Privacy Policy

1Who we are

This Privacy Policy explains how UnkiSocialManager ("the app") and its operator, Vitalik Korjenevich ("we", "us", "our"), handle information. UnkiSocialManager is a local-first desktop application for Windows that helps creators manage their own channels: preparing videos, writing metadata with optional AI help, scheduling and publishing, reviewing analytics and researching trends. The app runs on your own computer. We operate only this website and a license server (see section 3); there is no server that stores your videos, drafts or platform data, and none of them is sent to us.

2What stays on your computer

The following is processed and stored only on your device, in the app's local data folder:

• Your video files, generated previews and upload copies, titles, descriptions, tags, thumbnails and schedules.
• Cached channel information, video lists, analytics reports and research history from the platforms you connect.
• Your profiles (separate workspaces), channel plan, publishing defaults, AI settings and appearance settings.
• An audit log of actions the app performed on your behalf, so you can review them.

None of this is uploaded to us. It leaves your computer only when you publish or request something that needs a third party, as described below.

3License account

Some features (uploading and the AI researcher) depend on your plan. To verify it, the app asks you to sign in with Google. This sign-in requests only your basic profile (openid, email, profile) and is separate from connecting a YouTube channel. Our license server then stores:

• Account: your Google account ID, email address and name, when the account was created and last used, and whether it is blocked.
• Devices: for each computer you sign in on, the device's public key (a random key the app creates on that computer) and its hash, a device name (by default "Windows" and your computer's network name), and when it was first and last seen. This is used to apply the device limit; no hardware identifiers are collected.
• Sign-in sessions: sign-in tokens (stored only as hashes) with their creation, expiry and last-use times.
• Licenses: your plan, its start and end dates, how it was obtained (purchase, license key or grant by us), the key or order reference, cancellation and revocation dates, and internal notes.
• Usage events: for the Free plan limits, one record per counted action: a random request ID, the kind of action (a video upload or an AI researcher request), the time, and whether it was allowed or later refunded. Never the videos, titles or questions themselves.
• Subscription and payment events: if you subscribe, we receive from our payment provider Creem your customer ID, subscription ID, subscription status, plan (monthly or yearly), period dates, transaction IDs, the event ID, type and time (purchase, renewal, cancellation, refund or dispute), the buyer email used at checkout, and we keep a hash of each notification and a record of each checkout you started in the app (plan, time and status). We never receive or see your card or bank details.
• Administrator log: actions our administrators take on your account (for example granting or revoking a license, unlinking a device or blocking an account), with the administrator's email and the time.
• Security data: rate-limit counters keyed by IP address and account, and request logs of our HTTPS proxy (IP address, time, path, status and client identifier; never query strings, authorization headers or cookies).

On your computer, the license sign-in token, the signed entitlement and the device's private key are kept in Windows Credential Manager; the private key never leaves your computer. The app checks your plan with the license server at least every few days; without that check Premium stops working until the app can connect again.

If you subscribe to Premium, the app opens Creem's checkout page in your browser. Creem (the Merchant of Record) is a separate recipient of your data: you enter your name, email, billing country and payment details directly with Creem, which processes them under its own privacy policy. To prefill the checkout, our server passes Creem the email of your license account and an internal account ID. We receive only the subscription data listed above.

Your profile picture. After the Google sign-in, the app downloads your Google profile picture once and keeps it only on your computer, to show it on the account button. It is never sent to our license server; signing out or resetting local data deletes it.

4Google & YouTube data

When you connect a YouTube channel, you authorize the app through Google's official OAuth 2.0 flow. The app never sees your Google password. It requests these permissions:

Data from YouTube and other Google APIs is used only to provide the app's user-facing features, is stored on your computer, and is not transferred to us or to third parties, except to a cloud AI provider you enable, for a task you request. Humans do not read your Google user data unless you ask us to, it is needed for security, or the law requires it. By connecting YouTube you also agree to the YouTube Terms of Service; Google's handling of your data is described in the Google Privacy Policy.

