1. Scope
This Privacy Policy applies to TCOS by TradingCardMD, the TradingCardMD website, and TCOS features that connect to third-party platforms such as YouTube and TikTok. “TCOS,” “TradingCardMD,” “we,” and “our” refer to the operator of these services.
2. Information you provide
TCOS may process information that you enter or select, including account and channel labels, original video files, titles, descriptions, captions, tags, publishing choices, scheduling details, support communications, and application settings.
3. Information received from connected platforms
Only after authorization, TCOS may receive account or channel identifiers, profile or channel names, access and refresh tokens, authorized permission details, video identifiers, upload and processing status, and—when the related reporting feature is enabled—channel or video analytics.
TCOS’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
4. How information is used
We use information to provide creator-facing features: connect authorized accounts, prepare and transfer creator-selected content, apply creator-approved metadata, show publishing outcomes, provide analytics requested by the creator, maintain reliability and security, troubleshoot errors, and respond to support requests.
5. Where information is stored
TCOS is a local-first Windows desktop application. Core operational records, publishing metadata, and application state are stored on the computer where TCOS is installed rather than in this public website. The TradingCardMD website is a static informational website and does not receive or store Google, YouTube, or TikTok OAuth tokens.
OAuth access tokens, refresh tokens, API secrets, and similar authentication material are stored through operating-system-protected credential storage on supported Windows installations. They are not intentionally stored in ordinary application settings fields, website storage, or public source files. Access to this credential storage is controlled by the signed-in Windows user account.
Operational metadata may be included in a backup only when the creator affirmatively enables and configures a backup feature. TCOS does not initiate a cloud backup merely because a social account is connected.
6. Sharing and transfers
We do not sell personal information or platform data. Data is transferred to YouTube, TikTok, or another service when necessary to perform an action the creator requested. We may use service providers that help operate enabled features, secure the service, or resolve support issues, subject to appropriate confidentiality and purpose limitations. Information may also be disclosed when required by law or to protect users, the service, or legal rights.
7. Artificial intelligence
TCOS may use an enabled AI service to help draft creator-facing text such as titles, descriptions, captions, or tags. The creator reviews this material before publishing. TCOS does not use Google user data to develop, improve, or train generalized AI or machine-learning models.
8. Retention
Local information remains under the creator’s control and may remain until removed through TCOS or the local installation is deleted. Platform credentials remain in protected credential storage only until they expire, are replaced, are disconnected, or are revoked. Disconnecting an integration prevents TCOS from making new authorized requests with that connection. Support records are retained only as reasonably needed to respond, maintain security, and satisfy legal obligations.
9. Your choices
You may decline a platform connection, limit requested permissions by not enabling a feature, disconnect an integration, revoke access directly through the platform, or request deletion of data controlled by TradingCardMD. Detailed steps are available on our Data deletion page.
10. Data protection mechanisms
TCOS applies the following safeguards to sensitive information and connected-platform data:
- Encryption in transit: Communications with Google, YouTube, TikTok, enabled service providers, and this website use HTTPS/TLS to protect data while it travels over a network.
- Protected credential storage: OAuth tokens and API secrets are stored through operating-system-protected credential storage on supported Windows installations and are access-controlled to the signed-in Windows user.
- Local access controls: Local TCOS records and media inherit the Windows account and file-system permissions of the computer where TCOS is installed. The public TradingCardMD website cannot browse those local files.
- Credential separation: Authentication material is kept separate from ordinary application settings and user-facing operational records. The website does not store connected-platform credentials.
- Redacted diagnostics: TCOS is designed to prevent raw access tokens, refresh tokens, API secrets, and similar credentials from being written into ordinary user-visible error messages or diagnostic records.
- Least-privilege authorization: TCOS requests only the scopes needed for enabled user-facing functions. A creator must complete the platform’s consent process before TCOS receives access.
- Revocation and deletion controls: Creators can disconnect integrations in TCOS, revoke access directly through the platform, and request deletion of information controlled by TradingCardMD.
No system can guarantee absolute security. Creators should protect their Windows account, device, backup destinations, and connected-platform accounts and should revoke a connection if unauthorized access is suspected.
11. Google and YouTube data protections
Google and YouTube user data is used only to provide or improve prominent creator-facing TCOS features that the user enables. TCOS does not sell Google user data, use it for advertising, transfer it to data brokers, or use it to train generalized AI models. Access is limited to the connected account and the permissions shown on Google’s consent screen.
Read-only YouTube access, when enabled, is used to identify the connected channel and display user-facing channel, video, metadata, and processing information inside TCOS. Upload access is used only to transfer a creator-selected video and creator-approved metadata. These permissions are not used to modify unrelated Google services.
12. Children
TCOS is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
13. Changes
We may update this policy as TCOS changes. The revision date at the top will identify the current version. Material changes will be reflected before the related data practice is used.
14. Contact
Questions, security concerns, or privacy requests may be sent to support@tradingcardmd.com.