Privacy Policy

Effective September 20, 2026

At ekstrakt, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using ekstrakt, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use our Service.

"Service" means all ekstrakt products: the website at ekstrakt.app, the ekstrakt API at api.ekstrakt.app, and the ekstrakt: YouTube Summarizer Chrome extension (extension ID helddfohpjmbnafnfnmfillfihhnkkdn). Section 11 describes the browser extension specifically, including our Limited Use commitments for data received from Google.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

  • Account Information: Email address, name, and password when you create an account
  • Profile Information: Any additional information you add to your profile
  • Payment Information: Billing details and payment method information (processed securely by our payment providers)
  • Communications: Information you provide when contacting us for support

1.2 Information Collected Automatically

When you use our Service, we automatically collect certain information, including:

  • Usage Data: Videos you summarize, summary types you use, and your remaining credit balance, so we can apply quotas and show your history
  • Session Security Data: The IP address and browser user agent recorded against each sign-in session, so unrecognized sessions can be identified and revoked
  • Log Data: Server logs of requests, including access times, request paths and error details

We do not use advertising identifiers, tracking pixels, device fingerprinting, or third-party analytics or advertising software anywhere in the Service.

1.3 Information from Third Parties

If you sign in using a third-party service (such as Google or Apple), we receive certain profile information from that service, such as your name and email address, as permitted by your privacy settings on that service.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Process transactions and manage your subscription
  • Send you technical notices, updates, and support messages
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent transactions and abuse
  • Personalize and improve your experience
  • Comply with legal obligations

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party vendors who provide services on our behalf, as detailed in Section 8 (Third-Party Services).

3.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit and at rest (AES-256)
  • Secure authentication mechanisms
  • Regular security assessments and audits
  • Access controls and employee training
  • Secure data centers with physical security measures

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our Service and maintain your account
  • Comply with legal obligations
  • Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

6.1 Access and Portability

You can access and download your personal data through your account settings, or by contacting us.

6.2 Correction

You can update your account information at any time through your profile settings.

6.3 Deletion

You can request deletion of your account and personal data. Some information may be retained as required by law.

6.4 Opt-Out

You can opt out of promotional emails by clicking the unsubscribe link in any email or updating your notification preferences.

6.5 CCPA Rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

  • Right to know what personal information we collect
  • Right to delete your personal information
  • Right to opt out of the sale of personal information
  • Right to non-discrimination for exercising your rights

We do not sell personal information.

6.6 GDPR Rights

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including:

  • Right to restrict processing of your data
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

7. Cookies and Local Storage

We only use essential cookies and browser local storage to keep you signed in to your account and ensure the Service functions properly. These are strictly necessary for the operation of our Service.

We do not use cookies for analytics, advertising, or tracking purposes.

8. Third-Party Services

Our Service integrates with and relies on third-party services. We encourage you to review their privacy policies:

8.1 Video Content

We process publicly available YouTube video content for summarization. See Google Privacy Policy.

8.2 Authentication

We use third-party authentication providers for sign-in:

8.3 AI Services

We use AI services to generate video summaries:

8.4 Payment Processing

We use third-party payment processors for subscription management:

8.5 Email Services

We use Mailjet for transactional emails. See Mailjet Privacy Policy.

9. Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws than your jurisdiction.

When we transfer data internationally, we implement appropriate safeguards to protect your information, including standard contractual clauses approved by relevant authorities.

11. Browser Extension Disclosures

This section explains how the ekstrakt browser extension collects, handles, stores and shares user data. It applies in addition to the rest of this policy.

11.1 Collection

The extension is active only on YouTube video pages. On a video you choose to summarize, it collects the video's address and its public details, the video's publicly available captions, the summary type you pick and the question you type. If you are signed in, it also uses your account details as described in Section 1.

The extension does not collect your browsing history, and it does not read other websites, other tabs, your YouTube account, your watch history, or any video you have not asked it to summarize. It collects no health, financial or location data.

11.2 Handling

We use this information for one purpose: producing the transcript or summary you asked for, and applying your account's credits and language preference. We do not use it to build advertising profiles, and the extension contains no advertising, analytics or tracking software.

11.3 Storage

Your signed-in state and basic account details are kept on your own device so you do not have to sign in each time. They are removed when you sign out or uninstall the extension. Summaries and transcripts you generate while signed in are saved to your ekstrakt account so you can find them again, and are retained as described in Section 5.

11.4 Sharing

We do not sell data collected by the extension, and we do not share it with advertisers or data brokers. We share the video's captions, and your question where you ask one, with the AI providers listed in Section 8 so we can generate your summary. We do not send your name, email address or payment details to those providers.

11.5 Limited Use of Google User Data

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

In particular, we use this data only to provide user-facing features of the extension. We do not transfer it except as needed to provide those features, comply with applicable law, or as part of a merger or acquisition. We do not use it for advertising of any kind, and we do not allow humans to read it unless you give us permission, it is needed to investigate abuse or a security issue, it is required by law, or the data has been aggregated and anonymized.

The only Google user data ekstrakt receives is the email address and name on the Google account you choose to sign in with.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Effective" date at the top
  • Sending you an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, your personal data, or would like to exercise your rights, please contact us at privacy@ekstrakt.app.