Privacy Policy
Last updated 27 September 2026
This policy explains what publisha (“we”, “us”), at publisha.asia, collects when you use it, why, who it is shared with, and the choices you have. We are the data controller for the personal data described here, under the Nigeria Data Protection Act 2023.
What we collect
Your account
You sign in with Google. We receive your name, email address and profile picture, and nothing else from that sign-in.
Accounts you connect
- YouTube: permission to upload videos to your channel, read your channel and videos, and add uploads to your playlists. We use it only to publish what you ask us to publish.
- Google Drive: access only to files and folders publisha itself creates in your Drive, never the rest of it, plus the email address of that Google account so we can show which one is connected.
The access tokens for these connections are stored encrypted.
Payments
Payments are made through Paystack. We never receive your card number. We keep the payment reference, amount, plan or product, date, and the country your card was issued in.
Your studio
When you connect your studio we keep its name, its operating system, how much memory and how many processor cores it has, and when it was last online, so we can tell you which engines will run well and send it work. We also keep a record of each job (what ran, when and how it ended) and its log.
What you make
The scripts, prompts, titles, descriptions and tags you enter are used to make and publish your videos. Your projects are made in your studio and saved where you choose: a folder of your own, and your Google Drive if you back them up. When you look at a file on this site it passes through our servers to reach you and is not kept.
If you sign a Google account into your studio for image generation, that sign-in stays in your studio. We do not receive its password or its session.
Technical information
- Your IP address, to protect the service from abuse and to keep a security log.
- Your country, from your connection or your browser's time zone, to show you the right price.
- Three cookies: one that keeps you signed in, one that remembers light or dark mode, and one that holds your time zone. We use no advertising or analytics cookies and no tracking tools.
How we use it
- To run the service: make your videos, publish and back them up when you ask.
- To bill you, confirm payments and renewals with Paystack, and apply discount codes.
- To keep the service and your account secure.
- To answer you when you contact us, and to post notices about the service in the app.
We do not sell your data, and we do not use it for advertising.
Google user data
publisha's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data from your Google account is used only to provide the features you use, and is never used to train AI models or shown to anyone else.
publisha uses YouTube API Services. By connecting YouTube you also agree to the YouTube Terms of Service, and Google's handling of your data is covered by the Google Privacy Policy. You can remove publisha's access at any time in Settings, or from your Google account permissions.
Who we share it with
Only with the services that make publisha work, and only what each needs:
- Google, for sign-in, YouTube and Drive.
- Paystack, for payments.
- Our hosting, database and network providers, who store and carry data for us.
We will also disclose data where the law requires it.
Where it is stored
Our servers and database may be outside Nigeria. Where data leaves Nigeria we rely on providers that protect it to the standard the Nigeria Data Protection Act 2023 requires.
How long we keep it
- Your account, while you have one.
- Job logs, 7 days. Job records, about 13 months.
- Security logs, 90 days. Sign-in sessions end when they expire or you sign out.
- Payment records, as long as tax and accounting law requires.
If you ask us to delete your account, we delete your data within 30 days, except records we must keep by law.
Your rights
You can ask to see the personal data we hold about you, correct it, delete it, receive a copy, or object to how we use it, and you can withdraw a permission you gave at any time. Email spicedexpress@gmail.com. If you are not satisfied with our answer, you can complain to the Nigeria Data Protection Commission.
Security
Connections to publisha are encrypted, account tokens are stored encrypted, and every instruction sent to your studio is signed so it cannot be forged. No system is perfectly secure, and we will tell you without delay if a breach affects your data.
Children
publisha is for people aged 18 and over. We do not knowingly collect data from children.
Changes
If we change this policy we will update the date above, and tell you in the app before a significant change takes effect.
Contact
Questions or requests: spicedexpress@gmail.com. See also our Terms of Service.