentials to train generalized artificial intelligence or machine-learning models.

Data Retention

ScrollBait Engine retains application and publishing information only for as long as reasonably necessary to provide the application's functionality, maintain publishing history, troubleshoot workflows, or comply with applicable legal requirements.

Authorization information for a connected social account may be retained while that account remains connected to ScrollBait Engine.

Disconnecting Accounts and Deleting Data

Users can disconnect supported social accounts through the Social Accounts section of ScrollBait Engine. Disconnecting an account removes the locally stored access and refresh tokens associated with that connection where applicable.

Users may also revoke ScrollBait Engine's authorization directly through the privacy or connected-app settings provided by Google, TikTok, Meta, or the relevant social platform.

Users may request deletion of their locally stored account information, connected-account information, and associated application data by contacting the operator of ScrollBait Engine.

Sale of Personal Information

ScrollBait Engine does not sell personal information, OAuth tokens, social account information, or Google user data.

User Responsibility

Users should connect only social accounts that they own or are authorized to manage and should review generated content and publishing settings before submitting content to external platforms.

Changes to This Privacy Policy

This Privacy Policy may be updated when ScrollBait Engine adds new features, integrations, data processing activities, or security practices. The "Last updated" date at the top of this page indicates the latest revision.

Contact

For privacy questions, account disconnection assistance, or data deletion requests, contact the operator of this ScrollBait Engine instance.