Privacy Policy

1. Services we rely on

Operating ChatCheckly involves trusted third-party providers. Depending on how you use the Service, data may be processed by:

• Supabase — authentication, database, and application backend. See Supabase's privacy policy.
• Google — when you sign in with Google (OAuth), Google processes data according to its policies. We may request access to YouTube-related scopes where needed for features you enable. See Google's privacy policy.
• Stripe — payment processing for paid plans. We do not receive your full card number; Stripe handles payment details. See Stripe's privacy policy.
• YouTube / Google APIs — to retrieve public comment and video metadata you ask us to analyze, in line with YouTube API Services User Data Policy and applicable terms.
• AI providers — where we offer AI features, comment or related text may be sent to model providers (for example Google AI / Gemini) to generate summaries, sentiment, or similar outputs. We configure processing to serve the feature you requested.

2. Data we collect

We may process:

• Account data — such as email address, name, and profile information from your identity provider when you register or sign in.
• YouTube-related data — video IDs, channel identifiers, and comment content or metadata you direct us to fetch or analyze for your workspace.
• Usage and product data — actions you take in the dashboard, preferences, subscription tier, and feature usage needed to run the Service.
• Technical data — IP address, browser type, device and log data, timestamps, and diagnostic information for security, abuse prevention, and reliability.
• Limited identifiers for free tools — when you use tools without an account, we may use technical measures (such as cookies or similar mechanisms) to enforce fair rate limits and protect the Service. These are not used for cross-site advertising.

3. How we use data

We use personal data to:

• Provide, maintain, and improve the Service and your account.
• Process subscriptions and payments through Stripe.
• Authenticate you and prevent fraud, abuse, and security incidents.
• Generate AI-assisted insights you request from comment and related content.
• Communicate with you about the Service, including transactional messages.
• Comply with law and enforce our terms.

Where required (for example in the EEA or UK), we rely on appropriate legal bases such as performance of a contract, legitimate interests (balanced against your rights), or consent when we ask for it.

4. Sharing and subprocessors

We share data with service providers who process it on our instructions (hosting, auth, payments, email delivery if used, AI inference, logging). We may disclose information if required by law, to protect rights and safety, or as part of a business transfer (for example a merger), subject to applicable law.

5. Retention

We keep data only as long as needed for the purposes above, including legal, accounting, and dispute-resolution needs. You may delete your account or request deletion where applicable; some records may be retained in anonymized or aggregated form, or where retention is required by law.

6. Security

We use administrative, technical, and organizational measures designed to protect personal data. No method of transmission or storage is completely secure; we encourage strong passwords and safe use of your Google account.

7. International transfers

Our providers may process data in countries other than your own. Where we transfer personal data from the EEA, UK, or Switzerland, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms when required.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, to data portability, and to object to certain processing. You may withdraw consent where processing is consent-based. To exercise these rights, contact us using details we publish on the Service. You may also lodge a complaint with your local data protection authority.

9. Children

The Service is not directed to children under the age where parental consent is required in your jurisdiction. We do not knowingly collect personal data from children in that context.

10. Cookies and similar technologies

We use cookies and similar technologies needed for authentication, session management, security, and basic Service functionality. You can control cookies through your browser settings; disabling some cookies may limit features.

11. Changes

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. For material changes, we will provide additional notice where appropriate.