YT-Highlights
Sign InJoin Now

Privacy Policy

Last updated: February 8, 2026

1. Introduction

YT-Highlights ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our AI-powered learning platform at yt-highlights.io ("the Service").

2. Information We Collect

2.1 Information You Provide

  • Account information: Name, email address, and profile details when you create an account (managed via Clerk authentication).
  • Content you submit: YouTube URLs, uploaded documents, audio files, and any text you input for processing.
  • Payment information: Billing details processed securely through Stripe. We do not store your full credit card number.
  • Communications: Messages you send to our support team.

2.2 Information Collected Automatically

  • Usage data: Pages visited, features used, and interaction patterns.
  • Device information: Browser type, operating system, and device identifiers.
  • Log data: IP address, access times, and referring URLs.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service.
  • Process your content through AI models to generate notes, summaries, and other learning materials.
  • Process payments and manage your subscription.
  • Send you important updates about the Service (e.g., billing, security, policy changes).
  • Respond to your support requests and communications.
  • Monitor and analyze usage patterns to improve user experience.
  • Detect, prevent, and address technical issues and abuse.

4. AI Processing

Our Service uses third-party AI providers (including Google Gemini and OpenAI) to process your content. When you use AI features:

  • Your content (video transcripts, documents, etc.) is sent to AI providers for processing.
  • We use these providers' APIs in accordance with their respective data processing agreements.
  • AI-generated outputs are stored in our database and associated with your account.
  • We do not use your content to train AI models.

5. Data Storage and Security

  • Your data is stored securely using Supabase (PostgreSQL) with encryption at rest and in transit.
  • We use industry-standard security measures including HTTPS, secure authentication (Clerk), and access controls.
  • Payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor.
  • We retain your data for as long as your account is active or as needed to provide the Service.

6. Data Sharing

We do not sell your personal data. We may share your information with:

  • Service providers: Third-party services that help us operate (Clerk for authentication, Stripe for payments, Supabase for data storage, AI providers for content processing).
  • Legal requirements: When required by law, subpoena, or other legal process.
  • Business transfers: In connection with a merger, acquisition, or sale of assets.
  • With your consent: When you explicitly choose to share content publicly (e.g., public notes on the Explore page).

7. Your Rights

Depending on your location, you may have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate personal data.
  • Deletion: Request deletion of your personal data and account.
  • Export: Request a portable copy of your data.
  • Objection: Object to processing of your personal data.
  • Restriction: Request restriction of processing of your personal data.

To exercise these rights, contact us at [email protected].

8. Cookies

We use essential cookies required for the Service to function (authentication sessions, preferences). We do not use third-party advertising or tracking cookies. Analytics data is collected server-side without third-party tracking scripts.

9. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: