Privacy Policy

1. Introduction

This Privacy Policy explains how YouTube Writer ("we", "us" or "our") collects, uses, shares and protects personal information when you use the youtubewriter.com website and the YouTube Writer application (together, the "Service").

YouTube Writer is the controller of the personal information described here. Our contact details are in Section 16.

This Policy forms part of our Terms of Service. It should be read together with our Cookie Policy.

2. Information We Collect

Information you give us

Information we collect automatically

Information from third parties

• Payment processor. When you subscribe, our payment processor gives us your customer and subscription identifiers, plan, subscription status, and billing period dates. It also tells us the outcome of a payment.
• Email delivery provider. Delivery outcomes for the transactional emails we send you, such as whether a password reset email was delivered or bounced.

What we deliberately do not collect

• Full payment card details. Card numbers, expiry dates and security codes are entered directly with our payment processor and never reach our servers.
• Advertising or cross-site tracking data. The Service contains no advertising pixels, no social plug-ins, no third-party marketing tags, no session recording and no heatmaps. Our analytics are cookieless and first-party, and are never used to follow you across other websites or to build an advertising profile. See Section 5.
• Special category data. Please do not submit health information, biometric or genetic data, precise geolocation, government identifiers, racial or ethnic origin, political opinions, religious beliefs, trade union membership or sexual orientation. We do not ask for it and the Service is not designed to handle it.

Administrative records

Where a member of our team takes a privileged action on an account, such as changing a plan, suspending an account or deleting content, we record who did it, what they did, when, and the IP address they acted from. These records exist for accountability and security.

3. How and Why We Use Your Information

We use personal information for the following purposes. If you are in the European Economic Area or the United Kingdom, the legal basis for each purpose is shown in the third column.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and have concluded they are not, given the limited nature of the data and the security and service-quality benefits involved. You may object to this processing as described in Section 12.

Automated decision-making

We do not make decisions producing legal effects concerning you, or similarly significantly affecting you, based solely on automated processing. Script generation is automated, but it produces draft text for your review, not a decision about you. Automated rate limiting may temporarily restrict request volume; you can contact us if you believe a restriction was applied in error.

AI model training

We do not use your inputs, your generated scripts or your account data to train, fine-tune or improve any AI model of ours. We select AI providers on the basis that content submitted through their business interfaces is not used to train their models. Section 4 explains what is sent to them.

4. How Script Generation Works

This section explains the one data flow most people want to understand, because it involves sending your content to a third party.

When you request a script, the Service builds a prompt from the inputs you provided and transmits that prompt over an encrypted connection to our third-party AI model provider. The provider runs the model and returns generated text, which we store in your script library and display to you.

What is and is not sent:

• Sent: the content of your script inputs, as assembled into the prompt.
• Not sent: your name, your email address, your account identifier, your password, your billing details or your IP address. The request is authenticated with our own API credential, not with your identity.

Because prompts are transmitted to a third-party provider, please do not include confidential information or personal information about other people in your inputs.

5. Analytics

We measure how the site is used so we can see which pages people find useful and how they arrive. We do this with Umami, a privacy-focused analytics tool that we run on our own infrastructure rather than sending traffic data to a third-party analytics company.

What the analytics collect

• the address of the page you viewed, and its title;
• the page or website you arrived from, if any;
• your screen size and browser language;
• the type of browser, operating system and device;
• an approximate location, no more precise than country or region, derived from your IP address.

What the analytics do not do

• No cookies. The analytics tracker sets no cookies whatsoever. It reads a single browser storage key, umami.disabled, only to check whether you have opted out.
• No cross-site tracking. Your visit is not followed onto other websites, and no advertising or marketing profile is built.
• No stored IP address. Your IP address is used in the moment to derive an approximate location and to recognise repeat visits within a day, and is not retained as part of the analytics record.
• Not linked to your account. Analytics records are not joined to your account, your email address or the scripts you generate.
• Not sold or shared. Analytics data is not sold, and is not shared for advertising of any kind.

How to opt out

You have two options, either of which stops analytics events being recorded for you:

1. Turn on Do Not Track in your browser settings. Our tracker is configured to respect it, and will record nothing for your visit.
2. Set the key umami.disabled to 1 in your browser local storage for this site. The tracker checks that key on every page load and stays silent while it is set.

Blocking the analytics script with a content blocker also works and breaks nothing else on the site. If you would prefer we delete analytics records associated with your visits, contact us at privacy@youtubewriter.com — note that because these records are not linked to your account, we may not be able to identify which are yours.

6. Who We Share Information With

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We disclose it only in the circumstances below.

Service providers (processors)

We use the following categories of provider to run the Service. Each acts on our instructions under a contract that restricts their use of the information to providing their service to us.

Other disclosures

• Legal compliance. Where we reasonably believe disclosure is required by law, regulation, legal process or an enforceable governmental request. Where permitted, we will try to notify you first.
• Rights and safety. Where necessary to investigate, prevent or act on suspected illegal activity, fraud, abuse, threats to the safety of any person, or violations of our Terms or Acceptable Use Policy; or to establish, exercise or defend legal claims.
• Copyright complaints. Where we forward a copyright notice or counter-notice as described in our Copyright and DMCA Policy. A counter-notice you send may be forwarded to the complainant, including the contact details it contains.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, in which case the recipient will be bound to honour this Policy for information transferred, or you will be notified of any material change.
• With your direction. Where you ask us to share information, or otherwise consent.

