Privacy Policy
Last updated: October 2, 2026 · Effective date: October 2, 2026
We take your privacy seriously. This policy explains exactly what data we collect, how we use it, and how you can control it. We will never sell your personal data.
1. Who We Are
VideoNoteGPT ("we", "our", "us") is an AI-powered lecture summarization platform. When you use VideoNoteGPT at videonotegpt.com, this Privacy Policy applies.
2. Data We Collect
| Data Type | What We Collect | Why |
|---|
| Account data | Email address, password (hashed) | Authentication and account management |
| Uploaded files | Audio/video files you upload for processing | To provide the transcription and summarization service |
| Usage data | Minutes processed, features used, timestamps | Enforce usage limits, improve the service |
| Payment data | Processed by Stripe — we never see your card details | Subscription billing |
| Support messages | Messages you send via the contact form | To respond to your support requests |
| Log data | IP address, browser type, request logs | Security, debugging, abuse prevention |
3. How We Use Your Data
- To process your uploaded files and generate AI summaries, transcripts, and quiz questions
- To manage your account, enforce usage limits, and process payments
- To send transactional emails (e.g., account verification, billing receipts)
- To improve our AI models and service quality (using anonymized, aggregated data only)
- To detect and prevent fraud, abuse, or security threats
- To comply with legal obligations
4. File Retention and Data Storage
We take file privacy seriously and enforce clear retention timelines:
- Uploaded recordings (video/audio) are automatically deleted from our servers within 24 hours of processing.
- Playing a recording back in the app: so you can jump to a timestamp, the app plays the file from a copy kept in your own browser for 24 hours at most. That copy stays on your device and is never uploaded again. You can remove it at any time with “Remove from this device”.
- Study Hub notes (transcripts, summaries, flashcards, cram sheets) remain in your Study Hub until you delete them or close your account.
- Guest notes generated without an account are retained for 30 days, after which they are automatically deleted.
- We do not use your uploaded content to train AI models, and we never sell it. It is shared only with the processors listed in section 5, only to produce the notes you asked for.
5. Data Sharing
We never sell your personal data. We share it only with the processors below, and only so the product can do what you asked it to:
- Groq Inc. — AI processing. Two things reach Groq: the audio track of your upload, compressed and sent to Groq's Whisper API to be transcribed, and text prompts built from your transcript for the summary, chapters, flashcards, quiz, chat, recap and any support message you send. Your original video file itself is not sent. Where our pages name Whisper, that is the speech model OpenAI created and published; we run it on Groq's servers, and OpenAI receives nothing from us.
- Google LLC — three separate things, which we keep separate on purpose:
- Analytics and advertising — Google Analytics, and Google AdSense when advertising is enabled. These receive your IP address and your browsing activity on our site. They never receive your lectures, transcripts or summaries. See section 6.
- Gemini API — where this fallback is configured, Google's Gemini API receives a single claim being fact-checked, or your message and the lecture context around it in the Socratic tutor, when Groq is unavailable.
- Gmail — the email we send you is delivered through Google's mail servers, including a summary you ask us to email to you.
- Stripe Inc. — payment processing. We never see your card details.
- Cloudflare, Inc. — where the YouTube caption proxy is configured, the video ID you submit and the caption text returned for it pass through a Cloudflare Worker.
- Hosting infrastructure — cloud server providers under appropriate data processing agreements
- Legal authorities — only when required by applicable law
6. Cookies, Analytics, Advertising and First-Party Attribution
We use browser storage for essential functions and privacy-respecting attribution:
- Maintaining your authentication session
- Remembering your preferences
- A randomly generated visitor identifier, stored in your browser's local storage, which lets us count returning visits without knowing who you are. It is not linked to your name or email unless you create an account.
- First-Party Attribution: When you arrive via a referral campaign or link, first-party campaign attribution parameters are saved to your browser's
localStorage on first touch for 30 days. This attribution is never overwritten by subsequent visits and is used solely to measure the effectiveness of our student outreach channels without cross-site third-party tracking.
Analytics. We use Google Analytics on our website to understand which pages people find useful. Google sets its own cookies and receives your IP address and browsing activity on our site. You can opt out with the Google Analytics opt-out add-on, or by blocking third-party scripts in your browser.
Advertising. When advertising is enabled on the site, we use Google AdSense. Ads are never shown on pages that carry your own lecture content, and never to Pro subscribers.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or to other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
- You can opt out of personalised advertising by visiting Google's Ads Settings, or manage it in Google My Ad Center.
- You can opt out of some third-party vendors' use of cookies for personalised advertising at aboutads.info/choices, or, in Europe, at youronlinechoices.eu.
If you are in the European Economic Area, the United Kingdom or Switzerland. Where advertising or analytics cookies require your consent, we ask for it before those cookies are set, and you can withdraw or change that choice at any time through the consent controls on the site. Essential cookies — the ones that keep you signed in and remember your preferences — are set without consent because the service cannot function without them.
California residents. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not offer financial incentives for personal information. You may still exercise the rights described in section 7.
We do not sell your personal data to ad networks, and we never share your uploaded lectures, transcripts or summaries with advertisers.
6a. The Chrome Extension
Our Chrome extension is covered by this same policy. It is deliberately narrow in what it touches:
- What it reads. When you click the extension icon on a YouTube video, it reads that video's title and its caption track. It reads nothing until you click, it reads no other tab, and it does not modify the YouTube page.
- What it sends. The caption text and video title are sent to VideoNoteGPT so your notes can be generated. Nothing else leaves your browser.
- What it stores. Your VideoNoteGPT session identifier, so summaries are linked to your account and remaining lectures. It stores no browsing history and no page content.
- What it does not collect. No browsing history, no keystrokes, no mouse or click tracking, no location, and no data from any site other than the YouTube video you explicitly ask it to summarize.
Extension data is never sold, and is never used for anything other than producing the notes you requested. You can remove it at any time from chrome://extensions, which deletes everything it has stored.
7. Your Rights
Depending on your location, you may have the right to:
- Access — request a copy of the personal data we hold about you
- Deletion — request deletion of your account and associated data
- Correction — update or correct your personal information
- Data portability — receive your data in a machine-readable format
- Object to processing — opt out of certain data uses
To exercise these rights, contact us through our contact form. We will respond within 30 days.
8. Data Security
We implement industry-standard security measures including:
- HTTPS/TLS encryption in transit
- Bcrypt password hashing (passwords are never stored in plaintext)
- Strict file access controls with automatic deletion
- Rate limiting and abuse detection
No method of transmission over the internet is 100% secure. In the unlikely event of a data breach affecting your personal information, we will notify you as required by applicable law.
9. Children's Privacy
VideoNoteGPT is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
10. International Transfers
VideoNoteGPT may process data in jurisdictions outside your country. We ensure appropriate safeguards are in place for any international data transfers.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify registered users of material changes by email. The "Last updated" date at the top of this page will always reflect the most recent version.
12. Contact Us
For privacy-related questions or to exercise your rights: