1. Information We Collect

Account data: When you register, we collect your email address and display name. Passwords are hashed using PBKDF2-SHA256 with per-user salts and are never stored in plaintext.

Usage data: We track transcript and clip usage counts per account to enforce plan limits. We do not track which specific videos you analyze.

Payment data: Payment processing is handled entirely by Stripe. We store your Stripe customer ID and subscription ID but never see or store your credit card details.

2. How We Use Your Information

We use your information to: (a) provide and maintain the Service; (b) enforce plan limits; (c) process payments; (d) send critical service communications (billing issues, security alerts); (e) respond to support requests. We do not sell your data or use it for advertising.

3. Data Storage & Security

Your data is stored on Cloudflare's global network (D1 database, R2 storage). Transcripts and clips you create are associated with your account and not visible to other users. All data is transmitted over HTTPS. Authentication uses JWT tokens stored in your browser's localStorage.

4. Data Retention

Transcripts are retained as long as your account is active. Clips are retained per your plan's retention policy (7-90 days, or permanent for Studio). Account data is retained until you request deletion. We will delete your account and all associated data within 30 days of request.

5. Third-Party Services

We use: (a) Cloudflare for hosting, CDN, and data storage; (b) Stripe for payment processing; (c) YouTube for transcript and video data (governed by YouTube's Terms of Service and Google's Privacy Policy). We do not use analytics trackers, advertising networks, or social media pixels.

6. Cookies & Local Storage

We use localStorage (not cookies) to store your authentication token for session persistence. We do not use tracking cookies. Cloudflare may set functional cookies for security and performance (e.g., bot detection).

7. Your Rights

You have the right to: (a) access your personal data; (b) correct inaccurate data; (c) request deletion of your account and data; (d) export your transcripts and clips; (e) withdraw consent at any time by closing your account. To exercise these rights,contact us.

8. GDPR & CCPA

For EU residents (GDPR): Our legal basis for processing is contractual necessity (providing the Service) and legitimate interest (security, fraud prevention). For California residents (CCPA): We do not sell personal information. You may request disclosure of the categories and specific pieces of personal information we hold about you.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 13, we will delete it promptly.

10. Contact

For privacy-related inquiries, use our contact form. Data Protection Officer: Navecta LLC, United States.