7. How Long We Keep Information

We keep personal information only as long as we need it for the purposes described in this Policy, then delete or anonymize it.

We may retain information longer where necessary to comply with a legal obligation, resolve a dispute, enforce our agreements, prevent fraud or abuse, or where a legal hold applies.

8. Deleting Your Account

You can delete your account from your account settings in the Service. Deletion removes your account, profile and saved scripts from our live systems.

Please note that deletion is not reversible; that backups are overwritten on the rolling schedule described above rather than immediately; and that billing, tax and legal-compliance records, and records needed to enforce a suspension or our repeat-infringer policy, are retained as described in Section 7.

If you have an active paid subscription, cancel it before deleting your account, or see our Refund and Cancellation Policy. If you would prefer we handle deletion for you, email privacy@youtubewriter.com.

9. How We Protect Information

We maintain technical and organizational measures appropriate to the risk, including:

• encryption of traffic in transit using TLS, both between your browser and the Service and between the Service and its providers;
• passwords stored only as salted, computationally expensive hashes, never in readable form;
• authentication and authorization checks enforced on every request, with session tokens that expire and can be revoked;
• rate limiting and abuse protection on sensitive endpoints;
• access to production data restricted to those who need it, with privileged actions recorded;
• security headers, including protections against clickjacking and content-type sniffing.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your password confidential and your device secure. If we become aware of a personal data breach affecting you, we will notify you and any applicable regulator where required by law and within the timeframes the law prescribes.

10. International Transfers

We operate from the United States and our providers may process information in the United States and other countries. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection law may differ from that of your own country.

Where we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland, we rely on an appropriate transfer mechanism, such as the European Commission Standard Contractual Clauses together with the UK International Data Transfer Addendum where applicable, supplemented by technical measures including encryption in transit. You may request further information about these safeguards using the contact details in Section 16.

11. Children

The Service is intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 13 years of age, or under 16 where a higher age applies in your jurisdiction.

If you believe a child has provided us with personal information, contact privacy@youtubewriter.com and we will delete the account and the information promptly.

12. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights. We honour these requests for all users wherever we reasonably can, regardless of where you live.

• Access. Ask what personal information we hold about you and get a copy.
• Correction. Ask us to correct inaccurate or incomplete information. You can edit most of it yourself in your account settings.
• Deletion. Ask us to delete your personal information, subject to the retention exceptions in Section 7.
• Portability. Receive the information you provided in a structured, commonly used, machine-readable format.
• Restriction and objection. Ask us to restrict processing, or object to processing based on legitimate interests.
• Withdraw consent. Where we rely on consent, withdraw it at any time. This does not affect processing already carried out.
• Opt out of marketing. Unsubscribe from optional product email at any time using the link in the message. We will still send transactional email needed to operate your account.
• Non-discrimination. We will not deny you service, charge you a different price or give you a lower quality of service for exercising these rights.

How to exercise your rights

Email privacy@youtubewriter.com from the address on your account, or contact us at the postal address in Section 16. We will respond within the period the applicable law requires, generally within 30 days for United States state privacy laws and within one month under the GDPR, and will tell you if we need an extension. We may need to verify your identity before acting, and will not use verification information for any other purpose.

Authorized agents

You may use an authorized agent to submit a request on your behalf. We may require written proof of the agent’s authority and may still ask you to verify your own identity directly.

If you are in the EEA, the UK or Switzerland

You have the right to lodge a complaint with your local supervisory authority, or with the Information Commissioner’s Office in the United Kingdom. We would appreciate the chance to address your concern first.

If you are in the United States

Several states, including California, Colorado, Connecticut, Virginia, Texas and Florida, give residents rights over their personal information. Where those laws apply to us, we honour the rights described above. For clarity, in the preceding 12 months we have not sold personal information, and we have not shared personal information for cross-context behavioural advertising or targeted advertising. We do not process personal information for profiling in furtherance of decisions producing legal or similarly significant effects. If a state law gives you a right to appeal a decision on your request, you may appeal by replying to our response, and we will inform you of the outcome and of your right to contact your state attorney general.

Do Not Track and Global Privacy Control

We do not track users across sites or serve targeted advertising, so there is no cross-site tracking to disable. Our analytics are nonetheless configured to respect the Do Not Track signal: if your browser sends Do Not Track, no analytics event is recorded for your visit. Section 5 explains how to opt out regardless of that setting.

13. Cookies

We use strictly necessary cookies only, to keep you signed in. We do not use advertising, analytics or social media cookies — our analytics are cookieless. Full details, including the specific cookies set, the one analytics storage key used, and how to control them, are in our Cookie Policy.

14. Third-Party Sites

The Service may link to websites we do not operate. This Policy does not apply to them. We are not responsible for their content or privacy practices, and we encourage you to read their policies before providing them with information.

15. Changes to This Policy

We may update this Policy to reflect changes in the Service, our providers, or the law. When we do, we will revise the "Last updated" date at the top of this page.

If a change materially affects how we handle information we already hold about you, we will give you reasonable advance notice by email to the address on your account or by a prominent notice in the Service, and where the law requires it, we will ask for your consent.

16. Contact Us

For any privacy question or to exercise your rights, email privacy@youtubewriter.com.

Or write to us at:

For questions about our Terms, email legal@youtubewriter.com. For general help, email support@youtubewriter.com.