Privacy Policy

1. Introduction

This Privacy Policy describes how TheRepo ("we", "us", or "our") collects, uses, and protects your information when you use our YouTube bookmark management service. TheRepo is operated as an individual/personal project.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Display name (optional)
• Profile avatar (if provided via OAuth)
• Authentication provider information (Google, etc.)

Bookmark Data

When you use our bookmarking features, we store:

• YouTube video URLs and video IDs
• Video titles (fetched from YouTube)
• Timestamps you save
• Notes and descriptions you add
• Library organization preferences
• Montage configurations

Screenshots

When you upload a screenshot for processing, the image is sent to AI services (Google Gemini or OpenAI) for analysis. Screenshots are processed transiently and are not permanently stored by TheRepo. The AI services may temporarily process the image according to their own privacy policies.

Usage Data

We collect usage data to monitor service health and enforce rate limits:

• API request timestamps
• Processing times
• Image sizes (for screenshot uploads)
• Success/error status of requests

Social Features

If you use our social features, we store:

• Friend connections and requests
• Shared bookmarks and their recipients
• Messages sent between friends

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Authenticate your account and secure your data
• Process screenshots to identify YouTube videos
• Store and sync your bookmarks across devices
• Enable sharing features with friends
• Enforce rate limits and prevent abuse
• Improve the Service and fix issues
• Communicate with you about your account

4. Third-Party Services

TheRepo uses the following third-party services that may process your data:

Supabase

We use Supabase for authentication and database storage. Your account information and bookmark data are stored in Supabase-hosted PostgreSQL databases. See Supabase Privacy Policy.

Google Gemini AI

We use Google's Gemini AI to analyze screenshots and extract video information. Screenshots are sent to Google's servers for processing. See Google Privacy Policy.

OpenAI

As a fallback, we may use OpenAI's GPT-4 Vision to analyze screenshots. See OpenAI Privacy Policy.

YouTube Data API

We use the YouTube Data API to fetch video titles and metadata. See Google Privacy Policy.

5. Data Storage and Security

Your data is stored in secure, encrypted databases hosted by Supabase. We implement appropriate security measures including:

• Encrypted data transmission (HTTPS)
• Secure authentication via Supabase Auth
• Row-level security policies for database access
• Rate limiting to prevent abuse

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data will be removed from our systems. Some anonymized usage data may be retained for analytics purposes. Screenshots are not stored and are only processed transiently during analysis.

7. Cookies and Local Storage

TheRepo uses cookies and local storage for:

• Authentication: Session cookies to keep you logged in
• Preferences: Theme settings (light/dark mode)

We do not use cookies for advertising or tracking purposes.

8. Your Rights

You have the right to:

• Access: View and export your bookmark data
• Correction: Update your profile and bookmark information
• Deletion: Delete individual bookmarks or your entire account
• Portability: Request a copy of your data

To exercise these rights, contact us at the email address below.

9. Children's Privacy

TheRepo is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. International Data Transfers

Your data may be processed in countries other than your own, as our service providers (Supabase, Google, OpenAI) operate globally. By using TheRepo, you consent to the transfer of your information to these jurisdictions.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by posting an updated version on this page with a new effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@therepo.xyz.