Privacy Policy

1. Scope and Contact

SummYT provides YouTube video summaries and a saved-summary library. This policy covers summyt.app, use.summyt.app, our mobile apps and browser extension, and the SummYT ChatGPT plugin and connected MCP service. For privacy questions or requests, contact [email protected].

2. Information We Collect

We collect information needed to provide and improve the features you use.

• Account and billing information, such as your name, email address, preferences and subscription details.
• Content and requests you provide, including videos you ask us to summarize, saved summaries and searches. When you use the ChatGPT plugin, we receive the information sent for your specific request, rather than your full conversation history.
• Technical and usage information, such as device information, IP addresses, cookies and interactions with the service. This includes analytics and session recordings used to improve the service and diagnose problems.
• Information you provide when contacting us for support.

3. How We Use Information

We use account and authorization information to sign you in, connect your account and restrict access to your own library. We use video content and task inputs to retrieve captions, generate summaries, search your saved library and report job status. We use subscription and credit records to check access and account for usage.

We use technical records to operate and secure the service, investigate failures and prevent abuse. Website and app analytics help us understand feature usage and improve the service. We also use contact information for support, account notices and product communications.

4. ChatGPT Plugin Data Flow

Connecting the plugin authorizes ChatGPT to use SummYT tools with your existing SummYT account. SummYT receives the inputs supplied to those tools and returns relevant video metadata, summary content, library matches, links and job results to ChatGPT. Content returned to ChatGPT is handled by OpenAI under the policies and settings applicable to your ChatGPT account.

Creating a summary saves the result to your SummYT library and can consume your existing credits after approval. Audio transcription requires a separate approval when captions are unavailable. Signing in takes place through the authorization flow; do not put passwords, API keys, payment-card details, government identifiers or sensitive health information into plugin tool inputs.

5. Who Receives Information

We do not sell your personal information. Information is disclosed to the following categories of recipients as needed to deliver the service:

• AI and transcription providers, including OpenAI for AI processing, receive video content and task inputs needed to generate the requested output.
• YouTube and video or caption retrieval services receive video identifiers or URLs needed to retrieve the requested video information.
• Hosting, database, storage, logging and security providers process service data and operational records. Analytics providers, including PostHog, process website and app usage events.
• Identity providers process sign-in requests; payment providers process website payments; email and support providers process communications.
• When you use the ChatGPT plugin, OpenAI receives the tool results returned to ChatGPT. Any summary you choose to share with others is available to those recipients.
• We may disclose information when required by law or necessary to protect rights, safety and service security.

6. Retention and Deletion

Account information and your saved-library associations are retained while your account exists. In account settings, you can schedule account deletion with a seven-day waiting period and cancel it during that period. The deletion process removes your account and its library associations after the scheduled date; disconnecting ChatGPT alone does not delete your SummYT account or library.

Public YouTube video metadata, captions or transcripts, and summaries derived from that public content are stored as shared video records and may be reused across users requesting the same video. We retain these shared records without a fixed expiry so the service can reuse them. Your account details, search queries and the association between your account and saved videos are separate personal information; they are not made public simply because the source video is public. Removing a library entry or deleting an account removes the relevant account association, but does not necessarily delete the shared video records. Public video content can itself contain personal information; contact [email protected] with concerns about a particular record.

Records used to connect the ChatGPT plugin and process requests are deleted within thirty days after they are no longer needed.

Application logs are retained for up to three days, and derived operational metrics for up to thirty days. Analytics events are retained for up to twelve months, and session recordings for up to ninety days, to understand product usage and investigate usability problems.

Database backups are retained for up to thirty days. Deleted account information may remain in backups during that period. Backups are used for recovery rather than routine access; if restored, account deletions are reapplied.

Other security and diagnostic records are retained for up to thirty days. Billing records required for accounting or legal obligations are retained for the applicable statutory period. Information needed for an active dispute or security investigation may be retained until the matter is resolved. Contact [email protected] to request deletion of personal information or details about applicable retention.

7. Your Controls and Rights

You can manage your library and schedule account deletion in SummYT account settings. You can disconnect the plugin through ChatGPT connection settings to stop using it; for assistance revoking SummYT authorization, contact [email protected]. Disconnection does not remove information already returned to ChatGPT; manage that information through your OpenAI account controls.

Our websites use cookies and local storage for authentication and analytics, including PostHog. You can block or clear these through your browser settings; blocking authentication storage can prevent sign-in. For help with analytics or marketing preferences, contact [email protected].

Depending on your location, you may have rights to access, correct, delete or receive a copy of your personal information, restrict or object to processing, or withdraw consent where processing relies on it. Send requests to [email protected]. We may need to verify account ownership before acting. You may also contact your local data-protection authority.

8. Security and International Processing

We use authentication, access controls and hashed plugin tokens to protect account access. No storage or transmission system can guarantee complete security.

Our service providers may process information outside your country, including in the United States and Europe. Applicable privacy protections can differ between countries. Contact [email protected] for information about providers and international processing.

9. Children’s Privacy

Our service is available to users aged 13 and older and is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact [email protected].

10. Policy Updates

We update this policy when our practices change and show the latest revision date on this page. We will provide notice through the service or other appropriate means when a material change requires it.