Privacy Policy

At AmplifyContent.ai, operated by Bezaleel Consulting Group ("we," "us," or "our"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our AI-powered video content generation platform.

1. Information We Collect

1.1 Account Information

• Registration Data: Name, email address, password (encrypted)
• Profile Information: User preferences, theme settings, subscription status
• Authentication Data: JWT tokens, session information

1.2 Social Login Information

When you sign in using social providers (Google, Microsoft, Apple), we collect:

• Email address for account verification
• Basic profile information (name, profile picture)
• OAuth tokens for secure authentication

1.3 YouTube Integration Data

When you connect your YouTube account, we collect and store:

• Channel Information: Channel name, description, subscriber count, video count
• Video Metadata: Video titles, descriptions, thumbnails, upload dates, duration
• Playlist Data: Playlist names, video lists, organization structure
• OAuth Tokens: Encrypted access and refresh tokens for ongoing YouTube access
• Video Transcripts: Extracted from your YouTube videos for content generation

2. How We Use Your Information

2.1 Core Services

• Content Generation: Process your video transcripts to create educational materials
• Account Management: Maintain your user account and preferences
• YouTube Integration: Import and organize your video content
• AI Processing: Generate blogs, quizzes, discussion guides using Google Gemini and OpenAI

3. Data Sharing and Third-Party Disclosure

3.1 Limited Service Providers

We use the following service providers solely to deliver our platform functionality. These providers do not receive or have access to your YouTube data:

• Google Gemini & OpenAI: AI content generation services process your video transcripts to generate educational materials. These services receive only the transcript text, not your YouTube account information or personal data.
• Cloud Infrastructure: Our hosting provider stores encrypted data but does not have access to decrypted user information.
• Email Service: Transactional email provider for sending verification codes and account notifications only.

3.2 No Data Sales or Marketing

• We do not sell user data to advertisers or marketing companies
• We do not share data with analytics companies beyond basic website traffic statistics
• We do not use your YouTube data for any purpose other than providing our content generation services to you
• We do not train AI models on your data or share it with AI training datasets

4. Data Retention and Deletion

4.1 Data Retention Periods

• Active Account Data: Retained for the duration of your active account
• YouTube Data: Retained while your YouTube account remains connected; automatically deleted when you disconnect your YouTube account
• Generated Content: Retained as long as you maintain an active account; deleted upon account closure
• Session Data: Retained for 90 days for security and analytics purposes, then automatically deleted
• Subscription History: Retained for 7 years for legal and accounting compliance requirements

4.2 Data Deletion Rights

You have the right to request deletion of your data at any time:

• YouTube Data Deletion: Disconnect your YouTube account from your profile settings to immediately delete all YouTube-related data
• Account Deletion: Delete your entire account from account settings, which permanently removes all personal data within 30 days
• Content Deletion: Delete individual videos or generated content at any time from your dashboard
• OAuth Token Revocation: Revoke YouTube access through your Google Account settings, which immediately invalidates our access to your YouTube data

4.3 Automatic Deletion

Data is automatically deleted in the following circumstances:

• Account inactive for 2 years - all account data deleted with 90-day notice
• YouTube connection revoked - all YouTube data deleted within 24 hours
• Session expiration - session tokens deleted after logout or timeout
• Account closure - complete data deletion within 30 days

5. Data Storage and Security

We maintain comprehensive security measures including encryption at rest, access controls, and regular security audits. All YouTube data is securely stored in our PostgreSQL database with the following protections:

• Encryption: Data encrypted at rest using AES-256 encryption
• OAuth Tokens: Encrypted with AES-256-CBC and stored separately from user data
• Access Controls: Role-based access controls limit data access to authorized personnel only
• Secure Transmission: All data transmitted over HTTPS/TLS encryption
• Regular Audits: Security audits conducted quarterly to identify and address vulnerabilities

6. Contact Information

7. Effective Date

This Privacy Policy is effective as of January 9, 2025, and applies to all users of the AmplifyContent.ai platform.