Privacy center
Privacy policy
Last updated: October 2026
1. Controller
Bitora acts as a processor on development and integration projects. We only process data needed to deliver the service. Questions: support@bitora.es.
2. Data we process
Contact data (name, company, email), project data and, where relevant, technical data from systems we integrate. We do not sell data.
3. Purpose and legal basis
Answering enquiries, performing the service contract and legal duties (GDPR). Own infrastructure in Spain (EU), AES-256 encryption.
4. Retention and rights
We keep data as long as needed for the service and legal duties. You can access, rectify, object or request deletion via Data management.
5. Terms
Code built for a client is the client’s from day one. Scope, timeline and support are set out in each proposal.
6. Bitora Reels and Google user data
This section describes how the product Bitora Reels (reels.bitora.es), developed by Bitora, accesses, uses, stores, and shares Google user data when you connect a YouTube channel.
With whom we share, transfer, or disclose Google user data
We do not sell, rent, or disclose Google user data to advertisers, data brokers, information resellers, or other Bitora customers. The only transfer of that data is to Google and YouTube, when you ask us to publish or update a video on your own channel (upload of the file, title, description, privacy, audience, and thumbnail if you choose one). There is no other recipient of that data.
What Google user data is accessed
Only if you connect a YouTube channel via OAuth: the channel identifier and name, and the permissions needed to upload videos and set the thumbnail on that channel. We do not request access to Gmail, Drive, or other Google services unrelated to YouTube.
How the data is used
To show the connected channel in the Accounts section of Bitora Reels and to publish on that channel the video and metadata you choose. We do not use Google user data for advertising, sale, credit scoring, or to train generalized artificial intelligence models.
Storage and protection
We store the channel name and access tokens encrypted on our servers while the account remains connected. The OAuth client secret never leaves the server. We use encryption and access controls to protect the confidentiality of that data.
Retention and deletion
Tokens are kept while the YouTube account stays connected in Bitora Reels. If you disconnect the account in the app, we delete the stored token. You can also revoke access in your Google Account settings. After deletion, Bitora Reels cannot publish to your channel until you connect again.
Bitora Reels's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.