samcloud is run by Sam Tate Goudie for his own use. This page says what it does with data from Google accounts.
Only data from a Google account whose owner has approved samcloud on Google's consent screen, and only within the permissions approved there. For YouTube that means uploading videos, editing videos, captions and playlists, and reading the channel's details.
To carry out what the account owner asks, such as uploading a video or adding chapters to a description. The AI models that run the agents may process content only to carry out that request. Data is not sold, not used for advertising, not shared with anyone else, and not used to train AI models.
samcloud's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The long-lived authorisation Google issues stays on a server Sam owns, readable only by the service that holds it. The agents receive access that expires within an hour, and every issue of access is logged.
An account owner can withdraw samcloud's access at any time at myaccount.google.com/permissions. On request, the stored authorisation and anything samcloud has kept from that account are deleted.
Sam Tate Goudie, at the support address shown on samcloud's Google consent screen.