Privacy Policy

1. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide, including:

• Name and email address
• Account credentials
• Payment information (processed securely through Stripe)
• Communication preferences

Usage Information

We automatically collect certain information when you use our Platform:

• IP address and device information
• Browser type and operating system
• Pages visited and features used
• YouTube URLs processed through our service
• AI tool usage and generated content

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and improve our services. You can control cookie preferences through your browser settings.

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our services
• Process transactions and manage your account
• Send service-related communications and updates
• Respond to customer support requests
• Analyze usage patterns to improve user experience
• Prevent fraud and ensure platform security
• Comply with legal obligations
• Train and improve our AI models (using anonymized/aggregated data)

3. Information Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third parties who assist in operating our Platform (payment processors, hosting providers, analytics services)
• Legal Requirements: When required by law or to respond to legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given explicit permission

4. Data Retention

We retain your information as follows:

• Account Information: Retained while your account is active
• Transaction Records: Retained for 7 years for tax and compliance purposes
• Generated Content: Retained as long as you maintain your account, unless you delete it
• Deleted Accounts: Personal information removed within 90 days, except as required by law

5. Your Rights

You have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a portable format
• Opt-Out: Unsubscribe from marketing communications

To exercise these rights, contact us at support@transcriptr.ai. We will respond within 30 days.

California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising privacy rights

6. Security Measures

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit and at rest
• Regular security audits and assessments
• Access controls and authentication measures
• Employee training on data protection
• Incident response procedures

7. Google API Services & YouTube Data

Transcriptr uses YouTube API Services to let you publish clips directly to your YouTube channel. By using these features, you agree to be bound by the YouTube Terms of Service. Transcriptr's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Accessed from Google

When you connect your YouTube account via OAuth 2.0, Transcriptr requests the following scopes and accesses the following Google user data:

• YouTube channel information (channel name, channel ID, profile picture) — accessed via the youtube.readonly scope to display your connected account within our Platform.
• Ability to upload videos to your YouTube channel on your behalf — accessed via the youtube.upload scope to publish clips you create.
• Video metadata (title, description, tags, visibility/privacy status, thumbnail) — set by you when publishing a clip through our Platform.

We do not access your private videos, watch history, playlists, likes, subscriptions, comments, or any YouTube data beyond what is listed above.

How We Use Google User Data

Google user data accessed through YouTube API Services is used exclusively for the following purposes:

• Display your channel identity: We show your YouTube channel name and profile picture within the Transcriptr dashboard so you can confirm the correct account is connected.
• Publish clips to your channel: When you choose to publish a clip, we use the upload scope to upload the video file and set the title, description, tags, visibility, and thumbnail you specify.
• Maintain your connection: We store an OAuth 2.0 refresh token to keep your YouTube account connected between sessions so you do not need to re-authenticate each time.

We do not use Google user data for advertising, analytics, training AI models, or any purpose other than providing the publishing features described above.

How We Store Google User Data

Google user data is stored as follows:

• OAuth 2.0 tokens (access token and refresh token) are stored in our encrypted PostgreSQL database hosted on AWS (US region). Tokens are encrypted at rest using AES-256 encryption.
• Channel metadata (channel name, channel ID, profile picture URL) is stored in the same encrypted database, associated with your Transcriptr user account.
• Video files you create are temporarily stored in AWS S3 during the upload process to YouTube. Once the upload to YouTube is complete, the video file is available in your Transcriptr account for re-use but is not retained by Google API Services beyond the upload.
• We do not store your Google password, and Google credentials are never logged or written to disk in plaintext.

How We Share Google User Data

We do not sell, rent, or share your Google user data with any third parties. Google user data is transmitted only to:

• Google/YouTube APIs: To perform the publishing actions you request (uploading videos, setting metadata).
• Our infrastructure providers (AWS) solely for the purpose of hosting our encrypted database and application servers. These providers do not have access to decrypted Google user data.

No other third-party services, analytics tools, or advertising networks receive your Google user data.

Data Retention and Deletion

We retain your Google user data (OAuth tokens and channel metadata) only while your YouTube account remains connected in Transcriptr. When you disconnect your YouTube account or delete your Transcriptr account, all Google user data — including OAuth tokens and stored channel metadata — is permanently deleted from our systems within 24 hours.

Revoking Access

You can revoke Transcriptr's access to your Google/YouTube account at any time by:

• Disconnecting YouTube from your Transcriptr account in Settings > Integrations
• Visiting Google Third-Party Apps & Services and removing Transcriptr's access

Upon revocation, we will delete all stored Google user data (OAuth tokens, channel metadata) within 24 hours. This will not affect any videos already uploaded to your YouTube channel.

Google Privacy Policy

For more information about how Google handles your data, please review the Google Privacy Policy.

8. Other Third-Party Services

Our Platform may integrate with third-party services (e.g., YouTube, payment processors). These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.

9. Children's Privacy

Our Platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our Platform and updating the "Last Updated" date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: support@transcriptr.ai
• Website: transcriptr.ai/contact