Privacy Policy

The short version

• We store the videos you analyze, the prompts you write, the transcripts we fetch, and the chats you have about them.
• Your prompts and transcripts are sent to Google’s Gemini API, which produces the analysis.
• We do not run analytics, advertising, or tracking of any kind, and we do not sell or rent your data.
• There is no billing, so we never see a card number.
• Analyses are unlisted, not private — anyone who has the link can open one. See Sharing and visibility.
• Email support@welzware.com to have your account and its data deleted.

Who is responsible for your data

VidGist is operated by Welzware. For any privacy question, correction, or deletion request, write to support@welzware.com.

What we collect

Account information

If you sign in with Google, we receive your Google account’s email address, display name, profile photo URL, and a user ID. If you sign up with an email and password, we receive your email address; the password itself is handled by Firebase Authentication and is never visible to us. We use this to identify you and show your name and avatar in the interface.

Anonymous sessions

Visiting the workspace creates an anonymous session identifier before you sign in, so that work you start is not lost. It is not linked to a name or email. If you later create an account, analyses made during the anonymous session are transferred to it.

Content you create

Each analysis stores:

• the YouTube links you submit, and public metadata for those videos (title, description, channel, thumbnail);
• the prompt or template you used, and any custom response structure you defined;
• the transcript text we retrieve for each video, including timestamps;
• the generated analysis; and
• the messages in any chat you have about that analysis, both your questions and the answers.

Research sessions store the same kind of material: a title, the analyses you grouped together, and the chat history.

Usage records

We keep a per-account count of how many analyses you have run in the current month and in total, to enforce the free-tier limit. Separately, we keep an operational log of each AI request containing your user ID, the model used, token counts, estimated cost, how long the request took, the length of the prompt and response, and — when a chat uses web search — the search queries the model generated. This log records the size of your text, not the text itself.

Stored on your device

VidGist sets no cookies of its own. Your signed-in session is kept in your browser’s local storage by Firebase Authentication. We also store your theme preference, any prompt templates you write (these stay on your device and are never uploaded), and short-lived values used to carry state between pages. Signing in with Google involves cookies set by Google on its own domain.

What we do not collect

VidGist has no analytics, no advertising or ad-tech, no session recording, no error-tracking service, no A/B testing tools, and no marketing email system. Nothing about your browsing is shared with a third-party measurement provider. There is no paid plan and no payment processor, so no financial information is ever collected. We do not sell, rent, or trade personal information, and we do not use your content to train our own models.

Who processes your data

We rely on these providers. Each receives only what it needs to do its job.

• Google Cloud and Firebase — hosting, authentication, and the database where everything above is stored.
• Google Gemini API — receives your prompt, the video transcripts, and your chat messages in order to generate the analysis and the answers.
• Google Search — when you enable web search in a chat, the model’s search queries are sent to Google Search.
• YouTube Data API — when you search for a video from inside VidGist, your search text is sent to YouTube. Video metadata comes back from the same service.
• Our transcript service, and the proxy network it uses — retrieves transcripts from YouTube. It receives video identifiers only; your identity is not sent to it.

These providers operate internationally, so your data may be processed outside your country, including in the United States.

Sharing and visibility

This is the most important thing to understand about VidGist today, and we would rather state it plainly than bury it.

Every analysis is created as unlisted. An unlisted analysis is not listed anywhere public and will not appear in anyone else’s library or in search results, but it is readable by anyone who has its link and is signed in to VidGist. That includes its transcripts and its chat history. There is currently no setting that makes an analysis private to you alone.

Treat an analysis link as you would an unlisted document link: fine to send to someone you chose, but not a secret. Do not analyze videos or write prompts containing information you would not want a link-holder to read.

Your research sessions, by contrast, are readable only by you.

Operator access

An administrator can see an account list showing email addresses, display names, sign-in methods, account creation and last sign-in times, and usage and cost totals. This exists to run the service and manage capacity. The administrator view does not show your prompts, transcripts, analyses, or chat contents.

How long we keep it

Analyses, transcripts, and chat history are kept until you delete them. Deleting an analysis from your library removes its transcripts, chat messages, and generated content along with it.

The operational AI usage log described above is retained indefinitely as a billing and capacity record, and is not removed when you delete an analysis. It contains your user ID, request sizes, and cost figures — not the content of your prompts.

Your choices

• Delete individual analyses yourself at any time from your library.
• Delete your account and its data by emailing support@welzware.com. We do not yet offer a self-service button for this; we handle these requests manually.
• Request a copy of, or a correction to, your data at the same address.
• Revoke Google access at any time from your Google account permissions page.

Depending on where you live, you may have additional rights over your personal data, such as the right to object to processing or to request portability. Write to us and we will honor them.

Security

Traffic is encrypted in transit, and database access rules restrict each account to its own library. No online service can promise perfect security, and the unlisted-link behavior described above is a deliberate design choice rather than a flaw — please read that section.

Children

VidGist is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

If we change how data is handled, we will update this page and the date above. Material changes will be signposted in the app.

Contact

Questions, deletion requests, or anything else: support@welzware.com.

See also our Terms of Service.