VIDEOudit Privacy Policy
This is a translation. If it differs from the Korean original, the Korean original prevails.
CHROMETI ("we" or "the operator") operates VIDEOudit (https://videoudit.com, including the Chrome extension "VIDEOudit Caption Companion", the "Service"). We follow the Personal Information Protection Act of Korea and other applicable laws, and we publish this policy to explain how we protect your personal information.
1. YouTube API Services
- The Service uses YouTube API Services.
- By using the Service you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms).
- The Google Privacy Policy (https://policies.google.com/privacy) also applies to information processed through YouTube API Services.
- Our use and transfer of information received from Google APIs to any other app follows the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including its Limited Use requirements.
- The Service is not affiliated with or endorsed by YouTube or Google.
2. Information we process and how we collect it
| Category | Items | How collected | Required |
|---|---|---|---|
| Email sign-up | Email address, password (stored as a non-reversible hash), name, language, date and version of the terms you accepted, date you confirmed being 14 or older, email verification date | You enter it on the sign-up screen | Name optional, the rest required |
| Google sign-in | Google account identifier, email address and whether it is verified, name, and at first sign-up the date and version of the terms you accepted and the date you confirmed being 14 or older | Received from Google when you sign in with Google; terms and age confirmation are collected on the sign-up screen at first sign-up | Required |
| Accounts issued by the operator | ID, password (hash), display name, email address | Entered by the operator when issuing the account | ID and password required |
| Account | Language, country, time zone and unit settings, plan, balances and grant/use/adjustment history of audit credits and AI View views | Created while you use the Service; you can edit settings | Required |
| Diagnosis material | Video URL, video title and channel name, scripts or captions with timing that you enter or import, description, tags, comments, chosen video type | Entered or imported when you request a diagnosis | Required to use diagnosis |
| Diagnosis results | Reports, date and plan of each diagnosis | Generated by the Service | Required |
| AI View | Video URL, YouTube information of public or unlisted videos (title, description, tags, public statistics such as views, public channel information, public comments), AI transcription and summary made by listening to the video | Retrieved through the YouTube Data API and Google Gemini API when you run AI View | Required to use AI View |
| Instagram Reels audit | The video file you upload (deleted right after analysis), its file name and length, the caption draft, hashtags and target search phrase you enter, and the audit result | Entered when you run the Reels audit | Required to use the Reels audit |
| Pre-upload check | The video file you upload (deleted right after analysis), its file name and length, thumbnail candidate images, title candidates, names that appear in the video and a caption file (if you provide them), the AI transcript and check result, and small screen captures your browser cuts from the video | Entered when you run the pre-upload check | Required to use the pre-upload check |
| Thumbnail analysis | Public YouTube thumbnail image (used for analysis only, not stored) | Fetched from YouTube's public image URL if you agree to thumbnail analysis | Optional |
| Thumbnail error reports | Your account identifier, report and judgment identifiers, reason, your note, date and handling status | When you submit an error report | Optional |
| YouTube channel connection | Channel ID and name, access and refresh tokens (encrypted), caption list and captions of your own videos | When you connect your channel with your Google account and import captions | Optional |
| Payments | Order number, product, amount and currency, payment and refund status and dates | Notified by our payment provider (Polar) when a payment or refund completes | Required to buy paid products |
| Partner referral | The partner code used at sign-up or checkout, when and how you were tied to that partner (link or typed code), and the discount code and rate applied to a payment | When you visit through a partner link or enter a code | Required where applicable |
| Partner accounts (Partner Network members) | Name, email address, channel address, password (stored as a non-reversible hash), language, date of accepting the terms, payout method and details, sign-in records, commission and payout records, daily click counts of the partner link (no information identifying visitors is collected) | Entered by us when registering the partner, and by the partner on their dashboard | Payout details required to be paid; others required |
| Usage and security records | Session information, last sign-in date, one-way hashes of IP address, email and ID and account identifiers used to limit sign-in attempts and sign-up requests, AI usage records (token counts, status), PDF download records, operator activity logs, support notes | Generated automatically or recorded by the operator | Required |
| Sign-up security check | IP address and browser and device signals used to prevent automated sign-ups | Processed by Cloudflare Turnstile on the sign-up screen | Required for email sign-up |
| Visit statistics | Page visit information (Google Analytics cookies); never scripts, reports or account details | Only if you consent to visit statistics | Optional |
| Chrome extension | URL, title, public captions and timing of the video you choose | When you run an import in the extension | Optional |
We do not collect:
- Your Google account password or Google sign-in cookies
- Card numbers or other payment method details. Polar processes them directly; we never receive them.
- Resident registration numbers
- Video or audio files. We do not download or store them. For AI View listening, Google processes the YouTube video directly and we receive only the resulting text. A video file you upload for the Reels audit or the pre-upload check is not stored by us; it is sent only to the Google Gemini API for analysis and we request its deletion as soon as the analysis ends (if that request fails, Google deletes it automatically within 48 hours).
