castr is a private publishing and analytics tool operated by Paretoify. It uploads finished videos to YouTube, TikTok and Instagram channels that we own and operate, and reads those same channels' statistics so we can decide what to produce next. It is internal tooling: it has no public sign-up, no end users other than our own operators, and it does not access any account we do not control.
1. Platform APIs
castr uses YouTube API Services. By using castr you are also agreeing to be bound by the YouTube Terms of Service. Google's handling of data it receives is described in the Google Privacy Policy.
You can review and revoke castr's access to your Google account at any time at https://myaccount.google.com/permissions.
castr uses the TikTok Content Posting API and TikTok Login Kit. Use of castr with TikTok is also subject to the TikTok Terms of Service and the TikTok Privacy Policy. TikTok access can be revoked at any time from Settings → Security & permissions → Manage app permissions in the TikTok app.
castr uses the Instagram Graph API for publishing to Instagram professional accounts we own. Use of castr with Instagram is also subject to the Instagram Terms of Use and Meta's Privacy Policy. Instagram access can be revoked from the connected account's business settings.
2. What castr accesses
castr requests the following OAuth scopes, and only for channels whose owner has explicitly authorized it:
youtube.upload— to upload video files we have produced to our own channels.youtube.readonly— to read our channels' own video list and public statistics.yt-analytics.readonly— to read our channels' own performance reports (views, watch time, average view duration, retention, traffic sources) so we can evaluate which formats work.
On TikTok, castr requests:
user.info.basic— to identify which of our own accounts an authorization belongs to.video.upload— to place a finished video into our own account's drafts, which we then review and post from the TikTok app.video.publish— to post a finished video to our own profile directly. Before posting, castr reads the account's own permitted privacy levels and comment, duet and stitch settings so that a post never overrides a choice the account holder has made.video.list— to read the view and like counts on our own posts.
On Instagram, castr publishes finished videos to Instagram professional accounts we own and reads the public counts on those same posts.
castr does not request access to comments, follower identities, direct messages, or any personal information about viewers on any platform, and it does not read data belonging to accounts we do not own.
3. What castr stores, and where
All data is stored locally, on the operator's own computer, under ~/.castr:
- OAuth refresh tokens — in files restricted to the operating-system user. Tokens are never written to the database, never logged, and never transmitted anywhere except to the platform that issued them, when refreshing an access token.
- Video metadata we authored — title, description, hashtags, content type, and the resulting public URL.
- Aggregate channel statistics retrieved from the YouTube, TikTok and Instagram APIs — view counts, likes, watch time, average view duration and similar channel- and video-level metrics for our own videos.
castr runs no server, offers no public interface, and transmits no data to any third party. Aggregate statistics are retained for as long as we operate the channel; authorization tokens are deleted when access is revoked.
4. Data we do not collect
castr collects no data about viewers, no personally identifying information about any YouTube, TikTok or Instagram user, no comment content, and no demographic data about individuals. The analytics it reads are the aggregate reports each platform already shows the account owner in its own creator tools.
5. Revoking access
Revoke at myaccount.google.com/permissions for YouTube, from Settings → Security & permissions → Manage app permissions in the TikTok app, or from the connected account's business settings for Instagram. In every case you may instead delete the corresponding credential file on the operator's machine. Any of these immediately and permanently ends castr's access. Locally stored statistics can be deleted by removing the ~/.castr directory.
6. Changes
Material changes to this policy will be reflected in the "Last updated" date above.
7. Contact
See also the castr Terms of Service.