Privacy Policy

We collect the following information when you use foo:

• Account information: email address, name, and profile image (when signing in via Google)
• Usage data: YouTube URLs you submit, analyses generated, custom prompts you create, and feature usage patterns
• Payment information: billing details are processed by Stripe and are not stored on our servers
• Technical data: IP address, browser type, and device information collected automatically for security and debugging

We use collected information to:

• Provide, maintain, and improve the Service
• Process your analyses and deliver results
• Manage your subscription and billing
• Send transactional emails (magic links, billing receipts)
• Monitor for abuse and enforce usage limits
• Debug errors and improve reliability

We share data with the following third parties, only as necessary to operate the Service:

• OpenRouter / LLM providers: video transcripts are sent to AI model providers for analysis. Transcripts are not stored by these providers beyond the duration of the request.
• Stripe: payment processing. Subject to Stripe's Privacy Policy.
• Resend: email delivery for magic link authentication.
• Sentry: error tracking to monitor and fix issues. Only technical error data is sent, not your analyses or personal content.
• Google: OAuth authentication (if you choose to sign in with Google).

Your account data and analyses are retained for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Anonymized, aggregated data may be retained for analytics purposes. Backups containing your data are retained for up to 90 days after deletion.

We take reasonable measures to protect your data, including encryption in transit (TLS), signed session cookies, CSRF protection, and per-user rate limiting. However, no method of electronic transmission or storage is 100% secure.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your analyses
• Withdraw consent for optional data processing

To exercise any of these rights, contact us via our contact page.

We use essential cookies only: a signed session cookie for authentication. We do not use tracking cookies, analytics cookies, or third-party advertising cookies. No cookie consent banner is needed because we only use strictly necessary cookies.

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 13, we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

Questions about this policy? Reach out at our contact page.