Privacy Policy

• Account data: email, display name and profile picture (from your Google account or uploaded by you), and a hash of your API key (we do not store it in plaintext)
• Submitted content: the YouTube URLs you enter, the transcripts produced from them, AI analysis results, and your edits and ratings of those analyses
• Technical logs: IP address, User-Agent, and request timestamps (used for security, abuse prevention, and debugging)
• Usage and cost: the tokens, model, and cost of each AI call (used for billing and service optimization)

We do NOT collect: plaintext credit card numbers (handled by our payment service provider 藍新金流(NewebPay)), biometric data, location data, or your browsing history on other websites.

VidGist uses Google Sign-In to create and authenticate your account. We request only Google's basic sign-in scopes (openid, email, profile). We do not access your Gmail, Drive, contacts, YouTube account or any other Google data.

• Data we access: your Google account identifier, email address, name and profile picture URL.
• How we use it: to create and sign you in to your VidGist account, to show your name and avatar in the interface, and to send service-related emails (receipts, expiry reminders, digests for channels you subscribe to). It is never used for advertising or to train AI models.
• Storage and protection: this data is stored in our Google Cloud database in Taiwan, encrypted in transit and at rest. The access token Google issues at sign-in is stored encrypted; it can only read the basic data above and expires after about one hour. We never receive your Google password.
• Sharing: we do not sell, rent or disclose your Google user data to third parties, and your email and name are never sent to AI providers. The only exceptions are our email delivery provider (to deliver notifications to your inbox) and where required by law.
• Deletion and revocation: you can delete your account at any time from the account page; your Google user data is permanently deleted after a 30-day grace period. You can also revoke VidGist's access from the "Third-party apps & services" page of your Google Account.

VidGist's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• To provide the analysis service itself (for videos with several people talking, the audio is sent to our own speech-processing service to tell the speakers apart; audio passes through only during processing, is not kept, and no voiceprints are created)
• To calculate usage and charge for it
• Security detection and abuse prevention (IP request counting, rate limiting)
• To improve AI analysis quality (rating content is used to evolve our prompts, but is never disclosed publicly)

• We do not sell your personal data to advertisers or third parties
• We do not use your analysis results to train our own large language models
• We do not publicly disclose your private analyses without your explicit consent

• OpenAI / Anthropic / Google / Groq: when transcribing and analyzing, content is sent to these LLM APIs. They have their own privacy policies; we use the API tier (configured not to train on the data)
• proxy: used when fetching YouTube subtitles; it only relays network requests and does not touch account data
• Google Cloud Platform: hosts our servers and database (asia-east1 / Taiwan)
• 藍新金流(NewebPay): payment service provider (card acquiring and recurring charges), responsible for the payment page and card data storage; we only receive the payment result, transaction number and amount, never the card number
• Google Analytics: site traffic statistics (which pages are viewed, where visitors come from, whether an analysis or sign-up was submitted). IP addresses are anonymised by Google; we cannot see who you are and never link these statistics to your account

Analysis results are private by default and visible only to you. Only if you actively share them (the "Share" button on the /jobs page) are they made public, at the tier you choose:

• Tier 1: anyone can view the summary; the transcript and details are not public
• Tier 2: logged-in users can view the full content
• Tier 3: requires channel-owner verification

Regardless of tier, the original transcript text is never disclosed publicly.

At any time you may:

• Ask what data of yours we have stored
• Request correction or deletion
• Download a copy of your data (data portability)
• Revoke the public sharing of an analysis

You may also write to us (service@vidgist.app); self-service download / deletion is available on the account page. Legal and financial records (such as invoices and DMCA notices) are retained for the legally required period and will not be deleted immediately.

• ytp_locale: remembers your language setting (1 year)
• Sign-in session cookie: keeps you signed in (7 days, sent over HTTPS only)
• localStorage temporarily holds editing drafts (only on your device)
• Service Worker caches the UI shell (fallback when offline)
• Google Analytics cookies (_ga etc.): a random identifier to count unique visitors, containing no name or email. You can block them with your browser's ad / tracker blocking without affecting the site

We do not use ad tracking cookies and never sell traffic data to anyone.

• Analysis results: permanently deleted after you delete your account plus a 30-day buffer period
• Usage / billing records: 5 years as required by law
• DMCA notices: retained as required by law (safe harbor)
• Audit logs: 90-day rolling window

Changes to this policy will be posted on this page and the "Last updated" date will be revised. Material changes will be notified by email. Current version effective date: 2026-09-21.

Privacy-related questions: service@vidgist.app
Takedown requests: /legal/dmca