VideoOutline Privacy Policy

Scope and operator

VideoOutline is operated by HK CompassIO Technology Ltd. This policy covers videooutline.app and the VideoOutline Chrome extension. Summaries are currently an administrator-only preview; public paid subscriptions are not available.

Data we process

• Account information: registration email, display name, hashed password, sessions and authentication records.
• Summary inputs and outputs: the current YouTube video ID, URL, title, duration, available original-language captions, selected language and length, generated summaries and timestamps.
• Extension connection: your application access key and locally cached summaries. Model-provider API keys are used only on the server.
• Support and operations: tickets, attachments or emails you submit, plus request times, IP addresses and error records needed for troubleshooting and abuse prevention. Never include passwords, API keys or reset links in support requests.

Automatic summaries and browser access

Once connected, the extension starts a summary after approximately three seconds on a foreground YouTube video tab. Clicking manually starts immediately. Background tabs wait until visible; navigating away cancels work that has not been submitted. Submitted requests may continue.

The extension reads information relevant to summaries on the current YouTube page. It does not collect your full browsing history on other websites or upload YouTube cookies to VideoOutline. Caption retrieval on YouTube may use your browser's existing YouTube session; that session is not transmitted to us.

Your application key is stored in extension local storage and authenticates requests to our website. Disable the extension to stop new automatic requests. Disconnecting clears the local key and summary cache; revoke the key in the website's API Keys settings to invalidate server access.

Purposes and service providers

Data is used to deliver summaries, authenticate accounts, send password-reset emails, provide support and protect the service.

• Cloudflare hosts the site, database and request processing and forwards support email.
• Google Gemini processes video links or captions on the direct model path.
• OpenRouter and the selected upstream model provider process inputs on that path; the current configuration uses Google Gemini.
• Resend delivers account and password-reset emails and processes recipient addresses and message contents.
• Google Gmail receives forwarded support messages and their contents.

Providers may process information outside your country or region. Their retention and model-use terms differ; we do not promise zero retention or exclusion from training across every model path. Do not submit sensitive, confidential or unauthorized material.

We do not sell personal data or use video-browsing data for personalized advertising. Extension data is limited to the disclosed summary functionality and related operations. Our use complies with the Chrome Web Store User Data Policy, including Limited Use requirements. Human access is limited to support you authorize, necessary security investigations or legal requirements.

Caching and retention

The extension keeps up to 100 successful summaries with a seven-day cache lifetime. Expired entries are not reused and are removed during subsequent housekeeping. Disconnecting or uninstalling clears local cached data.

The server stores successful summaries and processing state. Summary cache validity is seven days. Results for identical public-video requests may be reused across users; requests containing browser-supplied captions are scoped to the account. Cache identities are hashed rather than storing raw captions as keys. Expired results are not reused; physical deletion occurs during later housekeeping, not necessarily at the instant of expiry.

Account information is retained while the account is in use. Support, security and necessary business records are retained as needed to resolve issues, protect the service and meet applicable obligations. There is not yet one automatic deletion schedule for all records. Data deletion requests require identity verification; we explain the scope and any records retained for legal or dispute-related reasons.

Cookies, security and choices

Necessary session cookies keep you signed in. No advertising tracking is configured in the current preview. Optional analytics, if introduced, will be disclosed with applicable choices. The production site uses HTTPS, passwords are hashed and configured service credentials are encrypted at rest. No system can guarantee absolute security.

You may request access, correction or deletion of your account data, stop using the service or uninstall the extension. Use our contact page; we will verify account ownership without asking for your password.

Payments and updates

The preview does not collect payment cards or charge subscriptions. Relevant disclosures will be updated before paid services launch. Changes are dated on this page, with additional notice for material changes to data practices.