Privacy Policy

This Privacy Policy explains how Don Not Done and the private Don Not Done Content Automation (the “Automation”) access, use, store, and share information, including information made available through Google APIs.

1. Scope

This policy applies to the Don Not Done website and the Don Not Done Content Automation. The Automation helps the authorized creator organize, analyze, prepare, schedule, publish, and track creator-owned media using connected services.

2. Google user data the Automation may access

Depending on the permissions granted by the authorized user, the Automation may access limited Google user data needed to operate the workflow, including:

• Files and file metadata in designated Google Drive locations selected for the content workflow.
• Rows, values, and metadata in designated Google Sheets used as the content tracker.
• Objects and object metadata in designated Google Cloud Storage buckets used for temporary media staging or processing.
• Basic account or authorization information made available by Google when required to establish and maintain the authorized connection.

The Automation is not intended to access unrelated Google resources beyond what is necessary for the configured workflow.

3. How Google user data is used

• Detect and retrieve creator-selected media for processing.
• Read and update content-planning, scheduling, status, identifier, and URL fields in the content tracker.
• Temporarily stage media for formatting, transcoding, or transfer to an authorized publishing destination.
• Analyze creator-selected media and generate metadata such as classifications, titles, descriptions, captions, hashtags, or scheduling information.
• Publish or schedule approved content to connected social accounts.
• Record publishing results and analytics back into the creator-controlled tracker.
• Maintain workflow reliability, security, and duplicate-prevention logic.

4. Storage and retention

Original source media generally remains in the creator's Google Drive. Tracker data remains in the creator-controlled Google Sheet until edited or deleted by the creator. Temporary processing objects may be created in Google Cloud Storage and are configured to be removed after successful downstream processing where the workflow supports automatic cleanup. If an error interrupts cleanup, a temporary object may remain until retried or manually removed.

5. Sharing and third-party processors

The Automation may transmit only the information necessary to services the authorized creator has configured for content processing, publishing, automation, or analytics. These may include Google services, Make, Meta/Instagram, YouTube, TikTok, Metricool, and AI processing services such as Google Gemini. Information is shared only to perform the creator-requested workflow. Each third-party service processes information under its own terms and privacy practices.

6. No sale or advertising use

Don Not Done does not sell Google user data. Google user data obtained through the Automation is not used to build advertising profiles, serve personalized advertising, or provide data to data brokers.

7. Google API Services User Data Policy

The use and transfer of information received from Google APIs by the Don Not Done Content Automation will adhere to the Google API Services User Data Policy, including the Limited Use requirements where applicable.

8. Security

The Automation uses authenticated connections and HTTPS-enabled services. Access is limited to authorized accounts and configured resources. Authentication tokens and credentials are handled by connected platforms and automation services rather than intentionally displayed or published by Don Not Done.

9. User control, deletion, and revocation

The authorized user controls the underlying Google Drive files, Google Sheets data, and Google Cloud Storage objects and may delete those items in the relevant Google service. The user may also revoke the Automation's Google access through the Google Account's third-party access settings. Revoking access may prevent the Automation from functioning.

For privacy or deletion requests related specifically to Don Not Done's configuration of the Automation, contact privacy@donnotdone.com.

10. Children's privacy

The website and Automation are not directed to children under 13, and Don Not Done does not knowingly use the Automation to collect personal information from children.

11. Changes

This policy may be updated as the Automation changes. Material changes to how Google user data is accessed, used, stored, or shared will be reflected in the published policy.

12. Contact

Privacy questions may be sent to privacy@donnotdone.com.