Zero Transcript Retention // Security Architecture

Privacy Policy

Last updated: November 1, 2026

1. Data We Collect

Account Email & Authentication Method: When you sign in via Email 6-digit verification code, Google Sign-In, or GitHub OAuth, we store your verified email address and deterministic account identifier to maintain your daily free allowance and paid credit balance.
YouTube Video Metadata & Subtitles: Sent over HTTPS only when you explicitly click the extension button or shortcut on a YouTube video.
Billing & Transaction Identifiers: Payments are processed by Paddle.com as our Merchant of Record. We store Paddle transaction IDs and credit grant amounts, never your payment card details.

Zero Transcript Storage: Video captions and generated Markdown notes are processed transiently in memory using the Google Gemini API with server-side interaction logging disabled (store=False). Neither transcripts nor notes are persisted on our servers.
Account & Credit Records: Daily free usage counters (expiring after 7 days) and non-expiring credit balances are stored in Google Cloud Firestore.
Local Vault Preferences: Your chosen Obsidian folder handle and preferred subtitle languages remain locally on your device.

Google Cloud Platform & Gemini API: API hosting, Firestore wallet storage, and transient prose formatting.
Resend: Transactional delivery of 6-digit email sign-in codes.
Paddle: Payment processing, invoicing, and sales tax / VAT compliance as Merchant of Record.

We never sell, rent, or use your data for advertising. To request account deletion or ask privacy questions, email support@youtubeobsidian.com.