Privacy Policy
Effective October 21, 2026
The short version
- We collect what we need to run your account, take payment and produce your exports. We don't sell it.
- The videos you research are public YouTube videos. We don't access your own YouTube or Google account data beyond your name, email and profile photo at sign-in.
- Finished files are deleted automatically after 7 days.
- You can delete your account and everything in it at any time from Credits & billing.
This policy explains how ExportYT ("ExportYT", "we", "us") handles personal information when you use exportyt.com and api.exportyt.com (the "Service"). ExportYT is operated from California, United States. Questions go to support@exportyt.com.
What we collect
Account information
- From Google sign-in: your name, email address and profile photo URL, plus the sign-in tokens Google issues. We request only the basic profile and email scopes. We never see your Google password.
- Session records: the IP address and browser user agent tied to each sign-in session, used to keep you signed in and to spot abuse.
Billing information
Payments are processed by Stripe. We store your Stripe customer ID, your plan, your credit balance and a history of credit purchases, exports and refunds. Card numbers and bank details go directly to Stripe; we never see or store them.
What you export
We store the YouTube links you submit, the options you choose, the status of each export and the files we produce. Those files contain public information about the video, such as its title, statistics, tags, description, chapters, transcript-based notes, and public comments with their author display names. If you describe your channel when you make a video brief, we store that sentence with the export and send it to our AI provider to tailor the brief. When you scan a channel for outliers, we keep which channels you scanned and when, to show your recent scans and limit how many run per hour. If you watch channels or add your own channel, we keep that list until you remove a channel or delete your account. When you brief a video from a channel scan, its view numbers and a few of the channel's other titles are sent to our AI provider along with the video.
Product analytics
We may use PostHog to understand how the Service is used, for example which export types are popular or where a checkout was abandoned. When it is enabled, it records page views and interactions tied to your account ID. We don't use advertising trackers.
How we use it
- To sign you in, keep your account secure and prevent abuse.
- To produce your exports and keep them in your vault.
- To process payments, keep an accurate credit balance and refund failed exports.
- To answer support requests and send messages about your account or payments.
- To fix problems and improve the Service.
- To meet legal, tax and accounting obligations.
We do not sell or rent personal information, and we don't share it for cross-context behavioral advertising.
Who processes data for us
We rely on these service providers, each of which handles data only to provide its service to us:
| Provider | What it does | Data involved |
|---|---|---|
| Cloudflare | Hosting, database, file storage, job queue | All Service data |
| Stripe | Payments, subscriptions, receipts | Name, email, payment details |
| Google (Sign-In) | Sign-in | Name, email, profile photo |
| Google (YouTube Data API) | Public video statistics and details | The video links you submit |
| Google (Gemini API) | AI notes, summaries, sentiment and video briefs | Public transcripts, comments, thumbnails and video details, plus the channel description you type for a brief |
| Apify | Collecting public transcripts and comments | The video links you submit |
| PostHog (if enabled) | Product analytics | Account ID, usage events |
We may also disclose information if required by law, to protect the rights and safety of users or the Service, or as part of a merger or sale of the Service, in which case this policy continues to apply.
YouTube API Services
ExportYT uses YouTube API Services to read public information about the videos you submit. By using ExportYT you also agree to the YouTube Terms of Service, and Google's handling of data is described in the Google Privacy Policy. ExportYT does not access your YouTube account. If you signed in with Google, you can remove ExportYT's access at any time from your Google Account connections page.
How long we keep it
- Export files: deleted automatically 7 days after they are created. Temporary working data from an export is deleted within a day.
- Account, export history and credit history: kept while your account exists, and deleted when you delete your account.
- Payment records at Stripe: kept by Stripe as required for tax, accounting and fraud prevention, even after your account is deleted.
- Server logs: kept for a short period, typically a few days, for debugging and security.
Cookies
We use a cookie to keep you signed in. It is essential to the Service and is not used for advertising. If product analytics are enabled, PostHog also stores an identifier in your browser. The site remembers small preferences, such as whether the sidebar is collapsed, in your browser's local storage.
Your choices and rights
- Delete your account: go to Credits & billing and choose Delete account. This cancels any subscription immediately, deletes your files, and removes your account, export history and credit history.
- Access or correct your data: email support@exportyt.com and we'll respond within 30 days.
- Residents of California, the EEA, the UK and other places with privacy laws may have additional rights, such as to know, access, correct, delete or port their information, and to object to or restrict certain processing. We honor these requests and won't treat you differently for making one. You may also complain to your local data protection authority.
Where the GDPR applies, we process your information to perform our contract with you (running your account, exports and payments), for our legitimate interests (security, preventing abuse, improving the Service), and to comply with legal obligations. Our providers may process data in the United States and other countries; where required, transfers rely on safeguards such as the EU Standard Contractual Clauses.
Security
Data is encrypted in transit, sign-in is handled by Google, download links are signed and expire, and access to production systems is limited. No system is perfectly secure, so please keep your Google account protected with a strong password and two-step verification.
Children
ExportYT is not directed to children and is not for anyone under 13. If you believe a child has created an account, contact us and we'll delete it.
Changes
If we change this policy we'll update the date above, and for significant changes we'll let account holders know by email or in the app before the change takes effect.