This Privacy Policy explains what personal data YTSummarAI ("Service") collects, why, with whom we share it, and the rights you have. The data controller is Dyptan Oleksandr (individual entrepreneur, Ukraine), reachable at support@ytsummarai.xyz.
1. Data we collect
1.1 From your use of the Telegram bot
Telegram identifiers: chat ID, user ID, language code, optional first name / username — provided to us by Telegram so the bot can route messages back to you.
YouTube URLs you send and the resulting AI summaries, transcripts and tags you assign to them.
Custom prompts you save per channel.
Bot interaction events (timestamps, commands used, settings changes, errors) for service operation and debugging.
1.2 From the web (landing and public summary pages)
Standard server logs (IP address, user agent, timestamps) processed by our reverse proxy. Logs are retained for up to 30 days and used only for security and debugging.
Google Analytics 4 for aggregate traffic measurement, with IP anonymisation enabled. You can opt out via browser settings or extensions like Google's official opt-out add-on.
Locale preference cookie (ytsx_lang) — remembers whether you prefer the Ukrainian or English version of the landing page. No third party reads it.
1.3 From your subscription
If you purchase a Pro subscription, payment data (card details, billing address, tax information) is collected by Lemon Squeezy Inc. as Merchant of Record. We receive only a subscription identifier, plan, status, billing period and an obfuscated customer ID — never your card number. See Lemon Squeezy's privacy policy.
2. How we use your data
To provide the Service: fetch the YouTube transcript, generate the summary, deliver it to your Telegram chat, retrieve it later when you ask.
To enforce free / Pro quota and detect abuse.
To process payments and respond to support requests.
To monitor errors (Sentry) and improve performance.
To communicate operational notices (e.g. price changes, downtime).
We do not sell your data. We do not use your messages or summaries to train AI models.
3. Subprocessors
We share data with the third parties below strictly as needed to operate the Service:
Some of the subprocessors above are located outside Ukraine and outside the EU/EEA. Where applicable, transfers are protected by the providers' Standard Contractual Clauses or equivalent safeguards.
5. Retention
Telegram chat data, summaries, tags: retained while your account is active. You can ask for full deletion at any time.
Server logs: up to 30 days.
Sentry error events: 30 days.
Subscription billing records: as long as required by tax law (typically 7 years), held by Lemon Squeezy.
Off-site database backups: 30 days rolling.
6. Your rights
You have the right to:
access the personal data we hold about you;
correct inaccurate data;
delete your data ("right to be forgotten") — type /stop and /delete to the bot or email us;
export your summaries in machine-readable form;
object to or restrict processing;
lodge a complaint with the Ukrainian Personal Data Protection Authority or with your local supervisory authority in the EU/EEA.
To exercise any of these rights, email support@ytsummarai.xyz. We respond within 30 days.
7. Children
The Service is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
8. Cookies
The landing page uses two cookies:
ytsx_lang (1-year, first-party): remembers your language preference.
Google Analytics cookies (_ga, _ga_*): aggregate traffic measurement, IP-anonymised.
Public summary pages may load additional analytics cookies. The bot itself does not set cookies. You can clear or block cookies in your browser at any time.
9. Security
We use HTTPS everywhere, encrypted database backups, container-level isolation and per-user authorisation checks. We do not store payment card numbers — Lemon Squeezy handles all card data on their PCI-DSS compliant infrastructure. No system is perfectly secure; if you suspect a security issue, email us immediately.
10. Changes
We may update this Policy. Material changes will be announced inside the bot and on this page. The "Last updated" date at the top reflects the current version.