A narrow connection, protected by design.

Information the connection handles

When a customer chooses to connect YouTube, Inventio handles the Google authorization result, the selected YouTube channel identity needed to confirm the connection, and the identifiers and status returned for videos the customer asks Inventio to upload.

Inventio requests the youtube.upload scope. It does not ask for the customer's Google password, Gmail, contacts, calendar, Google Drive files, or unrelated Google profile data.

How the information is used

Google user data is used only to establish the customer-requested YouTube connection, identify the authorized channel, perform an upload the customer requests, report the status of that upload, and protect or troubleshoot the connection.

Inventio is designed not to sell Google user data, use it for advertising, or allow unrelated customers to access it. Each connection is partitioned by the customer's canonical WalkMix account.

How authorization credentials are protected

• Authorization codes and access tokens are held only for the time needed to complete the authorized server operation.
• Refresh tokens are encrypted at rest with authenticated encryption and are not exposed to the browser or Inventio app.
• Raw provider responses and plaintext credentials are not written to application logs.
• OAuth state and PKCE verification bind the return to the initiating account and one-time authorization attempt.

The customer can end the connection

Authorization information is retained only while the YouTube connection is active or while a narrowly bounded security or reliability need requires it. When the customer disconnects YouTube, Inventio's designed revocation sequence disables the connection, asks Google to revoke the credential, and removes the locally encrypted credential after provider acceptance.

A customer may also revoke access from the Google Account security page. Questions or deletion requests may be sent to customerservice@walkmix.com. Requests are verified against the WalkMix account before account-scoped data is changed.

Service providers and legal obligations

Inventio uses Google and YouTube to provide the connection and Cloudflare-hosted account infrastructure to secure and operate the service. Data is disclosed only as needed to provide those functions, protect the service, comply with law, or respond to a valid legal request.

This integration is also governed by the Google Privacy Policy and the YouTube Terms of Service.

Questions about Google user data

Contact WalkMix customer service at customerservice@walkmix.com. WalkMix Inventio is operated by Audio Futures, Inc.