Privacy & data · Draft

This notice describes a private test implementation. Operator-specific legal review is required before commercial use.

Identity

Sites supplies the authenticated workspace identity. The standalone VPS can instead use managed accounts with salted scrypt password hashes and signed sessions. The server isolates records and files by authenticated identity. No YouTube password is requested. Optional channel OAuth refresh tokens are encrypted.

Research and video analysis

Public channel/video metadata is requested through the YouTube Data API. API research and video analyses expire after 25 days. Supplied TXT/SRT/VTT transcripts and authorized MP4 uploads may be stored privately. Uploaded MP4 audio is transcribed by the configured local Whisper service; temporary transcription files are removed afterwards. If explicitly enabled, the renderer extracts bounded frame samples with actual presentation timestamps. A separate free vision call can inspect these samples. Continuous video and scene boundaries are not asserted. No YouTube downloading or transcript scraping is performed.

AI processing

Requested channel and video analyses, metadata, transcripts, profile instructions and draft text are sent through OpenRouter to the selected free provider. Draft generation may query PubMed/Europe PMC abstracts. Image generation uses the configured image provider; optional Short rendering sends prompts and narration to the private renderer and configured Fish Audio service. Provider processing locations, retention and international transfers must be reviewed before launch. No claim of completed GDPR compliance is made.

Billing

Stripe sandbox subscriptions and credit purchases, optional PayPal sandbox credit purchases, invoices, cancellations and refunds are implemented. Test payments are not real revenue. Stripe handles payment details; TrendLoom stores payment references, sandbox subscription status, credit reservations, ledger events and cost/usage records. Uncertain provider submissions retain reserved credits until reconciliation.

Account email and security

Optional self-service VPS accounts use email verification and one-time recovery links. Configured transactional mail is sent through Resend from an encrypted outbox. Sent payloads are removed; delivery records expire after seven days. Admin access requires configured TOTP in multi-user mode unless explicitly disabled for a controlled test. Public cancellation declarations are stored for operator processing and can be saved immediately without signing in.

Your controls

The dashboard provides account export and deletion. Deletion requires active/uncertain jobs and recurring subscriptions to be closed, removes saved work/media and disables managed accounts. A minimal deletion marker prevents old sessions and in-flight requests recreating data. Provider-side deletion, legally required accounting retention and backup expiry require an operator procedure. Disconnect YouTube in the studio to remove stored connection credentials.

External services and publication

Hosting may use Sites or a separately operated VPS. Opening original videos or loading YouTube thumbnails contacts Google. Generated and analyzed text requires editorial and rights review. YouTube publication remains a separate reviewed action with explicit visibility controls.

YouTube Terms · Google privacy · Operator details to complete · Test terms