Privacy Policy – MajorBoom Studios

Last updated: 17 October 2026

MajorBoom Studios respects your privacy and is committed to handling personal information responsibly.

Information we may collect

When you use the MajorBoom Studios website, contact us, subscribe to updates, or interact with our services, we may receive information such as your name, email address, information you voluntarily provide, and basic technical information associated with use of the website.

How we use information

Information may be used to operate and improve the MajorBoom Studios website and services, respond to enquiries, provide requested communications, maintain security, and manage our online and social-media presence.

Social media integrations

MajorBoom Studios may use authorised third-party services and APIs to manage content across social-media platforms including TikTok, Facebook, Instagram, Threads and other services.

When you authorise a supported social-media integration, information is accessed only to the extent permitted by the permissions you approve and the applicable platform.

These integrations may be used to manage, schedule and publish content to authorised MajorBoom Studios social-media accounts.

MajorBoom Studios does not ask users to provide their social-media passwords through this website.

MajorBoom Social and Google/YouTube

MajorBoom Social uses a self-hosted Postiz service at postiz.majorboomstudios.com to manage authorised social-media accounts. When a YouTube channel is connected through Google OAuth, Postiz requests Google account profile and email information and YouTube permissions to view and manage the YouTube account, read channel information, upload and manage videos, access YouTube assets and associated content, and view YouTube Analytics reports. The requested OAuth scopes are userinfo.profile, userinfo.email, youtube, youtube.force-ssl, youtube.readonly, youtube.upload, youtubepartner and yt-analytics.readonly. Google describes youtube.force-ssl as allowing videos, ratings, comments and captions to be viewed, edited and permanently deleted; the other YouTube scopes include account management, video management, asset/content management and analytics access. These are the permissions requested by the Postiz version currently deployed; the permissions Google grants are shown during Google’s authorisation flow.

Postiz uses Google account ID, name and profile image to identify the connection; it reads YouTube channel identifiers, names, thumbnails, custom URLs and subscriber counts to display connected channels. It can retrieve daily YouTube Analytics figures for views, estimated minutes watched, average view duration and percentage, subscribers gained and lost, and likes. When an authorised user schedules or publishes a YouTube post, Postiz handles the video file and the post information supplied for publishing, such as title, description, tags, visibility and the made-for-kids setting.

Postiz stores the OAuth access token and refresh token, together with the connected channel’s account and display information, in its integration record so it can access the authorised channel and refresh access for scheduled publishing. In the deployed Postiz version, removing a channel marks its integration record as deleted but does not itself clear the token fields from that record. Removing a connection from the active channel list therefore should not be treated as erasing its stored token record.

You can remove a channel from Postiz’s active channel list. This marks its integration record as deleted but does not itself revoke Google’s authorisation or clear the stored token fields. To stop future Google API access by Postiz, revoke the authorisation through your Google Account connections; revocation prevents future access once processed by Google and may prevent scheduled posts from publishing. To request deletion of a stored Postiz connection record or other information held about you, contact MajorBoom Studios using the contact details on this website. We will handle the request subject to applicable legal requirements and data-retention obligations. Revoking access at Google and removing a channel in Postiz are separate actions.

Google’s handling of data accessed through Google APIs is also governed by Google’s Privacy Policy and the YouTube API Services Terms of Service.

Third-party services

Our website and services may use third-party providers for website hosting, social-media management, analytics, communications and related functionality. Information processed by these services is also subject to their respective privacy policies and terms.

Cookies and website data

The website may use cookies or similar technologies required for website functionality, security, preferences and analytics. Where required, additional information or consent options may be provided when you visit the website.

Data security

Reasonable technical and organisational measures are used to protect information under our control. However, no internet-based system can guarantee absolute security.

Data retention and requests

Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected or as required by applicable law.

You may contact MajorBoom Studios to request access to, correction of, or deletion of personal information held about you, subject to applicable legal requirements.

Changes to this policy

This Privacy Policy may be updated as MajorBoom Studios’ website and services develop. The latest version will be published on this page.

Contact

Questions about this Privacy Policy or privacy requests can be sent through the contact details provided on the MajorBoom Studios website.