5TikTok & Instagram

The app currently supports YouTube, TikTok and Instagram, and more social networks will be added over time. When a new platform is added, this policy will be updated to describe the data it accesses, and you choose whether to connect it.

These connections currently identify your account in the app. Data from them stays on your computer, is exchanged directly between your computer and the platform, and is never sent to us. Each platform uses developer credentials that you or the app's operator configure; they are not shared between users.

6AI providers

• Local models (for example through Ollama) run on your computer. No content leaves it.
• Cloud providers are used only if you enable one and enter your own API key. The app then sends the data needed for the task you request, such as video frames or transcripts, titles, descriptions, your channel plan, or public YouTube data for the researcher, directly from your computer to that provider.
• The provider processes that data under its own terms and privacy policy. We do not receive it, and we do not use it to train models.
• The researcher is read-only: it only calls search and analytics tools and never changes your channel.

7Credentials & local storage

• Refresh tokens, API keys, client secrets and the license credentials (sign-in token, entitlement and device key) are stored in the operating system's secure credential store (Windows Credential Manager), separately from the app's data folder. There is no fallback to plain files. The app's database keeps only references and non-secret metadata.
• Access tokens are held in memory only while the app runs.
• Tokens are sent only to the official API endpoints of the platform they belong to, to perform actions you requested.
• Secrets are not written to logs, screenshots, exports or installer files.

8Sharing & selling

• We do not sell your data.
• We do not use Google, TikTok or Instagram data for advertising or to build advertising profiles.
• Data goes to third parties only to deliver a feature you asked for (the platform you publish to, an AI provider you enabled, our payment provider Creem when you subscribe in the app), to verify your Google sign-in, or when the law requires it.

9Your control & deletion

• Disconnect a platform in the app (Settings → Profile) to delete its tokens from your computer. Disconnecting Google also asks Google to revoke the app's access; for TikTok and Instagram, also revoke access on the platform.
• Step-by-step instructions are on the Delete your data page.
• Revoke access at any time: Google permissions, TikTok app settings or Instagram website permissions.
• Sign out of the license (Settings → Account and license) to delete the license credentials from this computer and end the sign-in on our server. The device stays listed in your account until you unlink it there.
• Reset local data (Settings → Data & log, button Delete local data) deletes the app's database and caches on this computer and every credential the app stored in Windows Credential Manager, including the license credentials. Before deleting, the app asks our server to end the sign-in and unlink this device; if the server cannot be reached, everything is still deleted locally and the device stays in your account until you unlink it from another device or ask us. Your original video files are never deleted.
• Uninstalling the app does not delete its data folder (%APPDATA%\UnkiSocialManager) or its entries in Windows Credential Manager. Use Reset local data before uninstalling, or delete that folder and the Credential Manager entries whose names contain UnkiSocialManager yourself.
• Access or delete your license account data by emailing us from the address linked to it. We answer within one month. On deletion we remove your account, devices, sessions and usage events; records of purchases we must keep for accounting are kept without your name and email for as long as the law requires.
• Depending on where you live you may also have rights to correct or export your personal data, to object to processing, and to complain to your data protection authority.

10Limited Use

11Retention & security

Local data stays on your computer until you delete it; cached platform data and research older than 30 days are cleaned up automatically. On the license server, account, device, session, license and usage records are kept while your account exists and deleted on request (section 9); purchase records are kept as long as accounting law requires; rate-limit counters are kept for at most a few hours and proxy request logs for up to 30 days. Database backups are kept for 30 days, so deleted data disappears from them within 30 days of deletion. We protect credentials with the operating system's secure storage, sign license entitlements cryptographically, and use HTTPS for all network traffic. No method is completely secure, so please also keep your computer and accounts secure.

12This website

This is a static website. It sets no cookies and uses no analytics or advertising trackers. Our hosting provider may keep standard server logs (such as IP address and requested page) to deliver and secure the site.

13Children

UnkiSocialManager is intended for creators managing their own channels and is not directed to children under 16. We do not knowingly collect data from children.

14Changes to this policy

We may update this policy. We will change the "Last updated" date and, for material changes, tell you in the app or on this page before they take effect.

15Contact

Back to home