Privacy Policy — skathi.ai

Skathi accesses your YouTube data only through Google's official OAuth and the YouTube Data API, using one permission (youtube.force-ssl). We protect this data as follows:

1. Encryption in transit. All data between your browser, our servers, Google and our service providers is sent over HTTPS (TLS).
2. Encryption at rest. Your data, including OAuth access and refresh tokens, is stored in our hosting provider's database, which encrypts data at rest.
3. Tokens stay on the server. OAuth tokens are used only by our backend functions to call the YouTube API. They are never sent to your browser, never shown in the app and never shared with anyone.
4. Access control. Each account can only access its own data. Database rules block access to other users' records. Only a limited number of Skathi administrators can access the production systems, and only to provide support or fix problems.
5. Minimum data. We request only the permission needed to read comments on your own videos and post the replies you approve. Skathi has no feature that edits or deletes your videos.
6. AI processing. To draft a reply, we send the text of the comment and your Strategy profile to our AI provider (Anthropic). This data is used only to generate your reply. It is not used to train generalized AI or machine learning models, is not sold and is not used for advertising.
7. Revoking access. When you disconnect a channel in Profile, Skathi deletes the stored tokens and revokes its access in your Google account. You can also remove Skathi at any time at https://myaccount.google.com/permissions.
8. Deletion. You can ask us to delete your account and all related data by writing to support@skathi.ai. We delete it within 30 days.
9. Security incidents. If we learn about a security incident that affects your data, we will notify affected users without undue delay.

Google API Services: Skathi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements (https://developers.google.com/terms/api-services-user-data-policy).

The data controller is Video Concierge sp. z o.o., ul. Smolna 8/3, 61-008 Poznań, Poland, KRS 0001219124, NIP (tax ID) 7831946485, REGON 543801550. Contact: support@skathi.ai.

• Full name and email address (provided at sign-up)
• YouTube channel URLs connected to your account
• History of AI-generated comments and replies
• Subscription and billing data (processed by Stripe)

• Providing Service functionality (Art. 6(1)(b) GDPR)
• Processing payments (Art. 6(1)(b) GDPR)
• Transactional email communications (Art. 6(1)(f) GDPR)
• Product updates, tips and offers sent to registered users by email, with a one-click unsubscribe link in every message (Art. 6(1)(f) GDPR, legitimate interest in informing existing customers)
• Analytics and service improvement (Art. 6(1)(f) GDPR)

Your data may be shared with:

• Stripe Inc. — payment processing
• Base44 — application hosting
• YouTube API (Google) — channel and video data
• Anthropic — AI processing of comment text and channel context to generate reply suggestions. Data is not used to train generalized AI models.

We do not sell your personal data.

We retain your data for as long as you use the Service. Upon account deletion, data is removed within 30 days.

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing

Contact: support@skathi.ai

We use essential cookies for authentication sessions. We do not use marketing or tracking cookies.

We will notify you of any material changes to this Privacy Policy by email.

Skathi connects to your YouTube channel through Google OAuth using the scope https://www.googleapis.com/auth/youtube.force-ssl.

• What we access: your channel name and ID, your videos' titles, comments and comment threads on your videos, public statistics of your videos (views, likes, comment counts) for the video insights feature, and the replies you choose to publish.
• How we use it: to display your comments in Skathi, to generate draft replies, and to publish a reply to YouTube only when you click Post as owner. We do not post, edit or delete anything without your action.
• AI processing: the text of a comment and your channel profile are sent to our AI provider (Anthropic) only to generate a draft reply. This data is not used to train generalized AI or machine learning models. Documents you upload about your business are processed by our AI providers (Anthropic and our hosting platform's built-in AI) only to create your company brief. They are not used to train AI models.
• Storage: comments and replies are stored in our database to show your history. OAuth tokens are stored encrypted and used only to call the YouTube API on your behalf.
• Sharing: we do not sell Google user data, do not use it for advertising, and do not share it with third parties except the AI provider named above, strictly to deliver the feature you use.
• Retention and deletion: when you disconnect your channel we delete your stored tokens immediately. When you disconnect a channel, we delete all comments and other YouTube data from that channel. Data received from the YouTube API is refreshed or deleted at least every 30 days. You can request deletion of all your data at support@skathi.ai; we complete it within 30 days. You can also revoke Skathi's access at any time at https://myaccount.google.com/permissions.

Skathi's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Skathi uses YouTube API Services. By connecting your channel you agree to the YouTube Terms of Service. Google's Privacy Policy applies: https://policies.google.com/privacy.