Privacy Policy

Marshall Buick, trading as Relight · last updated 7 November 2026

Relight is a production management app used by Marshall Buick, the creators we work with, and the editors, designers and producers on their teams. It keeps track of videos in production, their deadlines and briefs, and how those videos do once they are published. This policy explains what it stores, why, and who else sees it.

The app is not open to the public: you only have an account if Marshall Buick or a client invited you. Questions or complaints about privacy go to marshall@relighthq.com.

Who we are

Marshall Buick, trading as Relight (“we”), runs the app at app.relighthq.com and is the controller of the personal information described here. Contact: marshall@relighthq.com.

What we collect about you

  • Your account. Your name, email address, role, and — if you sign in with Discord — your Discord account id and avatar, so the app can message you on Discord. If you sign in with a password, we store a hashed version of it, never the password itself.
  • Your work. The videos, briefs, captions, comments, thumbnails, deadlines, invoices and payment amounts you create or are assigned in the app.
  • Usage. Which pages you open and when you were last active, so your team can see what is happening and so changes have an audit trail.
  • Security and audit records. For each change you save, the app records what changed, when, your IP address and the browser or program that sent it. It also counts, by day and hour, the pages you open and the requests the app refuses (for example a page you have no access to, or too many requests in one minute). Marshall Buick uses these records to keep an audit trail, to find faults and to detect misuse of the app, including automated use. The counts are kept for 45 days.

YouTube

The app uses YouTube API Services. By using it you are also agreeing to the YouTube Terms of Service, and Google’s handling of your data is described in the Google Privacy Policy.

Public information about videos

For videos a client is producing, we read public YouTube information — title, thumbnail, view, like and comment counts, publish date and duration — so the team can see how a video is doing next to the record of making it. This uses only public data and needs nobody to sign in.

Channel data you authorise

A channel owner or manager can connect their YouTube channel to the app. We ask only for what the app uses:

  • View your YouTube account — the channel name and avatar, and the channel’s videos (titles, publish dates, privacy or scheduled status and view counts), to confirm which channel was connected and to match each video to its record in the app.
  • View YouTube Analytics reports — views, watch time, impressions, click-through rate, traffic sources and subscriber numbers.
  • View YouTube Analytics monetary reports — estimated revenue and RPM.

All three are read-only. This YouTube connection cannot upload, edit or delete videos, comments or anything else on your channel, and it does not ask Google for permission to.

Optional posting connection

A channel owner can separately turn on posting for a channel. It is its own choice for each channel, with its own Google screen, and a channel that never turns it on is not affected. It asks for two permissions:

  • Upload your YouTube videos — to send an approved video and its thumbnail to the channel.
  • Manage your YouTube videos — to set a video’s publish time and visibility after it is uploaded, to add it to playlists and to add captions.

We upload only videos that a person on the channel’s team approved. Every upload starts Private, and we never set a video public unless a person chose Public or a publish time for that video. We never delete a video. We store the posting sign-in encrypted, separate from the read-only one, and we use it only for these uploads.

To turn it off, open Connected accounts in the app and choose Turn off posting for the channel: we delete our posting sign-in straight away. To remove Relight from your Google account as well, remove it in your Google account permissions. Google ends all of the app’s access together, so that also stops the read-only stats connection.

We use this to show the channel’s own team their analytics and revenue in the app and to write the summaries described below. We never sell it, use it for advertising, or show one client’s data to another.

How long we keep it, and how to revoke access

  • Public video information is refreshed at least every 30 days. If we can no longer refresh it — the video was deleted or made private — we delete our copy.
  • Analytics and revenue from a connected channel are kept while the channel stays connected, and that connection is re-checked regularly.
  • If you disconnect a channel in the app (Settings, then Your channels), we revoke our access at Google, delete the stored token, and delete the analytics and revenue we derived from it — within 7 days at the latest.
  • You can revoke our access at any time from Google’s security settings page. We then delete the data that access gave us within 30 days.

Google Drive and Google Docs

A workspace owner or admin can connect a Google account so the app can give each client and video a Drive folder and a brief document made from a template. This is separate from the YouTube connection above and needs no YouTube channel. Google shows both sign-in screens under the app name Relight.

To do this the app asks Google for full access to Google Drive and Google Docs for the connected account. Unlike the YouTube connection, it is not read-only. Google needs the full Drive permission because the parent folder and the templates are files the workspace made, not files the app made.

A client workspace (any workspace other than Relight’s own) that connects Google Drive is asked for less: Google’s drive.file permission, which reaches only the folders and files the app makes in that Drive. The app makes the videos folder there itself and cannot open any other file in that Drive. A client workspace connected before this keeps its full access until it reconnects.

  • The app makes folders inside the parent folder the workspace chose.
  • It copies the workspace’s brief template Doc, and the files of its video folder template, into them, and fills in the new brief Doc with the video’s details.
  • It lists a folder’s contents so it does not make the same thing twice.
  • It moves to the bin a folder or Doc it has just made if it could not link it to its video.

The app acts only on the folders and templates the workspace points it at and on what it creates there. It does not read other files in that Drive, and it does not use this access for anything else. We never sell it, use it for advertising, or show it to anyone outside the workspace.

The workspace owner can disconnect it in Settings, under Workspace, then Integrations and modules, which deletes the stored token. You can also remove it at any time from Google’s third-party connections page.

Who else sees this information

We do not sell personal information. We share it with the services that run the app:

ServiceWhat it handles
VercelHosting and request logs
AirtableThe database behind the app: accounts, videos, analytics and revenue figures
UpstashA fast store for app state: likes on updates, when you last opened a video’s updates (kept for up to 180 days after the last open), a short excerpt of each video’s latest update with its author’s name, short-lived caching of view counts, and the counts of pages opened and requests refused for each person (kept for 45 days)
DiscordTeam messages: video titles, links, thumbnails, view counts and milestones
AnthropicAI features: video titles, view counts, estimated revenue and RPM are sent to write insight summaries; the writing tools also send the topic, research notes and script text you type, and the reformat tool sends the image you give it. None of it is used to train their models.
Adobe (Frame.io)Video review links and the video files themselves
Upload-PostOnly when cross-posting to TikTok, Instagram or Facebook is turned on for a channel: it holds the sign-in you give it on its own screen, and receives the short video file, caption and schedule of each video cross-posted
GoogleYouTube and Drive, as described above

Inside a workspace, a client sees their own channels’ figures and editors and designers see the videos they work on. Revenue figures stay with the channel’s own team.

Cookies

The app sets a sign-in cookie so you stay signed in, and keeps a few display preferences in your browser. There is no advertising and no third-party tracking on the app.

Your choices

  • Ask for a copy of what we hold about you, or ask us to correct or delete it.
  • Disconnect a YouTube channel (Settings, then Your channels) or the Google Drive account (Settings, then Workspace, then Integrations and modules) at any time.
  • Ask us to turn off Discord notifications for you.

Write to marshall@relighthq.com and we will answer. Closing your account removes your profile; the work you produced stays with the client it was made for.

Changes

If this policy changes we will update this page and the date at the top, and tell the team in the app when the change is significant.