Privacy Policy

Information We Collect

Account Information

When you create an account, we collect your email address and password. Your password is securely hashed and we never store it in plain text. If you choose to sign in with a third-party provider (such as Google), we receive basic profile information from that provider.

Video Analysis Data

When you analyze YouTube videos, we store:

• YouTube video IDs and URLs you submit
• Video metadata (title, author, duration, thumbnail)
• Video transcripts obtained from third-party services
• AI-generated content (highlights, summaries, topics, questions)
• Your notes and chat conversations related to videos
• Videos you mark as favorites

Usage Information

We collect information about how you interact with our service, including:

• Rate limit and usage tracking for fair service distribution
• Timestamps of when you create or update video analyses
• Your subscription status and billing information (processed by Stripe)

Cookies and Session Data

We use cookies and similar technologies to maintain your authenticated session, remember your preferences, and improve your experience. You can control cookie settings through your browser, but some features may not function properly if cookies are disabled.

How We Use Your Information

We use the information we collect to:

• Provide and improve our video analysis service
• Generate AI-powered highlights, summaries, and insights using your video data
• Maintain your account and authenticate your access
• Process payments and manage subscriptions
• Enforce rate limits and prevent abuse of our service
• Send important service updates and notifications about your account
• Respond to your questions and support requests
• Analyze usage patterns to improve our features and user experience

Third-Party Services

We use trusted third-party services to provide and enhance our service. Your data may be processed by:

Supabase

We use Supabase for authentication, database storage, and user data management. Supabase hosts our data on secure servers and provides encryption at rest and in transit. Learn more at Supabase's Privacy Policy.

Google Gemini

We use Google's Gemini AI models to generate video highlights, summaries, and chat responses. Video transcripts and your questions are sent to Gemini for processing. Google's AI services are subject to their Privacy Policy.

Supadata

We use Supadata's API to fetch YouTube video transcripts. When you analyze a video, we send the video ID to Supadata to retrieve the transcript data.

Stripe

Payment processing is handled by Stripe. We do not store your credit card information. Stripe collects and processes your payment details according to their Privacy Policy. Stripe is PCI-DSS compliant and maintains strict security standards.

Data Security

We take reasonable measures to protect your information from unauthorized access, alteration, disclosure, or destruction:

• All data transmission uses HTTPS encryption (SSL/TLS)
• Passwords are hashed using industry-standard encryption
• Our database is hosted on secure servers with encryption at rest
• We implement rate limiting and abuse prevention measures
• Access to user data is restricted to essential operations only

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Portability

You can access your video analyses, notes, and account information at any time through your TLDW account. If you would like to export your data in a portable format, please contact us.

Correction and Deletion

You can edit or delete your notes, video analyses, and favorites directly from your account. To delete your entire account and all associated data, please contact us at hello@tldw.us. We will process account deletion requests within 30 days.

Marketing Communications

We do not send marketing emails. We only send transactional emails related to your account and subscription. You cannot opt out of essential service communications.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to request disclosure of information we collect and share, and the right to request deletion of your information. We do not sell your personal information.

European Residents (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, and data portability. Our legal basis for processing your data is your consent and our legitimate interest in providing the service.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required by law to retain certain information (such as for tax or legal compliance).

Video analyses that were created while not signed in may be retained for caching purposes but are not linked to your identity.

Children's Privacy

TLDW is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will delete it.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using TLDW, you consent to the transfer of your information to our facilities and third-party service providers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. If we make material changes, we will notify you via email or through a notice on our website. The “Last updated” date at the top of this policy indicates when it was last revised.

Your continued use of TLDW after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

hello@tldw.us

We will respond to privacy-related inquiries within 30 days. For urgent security concerns, please indicate that in your email subject line.