Privacy Policy
Effective 28 October 2026 · Last updated 28 October 2026
This Privacy Policy explains how Milleon Digital Nusantara ("Milleon", "we", "us") collects, uses, shares, protects, keeps and deletes information. It covers our website milleon.id and our application Milleon (also called Milleon Autopost), which is the app you see on Google's sign-in screen under the name "Milleon". We comply with Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022 tentang Pelindungan Data Pribadi).
01Who we are
Milleon Digital Nusantara is a software studio in Indonesia, established in 2022. We build software for companies, and we also publish short explainer videos on our own YouTube channels and Instagram accounts.
Data controller: Milleon Digital Nusantara, Indonesia · Email milleondigital@gmail.com · WhatsApp +62 899 1712 772
02The Milleon app (Milleon Autopost)
What it does. Milleon is our in-house publishing app. It takes short videos that we have finished making, with their titles, descriptions, tags, captions and thumbnails, and posts them to YouTube channels and Instagram accounts that we own. It can post a video straight away or schedule it on YouTube for a later time, and it keeps a checklist of what each of our channels has posted.
Who uses it. Only Milleon's own team uses the app, and only with accounts that belong to Milleon. It is not offered to the public. People who watch our videos never interact with the app, and it collects no data about them.
Where it runs. The app runs on a Milleon computer. It has no server or cloud database of its own; it talks directly to Google's and Meta's official APIs over encrypted HTTPS connections.
03Google user data
This section describes exactly how the Milleon app handles data it receives from Google when one of our YouTube channels is connected through Google's sign-in.
3.1 Data the app accesses
When we connect a YouTube channel, the app asks Google for two permissions (OAuth scopes):
| Permission (scope) | What the app does with it |
|---|---|
https://www.googleapis.com/auth/youtube.upload"Manage your YouTube videos" | Uploads our video files to the connected channel and sets each video's title, description, tags, category, language, privacy status, scheduled publish time, "made for kids" setting, altered-content setting and custom thumbnail. |
https://www.googleapis.com/auth/youtube.readonly"View your YouTube account" | Reads only the connected channel's channel ID and channel name, so that we can confirm each video goes to the right channel. |
From Google, the app therefore receives and keeps only:
- the YouTube channel ID and channel name of the connected channel;
- the OAuth refresh token and access tokens that Google issues, which let the app upload to that channel;
- for each video we upload, the video ID and link that YouTube returns.
The app does not access or store a Google account's email address, name, profile photo, contacts, Gmail, Google Drive files, YouTube comments, subscribers, watch history, analytics or any other Google data.
3.2 How the app uses Google user data
- The channel ID and name are used only to show which channel is connected and to send each video to the correct channel.
- The tokens are used only to make the YouTube Data API requests that upload our videos and set their details and thumbnails.
- Video IDs and links are used only to keep our own record of what has been posted and when.
Google user data is used only to provide these publishing features. It is not used for advertising, is not sold, is not used to determine creditworthiness or for lending, and is not used to develop, improve or train artificial intelligence or machine-learning models.
3.3 How Google user data is shared
We do not share, sell, rent, transfer or disclose Google user data to anyone. It is sent only back to Google itself (YouTube) as part of the upload requests. The only exceptions would be if the law requires us to disclose it, or to protect against fraud or security threats, and in either case only as far as necessary.
3.4 How Google user data is protected
- Encryption in transit: every request to Google uses HTTPS (TLS). The sign-in uses Google's standard OAuth 2.0 flow with PKCE, and the app never sees or stores a Google password.
- Local storage only: tokens and channel details are stored only on the Milleon computer that runs the app, in a private application-data folder of that computer's Windows user account. That folder is readable only by that account, and the computer is protected by a login password. The data is never uploaded to our servers, cloud storage or source-code repositories.
- Limited access: only the Milleon team member who operates the app can use it, and nobody reads the tokens except to fix a technical problem.
- Least privilege: the app asks only for the two YouTube permissions listed above, and nothing broader.
3.5 How long Google user data is kept, and how it is deleted
- Tokens and channel details are kept only while the channel stays connected. When we disconnect a channel, or stop using the app, we delete them from the computer.
- Video IDs and links are kept as part of our posting record for as long as the videos are published, so we know what has been posted.
- Access can be revoked at any time at myaccount.google.com/permissions by removing "Milleon". After that, the stored tokens stop working immediately.
- To ask us to delete any data we hold, email milleondigital@gmail.com. We delete it within 30 days and confirm by email.
04Instagram and Facebook data
When we connect one of our Instagram accounts, the app receives from Meta the IDs and names of our Facebook Pages and their linked Instagram professional accounts, plus the access tokens Meta issues. It uses them only to publish our own Reels and to read back the link to each published Reel. This data is stored, protected, kept and deleted in the same way as the Google data above, and it is never shared or sold. Access can be removed in Facebook under Settings → Business integrations.
05The milleon.id website
- When you contact us by email, WhatsApp or a form on the site, we receive what you send (usually your name, email or phone number, and your message). We use it only to reply and to discuss the work you asked about. A contact form may pass your message through a form-delivery service that forwards it to our inbox.
- Server logs: our web server keeps standard logs (IP address, browser type, pages requested and time) to keep the site secure and running.
- No advertising: we don't use advertising cookies, and we don't sell or share visitor data for advertising.
- Client projects: software we build for clients is covered by that client's own privacy policy and by our contract with them, not by this page.
We keep messages you send us for as long as we need them to work with you, and for any period the law requires.
06Your rights
Under UU PDP you can ask to see the personal data we hold about you, correct it, have it deleted, or withdraw consent you gave us. Email milleondigital@gmail.com and we will respond within 30 days.
07Children, changes and contact
- Children: our website and app aren't directed at children, and we don't knowingly collect their personal data.
- Changes: if we change how the app uses Google user data or other personal data, we'll update this page and the dates at the top before the change takes effect.
- Contact: Milleon Digital Nusantara, Indonesia · milleondigital@gmail.com · +62 899 1712 772