Privacy Policy

1. Information We Collect

CapituAI collects the following information when you use our service:

• Account Information: Name, email, and profile picture via Sign in with Google
• Usage Data: YouTube video URLs you submit for transcription
• Generated Content: Transcriptions and chapters generated from your videos
• Google OAuth Tokens: We store your Google access token and refresh token securely on our servers so we can list your channel's videos and fetch video metadata on your behalf without asking you to sign in repeatedly. These tokens grant read-only access (youtube.readonly) and are deleted when you revoke access or delete your account.

2. How We Use Your Information

We use your information to:

• Process and transcribe YouTube videos
• List videos from your own YouTube channel so you can pick one to transcribe
• Automatically generate chapters using AI
• Manage your credit balance
• Improve our services

3. YouTube Access

When you log in with Google, we request read-only access to your YouTube data only to:

• Identify your YouTube channel
• Fetch public information about videos you submit

CapituAI uses YouTube API Services. By using CapituAI you also agree to the YouTube Terms of Service. In addition to our privacy practices described here, Google's handling of your data is described in the Google Privacy Policy.

4. Data Sharing

We do not sell, rent, or share your personal information with third parties, except:

• Service Providers: Supabase (database), Modal.com (processing), OpenAI (AI transcription), Resend (transactional email delivery)
• Legal Requirements: If required by law

5. Security

We implement security measures to protect your information:

• Secure OAuth authentication
• Data encryption in transit (HTTPS/TLS)
• Access control policies (Row Level Security)

6. Your Rights

You have the right to:

• Access your personal information
• Request correction of incorrect data
• Request deletion of your account and data
• Revoke YouTube access at any time

You can revoke CapituAI's access to your Google/YouTube data at any time via the Google security settings page. Upon revocation we delete your stored Google tokens and YouTube API data within 30 calendar days; upon your deletion request, within 7 calendar days.

7. Data Retention

We retain your information while your account is active. Upon account deletion, all your data will be permanently removed within 30 days.

Data obtained from YouTube API Services (such as video and channel metadata) is refreshed or deleted at least every 30 calendar days, in accordance with the YouTube API Services Developer Policies.

8. Cookies and Similar Technologies

We use essential cookies to maintain your login session. We do not use tracking or advertising cookies.

9. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes by email or through a notice in the service.

10. Google API Services Compliance

11. Contact