Privacy Policy

1. Introduction

Welcome to YTDemia ("we", "us", "our"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our application (collectively, the "Service").

By accessing or using the Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect via the Service includes:

A. Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to:

• Email address.
• First name and last name.
• Profile picture (if authenticating via third-party providers like Google).

B. Derivative and Usage Data

Information our servers automatically collect when you access the Service, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Service. We also collect application-specific usage data:

• Course creation, progression, and completion metrics.
• User-generated notes and timestamp annotations.
• AI summary generation requests and token usage metrics.
• Interaction data, including device types and error logs, for diagnostic purposes.

3. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Service to:

• Create and manage your account.
• Provide, operate, and maintain the Service.
• Process your requests for AI-generated summaries and enforce usage limits based on your subscription tier.
• Improve, personalize, and expand our Service.
• Understand and analyze how you use our Service to improve the user experience.
• Send you technical notices, updates, security alerts, and support messages.
• Monitor and analyze usage and trends to prevent fraudulent transactions and monitor against theft.

4. Disclosure of Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

A. Third-Party Service Providers

We may share your information with third parties that perform services for us or on our behalf. Our third-party integrations include:

• Supabase: For database hosting, authentication, and secure data storage.
• AI Providers (via OpenRouter & Groq): We utilize various Large Language Models (including models from Qwen, Google, Anthropic, OpenAI, and Groq) to process video transcripts and generate summaries. Video transcripts and user inputs are sent to these providers exclusively for fulfilling your summary requests. Please note that some AI service providers may utilize the data sent to them to train their models, and we do not maintain control over their external training policies.
• Analytics and Performance: We employ analytics tools, such as Google Analytics and Microsoft Clarity, solely to understand broad usage patterns, diagnose technical issues, and improve the overall user experience. This data helps us ensure the platform remains fast and reliable.
• Infrastructure Providers: We utilize Netlify to host our application and execute serverless functions, ensuring reliable and secure global delivery.
• Communication Services: We may use established email service providers to deliver transactional emails, such as account verifications and critical updates.
• Advertising Partners: We may partner with third-party advertising networks to display relevant advertisements on our Service. These partners may independently collect data as governed by their respective privacy policies.

Note regarding YouTube: YTDemia embeds YouTube players via the standard YouTube IFrame API. We do not download or store YouTube video files. If you are actively logged into your Google or YouTube account in your web browser, YouTube may store your viewing history of content played on our Service. Video playback is entirely subject to the YouTube Terms of Service and Google Privacy Policy.

B. By Law or to Protect Rights

If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.

5. Data Security and Storage

We use administrative, technical, and physical security measures to help protect your personal information. When you use the Service without an account, your data (courses, notes) is stored locally within your browser's IndexedDB. When authenticated, your account data is transmitted securely via HTTPS and stored in SOC 2 Type II compliant cloud databases managed by Supabase.

While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

6. Your Data Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: The right to request copies of your personal data.
• Right to Rectification: The right to request that we correct any information you believe is inaccurate or incomplete.
• Right to Erasure: The right to request that we erase your personal data, under certain conditions.
• Right to Restrict Processing: The right to request that we restrict the processing of your personal data, under certain conditions.
• Right to Data Portability: The right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

California residents additionally have the right to request disclosure of data collection and sales practices. We explicitly affirm that we do not sell your personal data.

7. Cookie Policy

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

We use these technologies to maintain your session (e.g., keeping you logged in), remember your preferences (like volume or theme), and securely operate the site. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

8. Policy for Children

We do not knowingly solicit information from or market to children under the age of 13. If you become aware of any data we have collected from children under age 13, please contact us immediately.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Policy. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have questions or comments about this Privacy Policy, or wish to exercise your data rights, please contact us at support@itzmrz.xyz or via our Contact page.