AtodeBox Privacy Policy

Last updated: September 4, 2026

This Privacy Policy explains how AtodeBox — Your YouTube Workspace, provided by Karo Software, accesses, uses, stores, protects, and shares information, including data obtained through Google and YouTube APIs.

Summary: AtodeBox is a Windows desktop application. Google user data and OAuth tokens are not stored on Karo Software servers. OAuth tokens are stored only on the user's local Windows device and are encrypted using Electron's safeStorage.

1. Information AtodeBox Accesses

When a user connects a Google/YouTube account, AtodeBox may access Google and YouTube data necessary to provide features explicitly requested by the user.

This may include:

YouTube channel information associated with the connected account.
YouTube playlists and playlist items.
Video information required to display and manage videos in the application.
The user's rating status for a video, such as whether a video has been liked.
Live chat data when the user uses AtodeBox's live chat features.

2. How Google and YouTube Data Is Used

AtodeBox uses Google and YouTube data only to provide user-requested functionality, including:

Retrieving and displaying YouTube playlists.
Importing playlist contents into AtodeBox.
Creating new YouTube playlists.
Adding videos to YouTube playlists.
Removing videos from YouTube playlists.
Reordering playlist items.
Synchronizing playlist contents between AtodeBox and YouTube when requested by the user.
Reading and changing a video's like status when requested by the user.
Reading and sending YouTube live chat messages when the user uses those features.

AtodeBox changes Google or YouTube data only in response to an action initiated by the user.

3. Data Protection Mechanisms

Karo Software applies the following mechanisms to protect sensitive Google user data used by AtodeBox:

Local-only OAuth token storage: Google OAuth tokens are stored only on the user's local Windows device.
Encrypted OAuth token storage: OAuth tokens are encrypted using Electron's safeStorage, which uses operating-system-provided secure storage mechanisms on the user's device.
No Karo Software server storage: Google user data and OAuth tokens are not uploaded to or stored on Karo Software servers. Karo Software does not maintain a remote backend database containing Google user data for AtodeBox.
Direct API communication: When Google or YouTube data is required for a feature, AtodeBox communicates from the user's device with Google/YouTube API endpoints as necessary to perform the requested operation.
No token exposure through the application interface: OAuth tokens are not displayed to users in the AtodeBox user interface.
No use for advertising or profiling: Google user data is not used for advertising, behavioral profiling, or targeted marketing.
No sale of Google user data: Google user data and OAuth tokens are not sold.
No AI/ML training: Google user data obtained by AtodeBox is not used to train, fine-tune, or improve generalized artificial intelligence or machine-learning models.

4. Local Application Data

AtodeBox stores application data such as locally organized video lists, user-created tabs, application settings, and related workspace information on the user's own device.

This local application data is not transmitted to Karo Software servers as part of normal AtodeBox operation.

5. Data Sharing

Karo Software does not sell Google user data or OAuth tokens and does not share them with third parties for advertising, profiling, or unrelated commercial purposes.

Data is transmitted to Google/YouTube only as necessary to provide the Google/YouTube functionality requested by the user.

6. Data Retention and Deletion

OAuth credentials and local AtodeBox data remain on the user's device unless they are removed through the application, the application's local data is deleted, or the application is otherwise removed together with its stored data.

Users may revoke AtodeBox's access to their Google account at any time through their Google Account permissions. Revoking access prevents AtodeBox from continuing to access Google/YouTube data through the revoked authorization.

7. Limited Use of Google User Data

AtodeBox's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Security Scope

AtodeBox is designed as a local desktop application. Karo Software does not operate a cloud service that stores the user's Google OAuth tokens or Google user data for AtodeBox.

Users are responsible for maintaining the security of their Windows account and device, including operating-system updates, device access controls, and protection against unauthorized local access.

9. Changes to This Privacy Policy

This Privacy Policy may be updated when AtodeBox features, Google/YouTube API usage, or legal and verification requirements change. The "Last updated" date at the top of this page indicates the latest revision.

10. Contact

For privacy-related questions regarding AtodeBox, please contact Karo Software through the contact information provided on the AtodeBox website.