Automation Service Data
Podcast Production Automation powered by Google Cloud
MbaguMedia Automation Service is a podcast and media automation platform that uses Google Cloud, YouTube, and related APIs to automatically process audio, generate episode artwork, create and update episode metadata in Google Sheets, and publish finished content to YouTube and WordPress. The app requires limited Google access (Sheets, Drive, Cloud Storage, and YouTube) to perform these automated publishing functions securely on behalf of the user.
Purpose of This Application
Mbagu Media’s Podcast Automation Service is an automated system designed to streamline
the end-to-end podcast production workflow. The application automatically processes audio files,
generates AI-powered episode artwork, tracks episode metadata in spreadsheets, creates blog content,
publishes videos to YouTube, and manages file storage—enabling seamless, hands-free podcast publishing.
To accomplish this automation, the application integrates with several Google Cloud services.
This page provides transparent documentation of which Google services we use, what data we access,
and how that access supports the automation workflow.
Google Services & Data Access
The following table details each Google service used by our automation application, the specific
function it serves, and the OAuth scopes required for that functionality:
| Google Service | Function of the Service | Scopes Used |
|---|---|---|
| Account Authentication |
Used solely to authenticate the developer/administrator (Mbagu McMillan) to obtain a long-lived token. This token allows the automation process to run continuously without manual sign-in, enabling access to the necessary data listed below. |
.../auth/userinfo.email.../auth/userinfo.profile
|
| Google Sheets |
We read and update a specific spreadsheet you designate for episode tracking, logging run times, titles, dates, and error status of the automation workflow. |
.../auth/spreadsheets
|
| Google Drive / Docs |
Used to upload and store the final compiled episode files and generated blog post scripts that are the output of the automation process. |
.../auth/drive.file
|
| Google Cloud Services (AI/Storage) |
We connect to Google Cloud APIs for server-side operations, such as Vertex AI (for generating episode image artwork) and Google Cloud Storage (for managing temporary audio chunks). Note: The security-sensitive API calls for AI and Storage are |
.../auth/cloud-platform.../auth/devstorage.read_writeRequired for client initialization |
| YouTube Upload |
The service uses this permission to publish the final compiled episode video directly to the YouTube channel on your behalf, automating the video upload and publishing process. |
.../auth/youtube.upload
|
🔒 Security Model: Service Account Architecture
To minimize security risks, our automation uses a dedicated Google Cloud Service Account
for all sensitive operations involving AI processing and cloud storage. This architectural decision ensures:
- Security-sensitive API calls are isolated from end-user credentials
- The Service Account operates with the minimum necessary permissions
- Your personal Google account has limited exposure to automated processes
- All cloud operations follow the principle of least privilege
Automation Workflow
Here’s how the automation system works step-by-step:
-
1
Authentication & Access: The application authenticates using your
Google account to obtain necessary permissions for automated operation. -
2
Episode Tracking: Monitors your designated Google Sheet for new
episode entries and production status. -
3
Audio Processing: Retrieves audio files and processes them using
Google Cloud Storage for temporary chunk management. -
4
AI Artwork Generation: Uses Vertex AI to automatically generate
custom episode artwork based on episode content. -
5
Content Creation: Generates accompanying blog posts and show notes
for each episode. -
6
File Storage: Uploads completed episode files and content to your
Google Drive for permanent storage. -
7
Status Updates: Updates the tracking spreadsheet with completion
status, timestamps, and any error information.
Data Privacy & Security
Mbagu Media is committed to protecting your data. Here’s how we ensure your information stays secure:
What We Access
- Only the specific Google Sheet you designate for episode tracking
- Only files created by this application in your Google Drive
- Temporary audio processing data (automatically deleted after use)
- Your email and profile for authentication purposes only
What We Don’t Access
- We do not read or access any other files in your Google Drive
- We do not access your Gmail, Calendar, or other Google services
- We do not share your data with any third parties
- We do not use your data for any purpose other than the automation described above
Security Practices
- Minimum Permissions: We request only the scopes necessary for functionality
- Service Account Isolation: Sensitive operations use dedicated service accounts
- Data Ownership: All files remain in your Google Drive—we don’t store copies elsewhere
- Secure Authentication: OAuth 2.0 protocol ensures secure authorization
- Temporary Storage: Processing data is deleted immediately after use
- No Third-Party Sharing: Your data is never shared with external parties
Contact & Support
This automation service is developed and maintained by Mbagu McMillan for
Mbagu Media podcast production. If you have questions about this service, data usage, or
privacy practices, please contact us through our main website.
Privacy Policy: You can read our full privacy policy here –
https://mbagumedia.com/privacy-policy.
This page documents data access and scope usage for the OAuth verification of the MbaguMedia Automation Service, operated by MbaguMedia Network.
Mbagu Media | Podcast Automation Service
Last Updated: October 2025