Last updated: September 5, 2026
Otis is a privately operated household assistant. YouTube browsing uses a server-managed YouTube Data API key. A parent may connect a household member's YouTube account using Google OAuth.
Otis may read the connected YouTube channel name, subscriptions, playlists, playlist items, and ratings. When the user chooses Like, Unlike, Subscribe, or Unsubscribe, Otis may perform that requested action. Otis does not upload videos, post comments, or sell Google user data.
The shared YouTube Data API key remains on the private Otis server. OAuth refresh tokens are encrypted at rest. Google user data is not shared with advertisers or unrelated third parties.
The encrypted authorization is retained until the user selects Disconnect YouTube or revokes access through their Google Account. Disconnecting deletes the stored token from Otis and requests revocation from Google.
OAuth tokens are encrypted at rest, access is limited to authenticated Otis users, and authorization callbacks use short-lived single-use state values and PKCE.