Privacy Policy

Effective 8 September 2026. Applies to every system on gluoon.com and its subdomains.

1. Who this is about

Gluoon is the set of internal tools used by the video studio IBIS inhouse production: Project, Analytics, Booking, Archive, Status, Career, Account and Copilot. They all run on the gluoon.com domain and are used by studio staff and contractors. This page explains what data these tools keep, why, and how to take back the permissions you have granted.

2. What we store

Account. Your name, work email and profile picture. They come from Google when you sign in, or a studio administrator creates them. We also store your role and access rights.
Work data. Projects, tasks, files, comments, equipment bookings and publication statuses. Everything you create in the systems while working.
Technical logs. IP address, request time, page address and browser type. We keep them for security and for investigating failures. There are no advertising trackers on the site and nothing is sold.

3. Signing in with Google

You can sign in to the systems with a Google account. From Google we receive only the basic profile: name, email and photo. We never see your Google password. You can withdraw this permission at any time on myaccount.google.com/permissions.

4. YouTube API Services

Gluoon Copilot uses YouTube API Services to upload finished videos from the editing workstations to the YouTube channels of the studio and its partners. By using this feature you agree to the YouTube Terms of Service and the Google Privacy Policy.

What happens to the Google data obtained through the API:

The channel owner grants Copilot two permissions once: youtube.upload to upload videos and youtube.readonly to read the channel name and id. The studio server stores the OAuth access token together with the channel name, id and thumbnail.
The token is used for two things only: uploading a video edited by the studio to that channel, and checking that the access is still valid. Copilot does not read comments, statistics or subscriber lists, and does not change channel settings.
Every uploaded video is set to Private. The channel manager publishes it manually in YouTube Studio after filling in the title, description and thumbnail.
Google data is not shared with third parties and is not used for advertising, profiling or model training. The only extra information attached to a video is the studio's own metadata: file name, project name and the editor's name.
Tokens live in a database on the studio server that only administrators can reach. A token is deleted when the channel is disconnected in Copilot or when the owner asks for it.

You can revoke access at any time in two ways: the Disconnect button next to the channel in Copilot, or the Google security page security.google.com/settings/security/permissions. After that the stored token stops working and the channel record is removed.

5. Other third-party services

The systems rely on Adobe Frame.io (video review and comments), Telegram (notifications to work groups) and Google Cloud (authentication). Each of them has its own privacy policy. We send them only what the given feature needs to work.

6. Storage and protection

Data is kept on the studio's own servers. Only system administrators have access. Work data is kept for as long as the studio needs it or as long as you work with the studio. Technical logs are kept for up to 90 days. Connections use HTTPS, access is split by role, and backups are taken regularly.

7. Your rights

You can ask to see, correct or delete your data, and you can withdraw any permission you have granted. To do so, write to the ecosystem administrator.

8. Contact

Gluoon ecosystem administrator: ChiefAdministratorIbis@proton.me.

9. Changes

A new version is published on this page together with its effective date.