Effective date: 26 September 2026
This policy explains what information EMPublisher accesses, stores and uses, and how you can withdraw access and have your data deleted.
1. Who we are
EMPublisher is operated by EXTENDED MEDIA HANZL, ENK (org.nr 925 718 882), Trondheimsveien 4B, 0560 Oslo, Norway (“Extended Media”, “we”). We are the controller of the data described below. Contact for any privacy question or complaint: info@extendedmedia.no.
2. Who this policy applies to
It applies to clients of Extended Media who authorise EMPublisher to publish videos to their YouTube channel, Facebook Page, Instagram professional account or TikTok account (“you”), and to Extended Media staff who operate the application.
3. Use of YouTube API Services
EMPublisher uses the YouTube API Services to upload videos and manage playlists on your channel. By authorising EMPublisher you also agree to be bound by the YouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy.
4. Permissions we request and why
YouTube
When you authorise EMPublisher, Google’s consent screen asks you to grant two permissions:
- Manage your YouTube videos (
youtube.upload) – to upload the videos we prepared for you. - See, edit and permanently delete your YouTube videos, ratings, comments and captions (
youtube.force-ssl) – required by YouTube for playlist operations. EMPublisher uses it only to read the names of your playlists, to add an uploaded video to the playlist you chose, and to show which channel is connected. EMPublisher never deletes videos, never changes videos it did not upload, and never reads or writes ratings, comments or captions.
Facebook and Instagram (Meta)
EMPublisher signs in with Facebook Login. The person who authorises it must have a role on your Facebook Page. Meta’s consent screen asks for:
pages_show_list– to list the Pages the authorising person manages, so the right Page can be selected.pages_read_engagement– to read the Page’s name and ID and the Instagram account linked to it.pages_manage_posts– to publish the videos we prepared for you on your Page, as Reels or regular video posts.instagram_basic– to read the username and ID of the Instagram professional account linked to your Page.instagram_content_publish– to publish the videos we prepared for you as Instagram Reels.
EMPublisher does not read or answer comments or messages, does not read insights, and does not edit or delete posts it did not create. Meta’s handling of your data is described in the Meta Privacy Policy.
TikTok
When TikTok publishing is enabled for your account, TikTok’s consent screen asks for user.info.basic (to show which account is connected) and video.upload (to send a video to your TikTok inbox as a draft). You finish and publish each draft yourself in the TikTok app. TikTok’s handling of your data is described in the TikTok Privacy Policy.
5. What information we access and store
All data is stored only on Extended Media’s production computer. There is no EMPublisher server, no cloud database and no copy on third-party systems.
| Data | Source | Why | How long |
|---|---|---|---|
| OAuth access and refresh token for your Google account | Google, after you consent | To act on your channel when our editor publishes a video | Until you withdraw access or we end the engagement; then deleted |
| Your channel name and channel ID | YouTube API | To show our editor which channel will receive each upload | While access is active; deleted with the token |
| Names and IDs of your playlists | YouTube API | To let our editor pick a playlist | Kept in memory only while the application runs; never written to disk |
| Meta access token for the authorising person and the Page access token for your Page | Meta, after consent | To publish on your Page and the linked Instagram account | Until access is withdrawn or we end the engagement; then deleted |
| Your Page name and ID; the linked Instagram account’s username and ID | Meta Graph API | To show our editor where each video will be published | While access is active; deleted with the token |
| TikTok access token; your TikTok display name and account ID | TikTok, after you consent | To send drafts to your TikTok inbox and show which account is connected | Until you withdraw access or we end the engagement; then deleted |
| Per-video publishing record: file name, title, description, tags, privacy setting, playlist ID, scheduled time, resulting YouTube, Facebook, Instagram or TikTok post ID and status | Entered by our editor; post IDs returned by each platform | To publish the video and keep track of what has been published | YouTube-derived fields (video ID, playlist ID) are refreshed or deleted within 30 days; other platforms’ post IDs are deleted within 30 days |
| Technical log (errors, upload status, timestamps) | The application | To diagnose failures | Entries older than 30 days are deleted |
We do not collect your Google, Facebook, Instagram or TikTok password: sign-in happens entirely on each platform’s own pages. We do not access your viewing history, followers or subscribers, analytics, comments, messages, email or any other account data.
6. How we use and share information
We use the information only to publish the videos you commissioned from us, in the way you agreed with us. We do not sell it, use it for advertising or profiling, or combine it with other data. We send it only to the platform a video is published on: YouTube (Google), Facebook and Instagram (Meta) or TikTok. Extended Media staff operating the application can see the data listed above; no one else can.
7. Cookies and data on your device
EMPublisher places nothing on your devices and uses no cookies, advertising or analytics. It runs only on our computer, and its interface is available only on that computer. (The extendedmedia.no website has its own cookie practices, which this policy does not cover.)
8. Withdrawing access
You can withdraw EMPublisher’s access at any time:
- YouTube: in your Google Account security settings: https://security.google.com/settings/security/permissions (find “EMPublisher” and remove access);
- Facebook and Instagram: in the Facebook settings of the person who authorised EMPublisher, under Business Integrations (find “EMPublisher” and remove it), or by removing that person’s access to your Page;
- TikTok: in the TikTok app settings, under the list of apps with access to your account (find “EMPublisher” and remove it);
- or by asking us at info@extendedmedia.no; we will disconnect the account in the application and revoke the token where the platform allows it.
After access is withdrawn, we delete the token and all data derived from that platform as soon as possible and in any case within 7 days.
9. Deleting your data
You can ask us at any time to delete the data EMPublisher stores about you and your accounts. We will do so within 7 days and confirm by email. Deleting data from EMPublisher does not delete anything from YouTube, Facebook, Instagram or TikTok: videos already published stay there until you remove them on the platform.
10. Security
The data stays on a single password-protected computer. Communication with Google, Meta and TikTok uses encrypted connections (HTTPS). Access tokens are never shared with anyone outside Extended Media.
11. Your rights
Under the EU/EEA General Data Protection Regulation you may request access to, correction of or deletion of your personal data, object to its processing, or ask for a copy. Write to info@extendedmedia.no. You may also complain to the Norwegian Data Protection Authority (Datatilsynet, www.datatilsynet.no).
12. Changes
If EMPublisher starts using your data in a new way, we will update this policy and ask you to accept it again before the new use begins. The effective date at the top shows the latest version.