GetWololo Privacy Policy

Last updated: May 5, 2026

GetWololo ("we", "us", or "our") is operated by Daniels Web Services LLC. This privacy policy describes how we collect, use, store, and protect your information when you use GetWololo at getwololo.com.

Information We Collect

Information You Provide

• Google account information: When you connect your Google account via OAuth, we receive your YouTube channel name and YouTube channel ID. We do not receive your email address at sign-in.
• Payment information: When you subscribe to a paid plan or purchase credits, Stripe processes your payment and collects your email address at checkout. We do not store credit card numbers; Stripe stores them under their own security and compliance regime.

Information from Google APIs

To generate chapters and metadata for your YouTube videos, we access the following data from your YouTube account via Google APIs:

• Video IDs, titles, descriptions, and durations of videos you select for processing
• Auto-generated and manual caption tracks for those videos
• Channel ID and basic channel metadata for the connected account
• When you explicitly click "Push to YouTube," we write updated descriptions and chapters to the specific videos you selected

We access only the data needed to deliver chapter generation. We do not read or store data from videos you have not selected for processing. We never access your subscribers, comments, playlists, or analytics.

Information We Generate

• Chapter timestamps and titles produced by our processing pipeline
• Usage records (number of videos processed, plan tier, billing events)
• Server logs containing IP addresses, request URLs, and timestamps, retained for security and debugging purposes

How We Use Information

• To provide and deliver the chapter generation service
• To process payments and manage subscriptions
• To improve our service quality, fix bugs, and prevent abuse
• To communicate with you about your account, service updates, or support inquiries

We do not use your information for advertising. We do not sell, rent, or trade your personal information to third parties.

Data Protection and Security

Encryption in Transit

All data transmitted between your browser, our servers, and third-party services (Google APIs, Stripe, Anthropic, our database) is encrypted using TLS 1.2 or higher. We do not transmit sensitive information over unencrypted channels.

Encryption at Rest

• OAuth refresh tokens and access tokens are stored in our database (Supabase), which provides encryption at rest using AES-256 industry-standard encryption.
• Sensitive credentials, including Google API tokens, are never written to application logs or error reports.
• Database backups are encrypted at rest by our database provider.

Access Controls

• Access to production data is restricted to authorized Daniels Web Services LLC personnel who require it to operate or support the service.
• Database and API credentials are stored as environment variables on our hosting provider (Heroku) and are never committed to source code repositories.
• Multi-factor authentication is required for administrative access to our hosting, database, and source control providers.

Data Retention

• OAuth tokens are retained only while your account is active. If you disconnect your Google account or delete your GetWololo account, your tokens are deleted from our systems within 7 days.
• Video metadata, chapters, and processing history are retained while your account is active and up to 90 days after deletion for accounting and dispute-resolution purposes.
• Server logs are retained for 30 days, then permanently deleted.
• Backups containing user data are retained for 30 days, then permanently deleted.

Data Deletion

You can delete your account and all associated data at any time by emailing rob@en-place.ai. Upon receiving a deletion request, we will:

• Delete your OAuth tokens within 7 days
• Purge your video metadata and chapter history within 30 days
• Confirm completion of the deletion via email

You may also revoke GetWololo's access to your Google account at any time at https://myaccount.google.com/permissions, which will immediately invalidate our access tokens.

Incident Response

In the event of a data breach affecting user data, we will:

1. Investigate and contain the incident within 24 hours of discovery
2. Notify affected users by email within 72 hours
3. Report the incident to relevant data protection authorities as required by applicable law

Limited Use of Google API Data

GetWololo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the chapter generation features visible to you, the user.
• We do not transfer Google user data to third parties except as required to provide the service (e.g. processing captions through Anthropic to generate chapters) or as required by law.
• We do not use Google user data for advertising purposes.
• We do not use Google user data to train, develop, or improve generalized AI or ML models, our own or third-party.
• We do not allow humans to read Google user data unless we have your explicit consent, it is necessary for security purposes, or it is required by law.

Use of AI Services

GetWololo uses Anthropic's Claude API to analyze video captions and generate chapter labels. Specifically:

• Caption text from your selected YouTube videos is sent to Anthropic for analysis.
• Anthropic's Commercial Terms of Service contractually prohibit Anthropic from using API input data to train their models.
• We do not store data returned by Anthropic beyond what is needed to deliver the chapter output to you.
• We do not use your data to train any AI or ML models, our own or third-party.

Third-Party Services

GetWololo relies on the following third-party services. Each has its own privacy policy:

• Google (YouTube Data API for video access): https://policies.google.com/privacy
• Stripe (payment processing): https://stripe.com/privacy
• Anthropic (AI processing for chapter generation): https://www.anthropic.com/legal/privacy
• Supabase (database and authentication): https://supabase.com/privacy
• Heroku (Salesforce) (hosting): https://www.salesforce.com/company/legal/privacy/

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Delete your personal information (see Data Deletion above)
• Object to or restrict our processing of your information
• Receive a copy of your personal information in a portable format

To exercise any of these rights, contact us at the address below.

Children's Privacy

GetWololo is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will notify users via email and update the "Last updated" date at the top of this page.