Privacy Policy

1. Introduction

FlashTube ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome Extension and Mobile Application (collectively, the "Services").

2. Information We Collect

Personal Information

When you create an account, we collect:

• Email address (via Google Authentication)
• Google profile name and picture (optional)
• Unique user identifier

Usage Information

We automatically collect:

• YouTube video URLs you process
• Feature usage statistics (summaries generated, chat messages sent)
• Device and browser information
• IP address for rate limiting and security
• Subscription and billing information (processed by Stripe)

Content Data

We temporarily process YouTube video transcripts to provide our services. This data is:

• Cached locally on your device (Chrome Extension)
• Processed through our AI partners (OpenAI/Anthropic)
• Not permanently stored on our servers

3. How We Use Your Information

We use your information to:

• Provide and maintain our Services
• Process your transactions and manage subscriptions
• Send service-related emails and notifications
• Monitor and prevent abuse or fraudulent activity
• Improve our Services based on usage patterns
• Comply with legal obligations

4. Data Sharing and Third Parties

We share your information with:

Service Providers

• Supabase: Authentication and database services
• Stripe: Payment processing (we never see your card details)
• OpenAI/Anthropic: AI processing (content only, no personal data)
• Vercel: Website hosting

We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your data:

• Encryption in transit (HTTPS/TLS)
• Secure authentication via Google OAuth
• Regular security audits and updates
• Limited access to personal data (need-to-know basis)

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security of your data.

6. Data Retention

We retain your data as follows:

• Account Information: Until you delete your account
• Transaction Records: As required by law (typically 7 years)
• Usage Logs: 90 days for security and debugging
• Cached Content: 30 days on your local device

7. Your Rights (GDPR/CCPA)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Object: Object to certain processing of your data
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at: [email protected]

8. Cookies and Tracking

We use essential cookies and similar technologies to:

• Maintain your session and authentication state
• Remember your preferences
• Ensure security and prevent fraud

We do not use third-party tracking cookies or advertising cookies.

9. Children's Privacy

Our Services are not directed to individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Services, you consent to such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification (for significant changes)

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

13. Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at the same email address above, with "DPO" in the subject line.