Controller: CRUBIT LTD, 27 Old Gloucester St, Holborn, London WC1N 3AX, UK • legal@askyourvideo.io

You may complain to the ICO (UK) or your local authority if you're unhappy with our handling of your data.

1) What we collect

Account & auth: Clerk user ID (currently). In future we may store name and email to send service updates or receipts.

Content & usage: prompts, questions, and conversation content you submit; YouTube URL; public metadata we retrieve (e.g., duration, video ID); device/log data for security and reliability.

Billing: handled by Stripe (payment method, transactions). We receive limited billing metadata (e.g., last 4 digits, status, amounts).

Support: messages and diagnostics you share with us.

We don't store the YouTube video itself; we only process the URL and related context.

2) Purposes & legal bases (UK/EU GDPR)

Provide the service & subscriptions (contract).
Security, abuse prevention, metering and fraud control (legitimate interests).
Billing, accounting, tax (legal obligation).
Product emails/updates (legitimate interests or consent, depending on jurisdiction).
(Future, optional) aggregated/anonymous analytics about video questions to offer insights to creators (legitimate interests with strong de-identification or consent where required). We'll update this notice and/or request consent if we launch this.

3) AI processing (Gemini)

We send your prompts and the YouTube URL/context to Google's Gemini API to generate answers. Google may retain limited logs for abuse/safety. Google's provider terms state these logs are not used to train foundation models for other customers. We apply filters to enforce safety and our acceptable-use rules.

4) YouTube Data API

When you paste a YouTube URL, we call the YouTube Data API to retrieve public metadata (e.g., duration). If we later offer Google OAuth linking, you will be able to revoke our access in your Google account settings. If you revoke access, we will delete any YouTube API data linked to that account that we still hold (if any), subject to legal retention.

5) Sharing & processors

We use trusted providers to operate the service: Clerk (auth), Stripe (payments), Google (Gemini, YouTube Data API), hosting/infrastructure, logging/monitoring, and support tools. We don't sell personal data or share it for cross-context behavioural advertising.

6) International transfers

Where data leaves the UK/EEA (e.g., to the US), we use recognised safeguards (UK IDTA and/or EU SCCs with UK Addendum) plus appropriate assessments.

7) Retention

Account/billing records: for your subscription, then up to 6 years for accounting.
Conversations: up to 24 months by default to operate, secure, and improve the service (you may request earlier deletion unless we must keep it).
Logs/security: typically 12 months.

We delete or anonymise when no longer needed.

8) Your rights

You may request access, correction, deletion, restriction, portability, or object to processing (including where we rely on legitimate interests). You can withdraw consent at any time where consent applies. Contact us at legal@askyourvideo.io for data protection inquiries.

9) California (CPRA) notice at collection

Categories: identifiers (account ID; in future name/email), internet activity (usage logs), and content you submit (prompts). We use these to provide and secure the service and process payments. We do not sell or share your personal information as defined by CPRA. Retention: see Section 7.

10) Children

The service is for adults (18+) only.

11) Changes

We'll post updates here and update the “Effective” date. Material changes will be notified in-app or by email.

Privacy Policy