Privacy in DECORLINA Social Studio
Last updated: 1 November 2026.
Who operates the application
DECORLINA Social Studio is operated by Юнисия ООД (EIK 203769251). For questions about data or a deletion request, contact office@decorlina.com.
Purposes and workspace information
The application supports internal content preparation: drafting, calendar organization, reviewing available materials, and checking the authorized YouTube connection.
When the owner signs in, Sites supplies a user identifier, email address and, when available, a name. The identifier associates records with their owner. The studio stores entered titles, English and Bulgarian text, selected social network, internal status, planned date, material reference and settings.
Google Drive
Drive is accessed through a separate Sites connected service. The studio reads folder listings and metadata for images and videos: names, identifiers, file types, links, folders, and available modification/version information. It stores the latest inventory and information about its check.
This feature does not download the media files themselves or modify them. Drive permission is separate from YouTube permission.
YouTube
The application uses YouTube API Services with the youtube.readonly permission. It receives information about the channel selected during connection and checks that it is the exact DECORLINA channel. The database stores the channel identifier and title, verification time, and technical connection status.
Google supplies tokens for authorized access. The long-lived refresh token is stored encrypted, with the encryption key held separately in protected server configuration. The short-lived access token is used on the server for requests and is not exposed to the interface or draft tools. The application does not ask for the Google password.
The current YouTube feature does not read video content, comments or statistics, and does not upload, edit or publish videos. A stored status represents a previous check, not continuous monitoring.
Service providers and access
The application runs through OpenAI Sites, Cloudflare Workers and Cloudflare D1. These services participate in access, request processing and storage. Google processes Google/YouTube API requests. When the connected assistant is used, authenticated tools can read or write drafts and return relevant information in the assistant conversation. YouTube tokens are not exposed by those tools.
The providers’ terms and practices apply to their services. Google’s information is available in the Google Privacy Policy.
Cookies and safeguards
A temporary protected cookie, valid for up to ten minutes, binds a YouTube connection attempt to the browser. Sites manages sign-in and its associated mechanisms. The workspace is private, and data operations check identity and record ownership.
Retention, disconnection and requests
The current version does not automatically delete records after a fixed period. Stored drafts, settings, material inventories and connection information remain in the database until removed through an available function or a separately handled request. An unsuccessful check or expired permission does not automatically delete stored data.
Drafts can be deleted through the studio’s draft function. “Disconnect” for YouTube submits a revocation request to Google and, after confirmed success, removes the stored connection record. If an error occurs, the interface does not confirm successful disconnection. This does not delete content from YouTube or disconnect the separate Drive integration.
Access can also be revoked through Google’s permission settings. Use the contact above for requests concerning stored data. Revocation through Google does not confirm that the local record has already been deleted. If the application does not confirm disconnection, contact the operator to check and remove the stored data.
Changes
If new categories of data, permissions or publishing features are added, the privacy information and necessary permissions must be updated before those changes are used. This notice describes only the current readonly version.