Privacy Policy

1. What we collect

The information depends on how you use the service.

• Account information: email address, name or avatar information supplied by an identity provider, authentication records, and account settings.
• Transcript requests: the YouTube URL or video identifier, source/language choices, returned transcript data, and available video metadata.
• Summary history: the selected summary mode, summary status, generated summary, source reference, and timestamps for signed-in users.
• Support information: your email, message, attachments, request ID, and details you choose to provide.
• Technical and operational data: browser/device information, approximate location or network information where provided by the platform, timing, error category, request ID, and bounded usage/cost signals used to protect the service.

2. How we use information

• To authenticate accounts, maintain sessions, save requested history, and provide account features.
• To retrieve and display supported transcripts and available metadata.
• To generate the summary mode you select and protect the service through the Fair Usage Policy.
• To investigate errors, prevent abuse, measure reliability, improve accessibility, and respond to support or privacy requests.
• To send transactional messages such as confirmation, magic-link, password-reset, security, and account communications. The current launch plan does not require marketing email.
• To comply with applicable law, enforce our Terms, protect users and the service, and handle a business transfer if one occurs.

3. Transcript and summary provider processing

When you request a transcript or summary, the server may send the minimum source content and metadata needed to a configured service provider. Summary generation uses the selected mode and may route through OpenRouter to the model provider selected by configuration. We do not intentionally send your password, authentication token, or payment details to a model provider.

Provider retention, training, region, and subprocessors depend on provider configuration and applicable provider terms. The production provider register must be reviewed and kept current before this page is treated as final. Avoid placing confidential or sensitive personal information in a transcript request.

4. Analytics and cookies

We may use essential cookies or browser storage for sessions, language preferences, security, and product functionality. We may also use Google Analytics, Microsoft Clarity, PostHog, and Vercel Analytics as configured for product analytics, performance, and interaction diagnostics.

Product analytics should use page categories, event names, locale, device buckets, mode, duration/size buckets, and opaque request IDs. They are not intended to receive submitted YouTube URLs, raw transcript or summary text, prompts, email addresses, form contents, request bodies, or console logs.

5. Service providers and sharing

We use service providers for hosting, authentication/database operations, transactional email, analytics, performance monitoring, transcript retrieval, and AI summary generation. We share only what is needed for the relevant service, subject to configuration and applicable law. We do not use the service to sell your personal information as part of the current launch operation.

We may disclose information when required by law, to protect the service or another person, to investigate abuse or security events, or in connection with a corporate transaction. Third-party links and YouTube itself have their own terms and privacy practices.

6. Retention and deletion

We keep information for as long as it is needed for the purpose for which it was collected, for service reliability and security, or as required by law. Signed-in transcript and summary history is kept so the account can provide the requested library experience. Exact provider-specific retention timing is documented in our provider configuration and may vary by service.

You can request access, correction, or export from your account settings, or contact contact@youtranscripts.com. Confirmed self-service deletion removes the live account, saved transcripts, summaries, library records, and active processing state after a recent identity check and typed confirmation. Encrypted backups and a minimal deletion audit record may remain until their normal retention periods expire; they are not used to serve the deleted account. We may verify ownership before fulfilling any account request.

7. Security

We use server-side access controls, authenticated sessions, scoped database policies, rate and fair-use controls, bounded telemetry, and provider-specific secrets kept off the client where the current implementation supports them. No internet transmission or storage system is risk-free. Report suspected vulnerabilities through our security contact.

8. Your choices and rights

• Manage your account and available history controls.
• Request access, correction, export, or deletion through support.
• Manage cookies and browser storage through your browser settings, understanding that some essential functions may stop working.
• Ask questions about provider processing or a support request without sending raw transcript content unless needed.

9. Children and international use

The service is not designed for children below the age at which online services may lawfully collect their information in the relevant location. If you believe a child has provided personal information, contact us. Providers may process information in India or other countries where they operate; the final provider and transfer register must be reviewed before production.

10. Changes and contact

We may update this policy when the product, providers, law, or data practices change. The date at the top identifies the current page version. Questions and rights requests can be sent to contact@youtranscripts.com.