Privacy Policy

• Account information. Your email address, an optional display name, and either a securely hashed version of your password or — if you sign in with Google — the account identifier Google gives us along with your name and profile picture. We never receive your Google password, and we never store your password in readable form.
• What you submit for analysis. The links to public videos you ask us to analyse, and your analysis preferences, such as the language results should be produced in.
• Public content we process for you. To produce an analysis we retrieve publicly available information about the video you named: video details, comments and replies, the public display name, channel identifier and profile picture of each commenter, public like and reply counts, the timestamps the platform reports, and the video’s public captions where it has them.
• Usage and technical information. Which analyses your account started and their status, how much of your plan allowance you have used, and technical records such as error and performance logs needed to keep the Service working and secure. Your IP address is used momentarily to apply rate limits and is not stored in our database.
• Billing records. Payments are handled by our payment provider. We do not receive or store full payment card details. What we keep are billing records: the customer, subscription and plan identifiers issued by that provider, your subscription status and billing period, and a log of the billing events we receive, so your account lands on the plan you paid for.
• Messages you send us. If you contact support or use the in-app feedback form: your message, the topic you chose, the page you were on, a reply address if you give one, and any files you attach — attachments reach us as part of that message and are kept with it.

• to provide the Service and produce the analyses you request;
• to create and manage your account and sign you in;
• to apply plan allowances and usage limits;
• to process subscriptions and reconcile them with our payment provider;
• to keep the Service secure and prevent abuse and fraud;
• to diagnose problems and improve performance and usability;
• to answer support requests and send service-related email, such as verification and password-reset codes;
• to comply with legal obligations.

We do not use your information for advertising, and we do not build advertising profiles.

Producing an analysis involves automated processing services. Comment text and video caption text are sent to those services so that summaries, topic groupings, sentiment, relevance and translations can be generated. This is how the Service works; there is no version of an analysis that avoids it.

These services are used to produce your result, not to make decisions about you, and the results they produce are interpretations rather than verified facts.

An analysis belongs to the account that started it. Opening one requires being signed in to that account: a request from anyone else is refused, and is answered exactly as a request for an analysis that does not exist, so the link reveals nothing about whether it does. Passing the link to someone else does not give them access.

Only that account can cancel a run, and only that account’s allowance is spent on it. We do not publish analysis pages, and search engines are asked not to index them.

We use a small number of trusted providers to run the Service. They receive only what they need for their role, and only for that purpose:

• hosting and infrastructure;
• automated analysis services, as described in section 3;
• payment and billing — payments are processed by Paddle, which acts as merchant of record for purchases;
• sign-in, if you choose to sign in with Google, which tells us your account identifier, name, email and profile picture (see Google’s Privacy Policy);
• email delivery, for verification codes, password resets and support replies.

The public video and comment information we analyse is retrieved from the video platform’s official public interfaces. We use no analytics, advertising or tracking providers.

We do not sell your personal information and we do not share it for advertising. We share it only with the providers described above, when the law requires it or to respond to a valid legal request, to investigate fraud or protect the security of the Service and its users, and — if the Service is ever sold or transferred — with the acquiring party, subject to this policy.

We keep information for as long as reasonably necessary to provide the Service, maintain records, resolve disputes, enforce our terms and meet legal obligations.

In practice: account and billing records are kept while your account exists. Analyses and the public comment data they contain are kept indefinitely rather than on a schedule — this is also what lets a repeat request for the same video reuse an existing result instead of collecting it again. Nothing is deleted automatically. If you want information removed sooner, ask us and we will delete it.

We use reasonable technical and organisational measures designed to protect information, including hashing passwords, restricting access to production data, and keeping credentials out of the browser and out of logs. No service can promise perfect security, and we do not claim to.

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal information, and to receive a copy of it. You can also stop using the Service at any time.

There is no self-service delete button in the app yet. To exercise any of these rights, including deletion of your account and the analyses it started, contact us using the details in section 14 from the address on the account. If you are a commenter rather than a user and want a copy of your comment removed from an analysis, write to us the same way and tell us which video it was on.

We do not use cookies for analytics, advertising or tracking, and we set no cookies of our own. The app keeps a few things in your browser’s own storage so it can work: your sign-in token, your language choice and your light or dark preference persist on your device, while a link you pasted before signing in and any comments you shortlist last only until you close the tab. Of these, only the sign-in token is sent to us, and only to identify your account. Our payment provider’s checkout may set its own cookies while it is open.

The Service is not directed at children and is intended for people old enough to enter into a contract where they live. We do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.

We and our providers may process information in countries other than the one you live in, including outside your region. Where that happens, we take reasonable steps to ensure the information continues to be protected in line with this policy.

We may update this policy. When we do, the “Last updated” date at the top of this page changes, and we will give reasonable notice of material changes to registered users. Our Terms of Service apply alongside this policy.

Email commenterra.com@gmail.com, or use the feedback form in the app. We answer from the same inbox either way.