ReplyYT Privacy Policy

Last updated: **November 2025**

ReplyYT (“we”, “our”, or “us”) provides tools that help YouTube Channel owners filter, analyze, and view AI suggestions for their YouTube comments. This Privacy Policy explains how we collect, use, store, and protect your data, **specifically detailing our practices concerning Google User Data in compliance with the Google API Services User Data Policy.**

1. Information We Collect and Access (Data Accessed)

A. Google Account Information (Stored)

When you sign in using Google OAuth, we collect your name and email address. These are stored securely in our database (Supabase) to identify your account and personalize your experience.

B. YouTube Data (Accessed, Not Stored)

ReplyYT accesses the following types of YouTube data, which are **essential for core functionality** but are **NEVER stored, persisted, or saved** on our servers beyond the immediate session needed to generate a suggestion. This access requires the OAuth scope: https://www.googleapis.com/auth/youtube.force-ssl.

  • **YouTube Comment Threads:** We access comment text, author details (display name, profile image), and metadata (like/dislike counts) for videos belonging to the authenticated user.
  • **YouTube Video Metadata:** We access basic video details (title, description, ID) to associate comments correctly.
  • **Channel Metadata:** We access the authenticated user's channel information (channel name, ID) to display the correct data.

We do not access, store, or process any other YouTube or Google data beyond what is explicitly listed above.

C. Analytics

We use Simple Analytics, a privacy-first analytics tool that collects no personal data and uses no cookies.

2. How We Use Your Information (Data Usage)

We are committed to using your data only to provide and improve the ReplyYT service. **We never sell, rent, or trade your personal data or your Google User Data.**

A. Usage of Google Account Information (Name & Email)

  • **Authentication:** To verify your identity when you sign in.
  • **Account Management:** To create, manage, and identify your unique user account within our database (Supabase).
  • **Service Communication:** To send essential service-related emails (e.g., account deletion confirmation, major policy updates).

B. Usage of YouTube Data (Comment Threads & Metadata)

  • **Core Functionality:** To fetch and display your YouTube comments and associated video/channel details on the ReplyYT dashboard.
  • **AI Analysis & Suggestion Generation:** The fetched comment threads are immediately processed by our AI model (temporarily, in-memory) to generate relevant filtering, analysis, and AI reply suggestions for your review.
  • **Data Minimization:** All YouTube data accessed is strictly used for the immediate request and is discarded once the AI processing is complete and the results are presented to the user. **No comment thread data or derived AI insights are stored persistently by ReplyYT.**

3. Google API Disclosure (Limited Use)

ReplyYT’s use of information received from Google APIs will adhere to the **Google API Services User Data Policy,** including the **Limited Use requirements.**

  • **No Transfer:** We will not transfer Google user data to others unless necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger/acquisition.
  • **No Selling:** We will not use or transfer the data to serve advertisements.
  • **No Human Review:** We will not allow humans to read the data, unless: (a) we have your affirmative agreement for specific messages, (b) it is necessary for security purposes (e.g. investigating abuse), (c) it is necessary to comply with applicable law, or (d) the data has been aggregated and anonymized.

4. Data Storage, Security & Third-Party Services

We store only your name and email in our secure **Supabase** database. YouTube data is **never stored**.

  • **Security:** All stored data is protected through **encryption at rest**, **encrypted connections (SSL/TLS)**, and **strict access control** (only necessary personnel can access production data).
  • **Third-Party Processors:**
    • **Supabase:** Secure database for storing name + email.
    • **BoostToad:** Feedback/widget integration (may collect non-personal interaction data).
    • **Simple Analytics:** Privacy-focused analytics (collects no personal data).

5. Data Retention

Your stored data (Name + Email) is retained until you request deletion. YouTube data accessed for analysis is never persisted and is deleted from our temporary memory immediately after the AI suggestion is generated.

6. Data Deletion

To delete your account and all stored personal data (Name & Email), please email a request to:
burgessmatthew002@gmail.com

7. Contact

For any privacy-related questions, contact us at:
burgessmatthew002@gmail.com