Privacy Policy

Information we collect

Information you provide

• Account details — your email address and a securely hashed password when you sign up.
• Connected YouTube channel— when you connect a channel, we store OAuth access and refresh tokens and your channel ID and title so we can read your videos' metadata and analytics and publish localizations you request.
• Billing details — if you subscribe, our payment processor collects your payment information. We store a customer and subscription identifier and your plan status, but never your full card number.
• Preferences — settings such as your pinned audience languages.

Information collected automatically

• Usage data — the searches you run and analyses you generate, so we can deliver results, enforce plan limits, and keep your saved history.
• Essential cookies — we use a session cookie to keep you signed in and a cookie to remember your selected channel. We do not use third-party advertising or analytics cookies.

How we use your information

• To provide, operate, and improve the Service.
• To analyze YouTube search results and generate briefs, and to read and (at your request) update your own channel's video metadata.
• To manage your account, subscription, billing, and plan limits.
• To communicate with you about your account, including billing receipts and renewal reminders.
• To secure the Service and comply with legal obligations.

Third-party services

We share data with the following processors only as needed to run the Service:

• YouTube / Google — the Service uses YouTube API Services to read public video data and, for your connected channel, your metadata and analytics. By using the Service you agree to the YouTube Terms of Service, and Google's use of your data is governed by the Google Privacy Policy. You can revoke our access at any time via your Google security settings or by disconnecting your channel in the app. VidHalo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Payment processing (Stripe) — handles subscription payments; your card details are provided directly to and stored by Stripe.
• AI processing (Anthropic)— video transcripts, comments, and metadata are sent to Anthropic's Claude models to produce the analysis and translations. This data is not used to train their models.
• Transcript retrieval — a third-party transcript provider is used to fetch publicly available captions for analysis.
• Hosting & infrastructure — our hosting and database providers store the data described above to run the Service.

Google user data

This section describes specifically how we handle data obtained from Google APIs when you connect your YouTube channel.

What we access

• With the read-only permissionsgranted when you connect: your channel ID and title; the list of videos you have uploaded and their metadata (titles, descriptions, thumbnails, existing title/description translations, and public statistics such as view counts); and your own videos' aggregated performance metrics from YouTube Analytics (watch time, average view duration, subscribers gained/lost, likes, shares, comments — never individual viewer data).
• With the write permissionrequested only when you first publish: the ability to update your own videos' localized titles and descriptions and default language. Publishing merges into your existing localizations, so any translations you added by hand are kept. We never delete videos or modify anything you did not explicitly submit.
• We store the OAuth access and refresh tokens, your channel ID and title, and the scopes you granted.

How we use it

Google user data is used solely to provide the user-facing features you invoke: listing your videos, showing a video's current metadata, translations, and performance metrics, and publishing the translations you request to your own channel. We do not use Google user data for advertising, do not sell it, and do not use it for any purpose unrelated to these features. No humans read this data except with your permission, where required for security or legal reasons, or in aggregated/anonymized form for internal operations.

How it is shared

Google user data is shared only with the processors required to deliver the feature: when you request translations, the selected videos' titles and descriptions are sent to our AI translation provider (Anthropic) or to Google Translate to produce the translations; and our hosting and database providers store the tokens and channel details described above. We never sell Google user data or share it with advertisers, data brokers, or other third parties.

How it is protected

All Google user data is transmitted over encrypted connections (TLS) and stored in an access-controlled database. We request the narrowest OAuth scopes that support each feature, and request write access only at the moment you first publish.

Retention and deletion

We retain your OAuth tokens and channel details only while the channel is connected. Disconnecting a channel in the app immediately deletes its stored tokens, and closing your account deletes all of them. You can also revoke VidHalo's access at any time from your Google security settings. Video metadata and analytics are fetched on demand and cached only briefly to operate the Service.

Data retention

We keep your information for as long as your account is active. You can delete your saved analyses at any time, and you can disconnect a channel to remove its stored tokens. When you close your account, we delete or anonymize your personal data except where we must retain it to meet legal or accounting obligations.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at support@vidhalo.com.

Security

We use industry-standard measures to protect your data, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, but we work to protect your information.

Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance.