Privacy Policy

Effective January 12, 2026

At ekstrakt, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using ekstrakt, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use our Service.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

  • Account Information: Email address, name, and password when you create an account
  • Profile Information: Any additional information you add to your profile
  • Payment Information: Billing details and payment method information (processed securely by our payment providers)
  • Communications: Information you provide when contacting us for support

1.2 Information Collected Automatically

When you use our Service, we automatically collect certain information, including:

  • Usage Data: Videos you summarize, summary types you use, and feature interactions
  • Device Information: Device type, operating system, browser type, and unique device identifiers
  • Log Data: IP address, access times, pages viewed, and referring URLs
  • Cookies and Similar Technologies: Information collected through cookies, pixels, and similar technologies

1.3 Information from Third Parties

If you sign in using a third-party service (such as Google or Apple), we receive certain profile information from that service, such as your name and email address, as permitted by your privacy settings on that service.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Process transactions and manage your subscription
  • Send you technical notices, updates, and support messages
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent transactions and abuse
  • Personalize and improve your experience
  • Comply with legal obligations

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party vendors who provide services on our behalf, as detailed in Section 8 (Third-Party Services).

3.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit and at rest (AES-256)
  • Secure authentication mechanisms
  • Regular security assessments and audits
  • Access controls and employee training
  • Secure data centers with physical security measures

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our Service and maintain your account
  • Comply with legal obligations
  • Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

6.1 Access and Portability

You can access and download your personal data through your account settings, or by contacting us.

6.2 Correction

You can update your account information at any time through your profile settings.

6.3 Deletion

You can request deletion of your account and personal data. Some information may be retained as required by law.

6.4 Opt-Out

You can opt out of promotional emails by clicking the unsubscribe link in any email or updating your notification preferences.

6.5 CCPA Rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

  • Right to know what personal information we collect
  • Right to delete your personal information
  • Right to opt out of the sale of personal information
  • Right to non-discrimination for exercising your rights

We do not sell personal information.

6.6 GDPR Rights

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including:

  • Right to restrict processing of your data
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

7. Cookies and Local Storage

We only use essential cookies and browser local storage to keep you signed in to your account and ensure the Service functions properly. These are strictly necessary for the operation of our Service.

We do not use cookies for analytics, advertising, or tracking purposes.

8. Third-Party Services

Our Service integrates with and relies on third-party services. We encourage you to review their privacy policies:

8.1 Video Content

We process publicly available YouTube video content for summarization. See Google Privacy Policy.

8.2 Authentication

We use third-party authentication providers for sign-in:

8.3 AI Services

We use AI services to generate video summaries:

8.4 Payment Processing

We use third-party payment processors for subscription management:

8.5 Email Services

We use Mailjet for transactional emails. See Mailjet Privacy Policy.

9. Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws than your jurisdiction.

When we transfer data internationally, we implement appropriate safeguards to protect your information, including standard contractual clauses approved by relevant authorities.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Effective" date at the top
  • Sending you an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, your personal data, or would like to exercise your rights, please contact us at privacy@ekstrakt.app.