Privacy Policy

Last updated: 2026-10-05

1. What We Collect

Your email and password (handled by Supabase Auth, not stored by us in plain text), where you said you heard about YTShark, and the data you create while using it — watched channels, videos, clips, titles, descriptions, and bug reports.

2. YouTube Data

If you connect a YouTube account, YTShark accesses it only to upload the videos you tell it to and read your channel's basic info. We don't read your private YouTube data beyond what's needed for that, and we don't share it with anyone else. YTShark's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Where Data Lives

YTShark runs on your PC. Your clips, edits, watched channels and videos stay on your computer. Our server (api.ytshark.app) only keeps what's listed here:

Your account: email and login, held by Supabase Auth. Kept until you delete your account.
Your plan: Free/Pro status, your Stripe subscription ID, and how many free AI Clip Scans you've used. Kept until you delete your account.
Scheduled posts: the clip file, its title, description, tags and privacy setting, plus your encrypted YouTube token. The clip file and token are deleted as soon as the post goes up, fails, or is cancelled. The title, status and resulting YouTube video ID are kept so the app can show what was posted, until you delete your account.
Bug reports: the text you send and which screen you were on. Kept until you delete your account.
Waitlist: if you joined it, your email, kept only to tell you when YTShark is ready.

Some features send data to our server just to process it, without saving it: AI Clip Scan sends the video's description, captions, comments and viewer-activity graph to score moments; AI Metadata sends a clip's title, description and channel name to write new ones; channel and video searches pass through our server to YouTube (results are cached briefly in memory to save quota). None of this goes to any outside AI company: the scoring and writing run on our own server.

4. How We Protect Your Data

Encrypted connections. All traffic between the app, our website, our server (api.ytshark.app) and our account provider uses HTTPS/TLS.
Passwords. Passwords are handled by Supabase Auth and stored only as salted hashes, never in plain text. We never see them.
YouTube access tokens. Your YouTube login token is kept on your own computer, encrypted with Windows Data Protection (DPAPI) so only your Windows account on that PC can read it. It is only sent to our server when you schedule a post, so the post can go out while your PC is off. On our server it is encrypted at rest (AES via Fernet, with a key kept as a server secret, not in code), used once to upload that post, then erased.
Scheduled clips. A clip you schedule is stored on our server only until it posts or you cancel it, then the file is deleted.
Payments. Payments are processed by Stripe. Card numbers never touch our servers.
Limited access. Only the Online Perseverance admin can access our servers and database. API keys and secrets are stored as protected server settings, never in the app or in source code.
You stay in control. You can disconnect YouTube anytime in YTShark Settings (this revokes our access at Google and deletes the token from your PC), or revoke access from your Google Account permissions page.

5. What We Don't Do

We don't sell your data. We don't use it for advertising. We don't share it with third parties except the services YTShark itself depends on to run (Supabase for accounts and data, Google/YouTube for posting, Stripe for payments, Resend for account emails, Fly.io and Cloudflare for hosting).

6. Your Choices

You can revoke YouTube access at any time (see above), and delete your clips by removing them from your computer. To delete your YTShark account and everything on our servers, email us and we'll do it.

7. Changes

We may update this policy as YTShark changes. Material changes will be announced in the app.

8. Contact

Please email us at support@onlineperseverance.com for any further questions or concerns.