3. Purposes of processing
- Sign-up, email verification, keeping you signed in, identity confirmation
- Preventing automated, duplicate or abusive sign-ups and use
- Generating, storing and providing diagnosis reports and AI View results, including PDFs
- Importing captions from your own YouTube channel when you ask
- Managing credits and views; processing payments and refunds for paid products
- Sending emails needed to use the Service (sign-up verification, password reset), answering inquiries, service notices
- (Optional) Improving the Service with visit statistics
- (Optional) Reviewing and answering thumbnail error reports you submit
We do not send advertising messages. We do not use your diagnosis material or data received from Google and YouTube to train AI models, use it for advertising, or sell it.
4. Use of Google and YouTube user data
- Permissions we request
- Google sign-in: openid, email, profile. Used only for sign-in and sign-up.
- YouTube channel connection: https://www.googleapis.com/auth/youtube.force-ssl. Used only to list and download captions of videos on your own channel. We never use it to edit or delete videos, captions or channel information, or to upload videos. Google requires this scope for caption downloads.
- Who sees the data: Only you, the user who authorized it. We never combine it with data of other users or channels.
- Human access: We do not view this data except with your explicit consent, when needed to investigate a security issue, or to comply with law.
- Transfers: Only to the AI processors listed in Section 6 to produce the diagnosis you request.
- Retention: Tokens are kept encrypted while the connection exists. Data received through YouTube API Services is refreshed or deleted within 30 days, and a channel connection unused for 30 days is disconnected and its tokens and channel information are deleted. Captions, descriptions and similar material that you review on screen and apply to a diagnosis yourself are kept with the report as diagnosis material you provided.
- Disconnecting: When you press "Disconnect" in the Service we revoke the Google token immediately and delete data received through the connection within 7 days. You can also revoke access at any time on the Google security settings page (https://myaccount.google.com/permissions); we detect the revocation on the next use or in the 30-day idle check and delete the connection, so related data is deleted within 30 days at the latest.
5. Retention periods
| Item | Retention |
|---|---|
| Account information and diagnosis reports | Until you close your account (account deletion); deleted within 7 days of a deletion request |
| Sign-ups whose email was never verified | 30 days after the sign-up request |
| Sign-up verification link / password reset link / Google sign-in check | 24 hours / 1 hour / 10 minutes |
| Sign-in session | 8 hours after sign-in |
| Sign-in attempt and sign-up request limits | 10 minutes to 1 hour |
| PDF download records | 1 hour |
| AI View results (YouTube public information and AI transcription) | Shared storage 24 hours; the member's own AI View record 30 days (deleted at once when the account is closed) |
| Instagram Reels audit results | The member's own record 30 days (deleted at once when the account is closed). Video files are not kept |
| Pre-upload check results (including transcript and screen captures) | The member's own record 30 days (deleted at once when the account is closed). Video files are not kept |
| Thumbnail error reports | 1 year after the report, or 7 days after an account deletion request, whichever comes first |
| AI usage and operator activity logs | 1 year |
| Support notes | Until account deletion |
| Data received through the YouTube channel connection | Refreshed or deleted within 30 days; deleted after disconnection if unused for 30 days; on disconnection see Section 4(6) |
| Payment and refund records, credit grant and adjustment records | 5 years (Korean Act on Consumer Protection in Electronic Commerce); kept without name or email after account deletion |
| Partner referral | Until the account is deleted; codes applied to payments are kept with the payment records for 5 years |
| Partner accounts | Deleted within 7 days of a deletion request after the partnership ends; commission and payout records are kept for 5 years without name or email, daily click counts for 2 years |
| Visit statistics (Google Analytics) | 2 months |
Where a law requires a longer retention period, we keep the information for that period.
6. Processors and international transfers
To provide the Service (perform our contract with you) we entrust processing to, and transfer information abroad to, the following. Required items are disclosed through this policy under Article 28-8(1)(3) of the Personal Information Protection Act; optional items are transferred only with your consent. All transfers happen over encrypted networks when you use the Service.
