Privacy Policy

The controller for your personal data is:

Company Sidler (Sven Eduard Sidler), Gemeindehausplatz 13, 6048 Horw, Switzerland — CHE-484.628.471
Contact for any privacy request: companysidler@gmail.com

We are based in Switzerland. This policy is written to meet the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR).

Account data. Your email address, and your name and profile picture if you sign in with Google. We store a login identifier, never your password in readable form.

YouTube channel data. When you connect a channel, we read its public and authorised statistics: video titles, view counts, publication dates, subscriber counts and similar metadata. We store snapshots so we can show change over time.

Content you upload. Video files you submit for analysis and reference images you add to your creator profile.

Things you write. Chat messages, your creator profile answers, and notes the assistant keeps so it does not ask you the same thing twice.

Usage and billing records. Which AI features you ran and when, token counts and cost per run, your plan, subscription status and payment history. We keep these to enforce plan limits, to bill correctly and to understand our own costs.

Technical data. Standard server logs from our host, including IP address, browser type and pages requested.

We do not collect your card number. Stripe handles payment details directly and only tells us the result, the last four digits and the billing status.

• To provide the Service (performance of our contract with you): running analyses, storing your work, keeping you logged in.
• To bill you (contract and legal obligation): processing payments and keeping accounting records.
• To keep the Service working and honest (legitimate interest): enforcing plan limits, detecting abuse and fraud, fixing errors.
• To contact you about your account (contract): service notices, billing problems, material changes to these documents.
• Marketing email (consent): only if you opt in, and you can opt out at any time.

We do not sell your personal data, we do not share it with advertisers, and we do not use your content to train our own AI models.

To run the Service we pass data to the providers below. Each one only receives what it needs for its job. Each of them is a professional provider that processes data for us under its own data processing terms.

We may also disclose data where the law requires it, or to establish or defend legal claims.

Several providers above are based in the United States, so your data is transferred there. Those transfers rely on the European Commission's Standard Contractual Clauses, on the equivalent Swiss clauses, or on the provider's certification under the EU-US and Swiss-US Data Privacy Framework, depending on the provider.

• Account, channel and chat data: for as long as your account exists.
• Uploaded video files: currently kept in storage — automatic deletion after analysis is planned but not yet built. The resulting transcript and analysis stay with your account until you delete them.
• Usage and cost logs: retained in aggregated form for capacity and cost planning even after account deletion, with no personal identifiers attached.
• Billing and accounting records: 10 years, because Swiss commercial law requires it.

When you delete your account we delete or irreversibly anonymise everything except records we are legally obliged to keep.

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong;
• delete your data;
• restrict or object to certain processing;
• hand your data over in a portable, machine-readable format;
• withdraw a consent you previously gave, without affecting what happened before.

Write to companysidler@gmail.com. We answer within 30 days. We may ask you to confirm your identity first, so that nobody else can request your data.

If you think we have handled your data badly, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), or, in the EU or EEA, to your national data protection authority.

The Service uses YouTube API Services. Your use of it is therefore also subject to the YouTube Terms of Service and the Google Privacy Policy.

We only read channel data. We never post, edit or delete anything on your channel. You can revoke our access at any moment through Google security settings, which immediately stops any further reads. Channel data we already stored is deleted when you ask us to disconnect the channel or delete your account — write to us and we do it.

We use cookies only to keep you logged in and to keep your session secure. We do not run advertising trackers, third-party analytics or cross-site profiling, so there is no cookie banner asking you to accept marketing cookies. Strictly necessary cookies of this kind do not require consent.

Blocking them will log you out and prevent the Service from working.

Data is encrypted in transit and at rest by our hosting and database providers. Access to production data is limited to the operator. Database access rules are enforced per user, so one account cannot read another account's rows.

No system is perfectly secure. If a breach affects your personal data and creates a real risk to you, we will notify you and the competent authority as the law requires.

The Service is not intended for anyone under 16. We do not knowingly collect data from children below that age. If you believe a child has given us data, write to us and we will delete it.

If we change how we handle your data in a way that matters to you, we will notify you by email or in the app before it takes effect. The date at the top of this page always shows the current version.