Read access, and that's all.
Barnstorm has no way to post, reply, like or delete on any network. Here's exactly what it asks for, and why.
| Network | Permission | What we use it for |
|---|---|---|
| YouTube | youtube.readonly | Your channel, your videos and the comments on them. |
| yt-analytics.readonly | Views, watch time, subscribers gained and lost, and live stream viewers. | |
| instagram_business_basic | Your profile and your posts. | |
| instagram_business_manage_insights | Reach, views, saves, shares and follower counts. | |
| instagram_business_manage_comments | Reading comments on your posts. Instagram's permission also allows replying, and Barnstorm has no feature that does. | |
| TikTok | user.info.basic, user.info.stats | Your profile, follower count and total likes. |
| video.list | Your public videos with their views, likes, comments and shares. |
Connections
Access tokens are encrypted before they're stored, and they're used only by the background jobs that fetch your numbers. They never reach a web browser.
People
Sign-in goes through your organization's identity provider, so Barnstorm stores no passwords. Only people an organization has invited can get in, and removing someone ends their sessions immediately. Changes to access and connections are kept in an audit log.
Separation
Each organization's data is walled off from every other organization's at the database query level, and queries with no organization attached fail rather than return anything.
Retention
Comment text is refreshed or deleted within 30 days. Statistics are kept while an account stays connected, within each network's limits. If you disconnect an account or ask us to delete its data, we do. Details are in the privacy policy.