| Recipient | Country | Items | Purpose | Retention |
|---|---|---|---|---|
| Cloudflare, Inc. | United States and other Cloudflare data centers | All information processed by the Service, email recipient address and content, IP address and browser signals for the sign-up security check | Hosting and data storage, sending service emails, preventing automated sign-ups (Turnstile) | Until account deletion or the end of the contract |
| OpenAI OpCo, LLC | United States | Diagnosis material (video title, description, tags, comments, script, captions), AI View public information and transcription, thumbnail image (if you agree); never account information | Generating diagnosis reports and AI View interpretations | We ask that nothing be stored. OpenAI may keep data up to 30 days for abuse monitoring before deletion and does not use it for training |
| Google LLC (YouTube API Services) | United States | Video ID, similar-video search query (video title), OAuth tokens (when connecting a channel) | Retrieving public video information, thumbnails and captions; searching similar videos | Under Google's policies |
| Google LLC (Gemini API) | United States | Video URL (public or unlisted) and analysis request; video files, captions, hashtags and search phrases uploaded for the Reels audit; video files, thumbnail candidates, title candidates, names and caption files uploaded for the pre-upload check | Listening to and transcribing videos for AI View; the Reels audit; the pre-upload check | Under Google's policies |
| Google LLC (Google sign-in) | United States | Google sign-in request | Sign-in and sign-up | Under Google's policies |
| Polar Software, Inc. | United States | Order number, product, amount, email address; you enter payment method details directly with Polar | Payments, refunds and taxes for paid products (Polar acts as the seller) | Under Polar's policies and applicable law |
| Google LLC (Google Analytics) · optional | United States | Page visit information | Visit statistics | 2 months |
| Noembed (noembed.com) · optional | Outside Korea (the provider does not disclose its server location) | Video URL | Helping confirm video title and channel | Under the provider's policies |
- Recipient contacts: Cloudflare privacyquestions@cloudflare.com · OpenAI privacy@openai.com · Google https://support.google.com/policies/contact/general_privacy_form · Polar support@polar.sh · Noembed https://noembed.com
- If you do not want required items transferred abroad, you can ask to close your account; you will then be unable to use the Service.
- You can refuse optional items (thumbnail analysis, visit statistics, Noembed) and still use the other features.
7. Disclosure to third parties
We do not provide personal information to third parties except where a law requires it or you consent.
8. Deletion
- When the retention period ends or the purpose is achieved, we delete the information without delay (within 5 days).
- Electronic files are deleted so that they cannot be recovered.
- Information remaining in database recovery records is deleted after at most 30 days.
9. Your rights
- You may at any time request access, correction, deletion or suspension of processing of your personal information, and withdraw consent (visit statistics, thumbnail analysis, YouTube connection).
- How: the account settings screen (edit details, close account), the "Visit statistics" setting at the bottom of the page, the YouTube "Disconnect" button, or by email to help@chrometi.com (including account closure).
- We reply within 10 days of receiving a request. Account closure and deletion of data received through the YouTube connection are completed within 7 days.
10. Cookies and similar technologies
| Type | Purpose | Duration | How to refuse |
|---|---|---|---|
| Required | Sign-in session cookie | 8 hours | Browser settings (you cannot sign in without it) |
| Required | Google sign-in and channel connection check cookie | 10 minutes | Browser settings (Google sign-in will not work) |
| Required | Language setting cookie and local storage | 1 year | Browser settings |
| Required | Partner link cookie (stores only the partner code, for the discount and partner results) | 60 days | Browser settings (link discounts will not apply) |
| Required | Cookie for a discount code you entered | 30 days | Browser settings |
| Required | Partner sign-in session cookie (partners only) | 7 days | Browser settings |
| Optional | Google Analytics cookies and your visit-statistics choice | 2 months | Turn off "Visit statistics" at the bottom of the page at any time |
Google Analytics runs only with your consent. Advertising storage and Google signals are not used.
11. Security measures
- One-way password hashing; encrypted storage of Google tokens
- Verification and reset links are stored only as one-way hashes
- Encryption in transit (HTTPS)
- Separated administrator permissions and activity logs
- Limits on sign-in attempts and sign-up requests; automated sign-up prevention
- Least-privilege access
12. Children
The Service is not intended for children under 14. We confirm age at sign-up and delete without delay any account we learn belongs to a child under 14.
13. Automated decisions
Diagnosis results and AI View are reference information for improving videos. They are not automated decisions that significantly affect your rights or obligations under Article 37-2 of the Personal Information Protection Act. You can ask for an explanation of the method at help@chrometi.com.
14. Chrome extension
- The extension reads only the public captions with timing, URL and title of the YouTube video you choose, and sends them to the Service only with your consent.
- It never reads Google passwords, sign-in cookies, browsing history or information from other sites.
- Imported information is kept in temporary browser storage for at most 30 minutes and 5 items, and is cleared when applied, cancelled or when the browser closes.
- The extension has a single purpose: bringing captions into the Service.
15. Privacy officer
- Privacy officer: Albert Yoo (유일한)
- Contact: help@chrometi.com
- Send privacy questions, complaints or requests for remedy to the contact above.
16. Remedies (Korea)
- Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
- Personal Information Infringement Report Center (KISA): 118, privacy.kisa.or.kr
- Supreme Prosecutors' Office: 1301, www.spo.go.kr
- Korean National Police Agency: 182, ecrm.police.go.kr
17. Changes
We announce changes on the Service 7 days before they take effect. Changes that are unfavorable to you or significant are announced 30 days in advance, and we ask for your consent again where needed.
- Effective date: October 29, 2026
- Operator: CHROMETI · Privacy officer Albert Yoo (유일한) · help@chrometi.com