Privacy Policy

This Privacy Policy explains how Comment AI ("we", "us", "our") collects, uses, and protects your information when you use our website and services at commentai.online. We've written it in plain language because we think you deserve to actually understand it.

1. What we collect

When you create an account, we collect your name, email address, and an encrypted form of your password. When you use the service, we collect the public engagement data you ask us to analyze (such as a YouTube handle and its public comments), along with technical logs (IP address, browser type, pages visited) needed to operate the service.

We do not collect private messages, private posts, or any data behind a login on a third-party platform.

2. How we use it

• To provide the service you signed up for (video tips, reply generation, audience reports).
• To process payments through our payment provider (Stripe).
• To send you transactional email about your account.
• To improve the product based on aggregate, anonymized usage patterns.
• To comply with legal obligations.

We do not sell your personal data. We do not share it with advertisers for cross-site tracking.

3. Third parties we use

We use a small number of trusted service providers to run Comment AI:

• Google Firebase for authentication.
• Supabase for database and storage.
• Stripe for payment processing.
• Google Cloud / Gemini API for AI inference.
• YouTube API Services for fetching public video and comment data (see disclosure below).
• Google AdSense may serve ads on certain pages and may use cookies to personalize them. You can opt out at google.com/settings/ads.

4. YouTube API Services disclosure

Comment AI uses YouTube API Services to retrieve public information such as videos, channels, and comments on your behalf. By using Comment AI, you agree to be bound by the YouTube Terms of Service. Your use of any Google or YouTube personal data obtained through these APIs is also governed by the Google Privacy Policy.

We only access publicly available YouTube data and the minimum scopes necessary to provide the features you request. We do not sell YouTube user data, do not use it for advertising, and do not share it with third parties except as required to operate the service. Cached YouTube data is automatically refreshed and removed when no longer needed, and is fully deleted when you delete your account.

Revoking Google / YouTube access

You can revoke Comment AI's access to your Google or YouTube account at any time by visiting Google's security settings at myaccount.google.com/permissions, selecting Comment AI in the list of connected apps, and clicking Remove access. Once revoked, we will no longer be able to fetch new data on your behalf.

4. Marketing communications

By creating an account and providing your email address, you agree that we may send you promotional emails, product updates, special offers, and information about services that may be relevant to your interests. We may also use your email address to inform you about new features, partner products, and marketing campaigns. You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

5. Cookies

We use a small number of essential cookies to keep you signed in and remember your theme preference. We also use analytics cookies to understand how the site is used in aggregate. Advertising partners may set their own cookies as described above.

6. Data retention & account deletion

We keep your account data for as long as your account is active. When you delete your account, all of your data is permanently removed from our system — this includes your profile, saved favorites, generated replies, reports, video ideas, usage history, billing records linked to your account, and any other content tied to you. Deletion is irreversible. The only exception is information we are legally required to retain (for example, tax and invoicing records held by our payment provider), which is kept in isolated records and never used for any other purpose.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to certain processing. To exercise any of these rights, email info@commentai.online and we'll respond within 30 days.

8. Security

We use industry-standard encryption in transit (TLS) and at rest, password hashing, and access controls. No system is perfectly secure, but we take reasonable steps to protect your data and will notify affected users if we ever experience a breach that requires it.

9. Children

Comment AI is not intended for anyone under 13 (or 16 in the EU). We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we'll delete it.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you by email or by a prominent notice on the site before the changes take effect.

11. Contact

Questions about this policy? Email info@commentai.online.