Privacy Policy

1. Information we collect

1.1 Information you give us

• Account information: your email address, password (stored securely by our authentication provider, never in plain text), and any name you provide.
• Content you create or upload: thumbnails you upload for critique, saved searches, boards, board items, notes, tags, watchlists and generated titles or hooks.
• Messages: information you send through our contact form or by email, such as your name, email address and message.
• Billing information: your plan, billing period and subscription status. Payments are processed by Stripe. We do not see or store your full card number.

1.2 Information collected automatically

• Usage information: the features you use, searches you run, usage counts against your plan limits, and timestamps.
• Technical information: IP address, browser type, device type and similar log data, used for security, rate limiting and troubleshooting.
• Cookies and local storage: see section 10.

1.3 Information from third parties

• YouTube: public data about YouTube videos and channels obtained through YouTube API Services (see section 8).
• Stripe: payment status and subscription details.

2. How we use your information

We use personal information to:

1. (a)create and manage your account and provide the Service;
2. (b)run searches, critiques, title and hook generation, boards and watchlists;
3. (c)process payments, manage subscriptions and trials, and send receipts;
4. (d)apply plan limits, rate limits and fair-use protections;
5. (e)send service emails, such as weekly digests you turn on, billing notices and important changes, and send The Outlier Report only when you consent to it;
6. (f)respond to your enquiries and provide support;
7. (g)keep the Service secure, prevent fraud and abuse, and fix problems;
8. (h)understand how the Service is used and improve it; and
9. (i)comply with our legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Legal bases (EU and UK users)

If the GDPR or UK GDPR applies, we rely on:

• Contract: to provide the Service you signed up for (most of section 2).
• Legitimate interests: security, preventing abuse, improving the Service and responding to enquiries, where these are not overridden by your rights.
• Consent: for optional emails such as the weekly digest and The Outlier Report, and any non-essential cookies. You can withdraw consent at any time.
• Legal obligation: for tax, accounting and other legal requirements.

4. AI processing

When you use AI features, such as thumbnail critiques and title and hook generation, the relevant content (for example your uploaded thumbnail, reference thumbnails and your prompt) is sent to our AI provider, Anthropic, to generate the result. Anthropic processes this data on our behalf to provide the output. Under its commercial terms, Anthropic does not use this data to train its models. We do not make decisions that have legal or similarly significant effects on you based solely on automated processing.

5. Who we share information with

We share personal information only with service providers that help us run the Service, and only as needed:

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a sale or restructure of our business (in which case we will notify you).

6. International transfers

We are based in Australia, and our service providers may process data in the United States, the European Union and other countries. When we transfer personal information overseas, we take reasonable steps to ensure it is protected, including using providers with appropriate security and, for EU and UK data, relying on safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.

7. How long we keep information

• Account data and content you create: while your account is active. When you delete your account, we delete it within 30 days, except where we must keep it longer by law.
• Cached YouTube data: see section 8.3.
• Usage and security logs: up to 12 months.
• Contact messages: up to 24 months, unless related to an ongoing matter.
• Billing and tax records: as long as required by law (generally 5 to 7 years). These are mostly held by Stripe.

8. YouTube API Services

8.1 The Service uses YouTube API Services to retrieve public information about YouTube videos and channels. By using the Service, you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms).

8.2 Google's collection and use of data is governed by the Google Privacy Policy (https://policies.google.com/privacy).

8.3 What YouTube data we store and for how long:

• We store public YouTube data such as video titles, thumbnails, view counts, subscriber counts, channel names, publish dates and durations, along with scores we calculate from them.
• API responses are cached for a short time (usually 6 to 24 hours) to keep the Service fast and reduce repeat requests.
• YouTube data saved to your searches, boards or watchlists is refreshed or deleted so that it is not stored for more than 30 days without being refreshed. Your own notes, tags and statuses are kept.
• When you delete your account, we delete YouTube data associated with it.

9. Your rights and choices

9.1 You can:

• access, update or correct your account information in Settings;
• download a copy of your data using "Download my data" in Settings;
• delete your account and associated data using "Delete account" in Settings;
• turn off optional emails, such as the weekly digest, in Settings or via the link in each email; and
• contact us at hello@pimpmyviews.com with any privacy request.

Deleting your account cancels any active subscription immediately. See our Refund & Cancellation Policy.

9.2 Australian users: under the Australian Privacy Principles you may request access to or correction of your personal information. If you are unhappy with how we handle your complaint, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

9.3 EU and UK users: you have the right to access, rectify, erase, restrict or object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You can also lodge a complaint with your local data protection authority or, in the UK, the Information Commissioner's Office (ICO).

9.4 We will respond to requests within 30 days. We may need to verify your identity before acting on a request.

10. Cookies and similar technologies

We use essential cookies and local storage to keep you signed in, remember your preferences, and keep the Service secure. These are necessary for the Service to work and do not require consent. We do not currently use advertising or third-party tracking cookies. If we introduce analytics or other non-essential cookies, we will update this policy and ask for your consent where required.

11. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS), access controls, row-level security in our database, and restricting administrative access. No system is completely secure, so we cannot guarantee absolute security. If a data breach is likely to cause you serious harm, we will notify you and the relevant authorities as required by law.

12. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or in the Service before they take effect. The "Last updated" date shows when it was last changed.

14. Contact us

For privacy questions or requests, email hello@pimpmyviews.com or use our Contact page.

[LEGAL ENTITY NAME], Australia.