Security
How we protect your channel.
This page is maintained by Actually Finland to answer common security questions about YouShortsCoach. It describes current, app-visible controls — not an independent certification.
Encryption in transit and at rest
All connections to YouShortsCoach use HTTPS/TLS. Application data and OAuth tokens are stored in our managed Postgres backend with encryption at rest provided by our hosting platform.
YouTube access is minimal and revocable
We request the youtube.readonly scope only. We never post to your channel, edit videos, or read private messages. You can revoke access anytime from your Google Account permissions page.
Row-level access controls
Every table is protected by row-level security policies so one signed-in user can only ever read or modify their own rows — even if application code has a bug.
Least-privilege on our side
Production access is limited to a small number of engineers, protected by 2FA, and logged. We do not sell data, and we do not use your channel content to train third-party models.
Backups and availability
Our database is backed up automatically by our hosting provider. We monitor uptime and error rates and act on regressions.
Responsible disclosure
Found something? Please email support@youshortscoach.com with steps to reproduce. We'll acknowledge within 3 business days and won't take legal action against good-faith research.
For deletion or data-access requests, see our Privacy Policy or email support@youshortscoach.com.