How we handle your YouTube data

This notice supplements the general CommentCare privacy notice. CommentCare is operated by Theodor Conrad Borth, Zehenthofgasse 37, 1190 Vienna, Austria. Contact hello@commentcare.app.

What we access

After the channel owner explicitly authorizes Google access, we receive the channel identifier and name, an access and refresh token, video identifiers and details, and available comments and replies, including their text, author names, identifiers, timestamps and moderation state. We also store scan status, AI suggestions and confirmed moderation actions. We do not ask for your Google password or download video or audio files.

Why we use it

We use this data only to show your channel's comments in CommentCare, suggest which comments may be unwanted, and carry out moderation actions you select. The Google permission has a broader description because the YouTube API also permits other actions. CommentCare does not publish, edit or delete videos, captions or ratings. It does not automatically reject comments. A rejected YouTube comment may not be restorable.

AI and service providers

Comment text, author names and related video context may be sent to OpenAI's API for classification. OpenAI does not receive your Google credentials. Railway hosts the API and database; Vercel hosts the web interface. We do not sell YouTube data, use it for advertising or use it to train our own models. We do not transfer YouTube data to another AI chat connection through this service. These providers may process data outside the EEA; see the general privacy notice for contact and rights details.

Retention and deletion

Saved YouTube comments and video data are refreshed or removed within 29 days. Disconnecting a channel deletes its active YouTube connection, tokens, videos and comments from CommentCare and initiates revocation of its Google authorization. You can disconnect from the channel connection page, revoke access in your Google Account, or contact us to request deletion or access to your data. Revoking access at Google alone stops future access but does not erase data already saved; please disconnect in CommentCare or contact us as well. Provider backups and records required by law can have separate retention periods.

Google API data is handled under the Google API Services User Data Policy and YouTube API Services policies. Channel owners should inform their community about their own comment moderation and privacy practices.