Privacy Policy for YouTube to WordPress & Ghost - Video to Blog

Effective Date: February 2026

This Privacy Policy explains how the Video-to-Blog Chrome extension ("we," "us," "our," or the "Service") collects, uses, and protects your information when you use our extension.

1. Information We Collect

1.1 License Key

When you activate the extension, you provide a license key. This unique identifier is stored locally on your device and sent to our server with each request to authenticate and track your usage.

1.2 Video Information

When you generate a blog post from a YouTube video, we collect:

• Video title
• Video URL
• Video transcript (automatically extracted from YouTube's captions)

1.3 Blog Generation History

We store a record of blog posts you generate locally on your device, including the title, generated content, and timestamp. This allows you to view your generation history within the extension.

1.4 CMS Credentials (WordPress & Ghost)

If you choose to publish directly to WordPress or Ghost CMS, you provide:

• Site URL
• Username or admin API key
• Application password or admin API key

These credentials are stored securely on our server database (encrypted at rest) and are never stored on your device. They are only used to authenticate your publish requests to your CMS.

1.5 Usage Metrics

We track the number of tokens used by your license key on a daily basis to enforce fair usage limits (200,000 tokens per day). This helps us manage server resources and prevent abuse.

2. How We Use Your Information

• Content Generation: Your transcript is sent to Google Gemini API to generate SEO-optimized blog posts.
• Publishing: Your CMS credentials are used solely to authenticate your requests to publish drafts to your WordPress or Ghost website.
• License Validation: Your license key is verified against our server to ensure you have an active, paid subscription.
• Usage Tracking: We count API tokens used to enforce daily limits and prevent abuse.
• Service Improvement: Aggregated, anonymized usage data helps us improve our service.

3. What We Do NOT Collect

We do not and will not:

• Collect personal information like your name, email, or IP address
• Store transcripts on our servers permanently (processed and discarded after generation)
• Monitor or track which videos you watch
• Sell your data to third parties
• Use your data for advertising or marketing purposes
• Store your CMS credentials on your device (server-side only)

4. Third-Party Services

4.1 Google Gemini API

We use Google's Gemini API to generate blog content from transcripts. Your transcript is sent to Google's servers for processing. Please review Google's privacy policy to understand how they handle your data: https://policies.google.com/privacy

4.2 CodeSpeedy Servers

Our Video-to-Blog backend server processes your requests, stores your settings, and manages your license. Your license key and CMS credentials are stored in our database.

4.3 YouTube

The extension reads captions directly from YouTube's page. You must be logged into YouTube to access transcripts. YouTube's privacy policy applies: https://policies.google.com/privacy

4.4 WordPress & Ghost CMS

When you publish to your own WordPress or Ghost site, you are communicating directly with your own server using the credentials you provide. We do not store copies of your published content on our servers.

5. Data Storage & Retention

5.1 Local Storage (Your Device)

• License key: Stored indefinitely
• Generation history: Stored indefinitely (you can clear manually)

5.2 Server Storage (CodeSpeedy)

• License key & usage logs: Retained for the duration of your subscription plus 90 days
• CMS credentials: Retained for the duration of your subscription plus 90 days
• Transcripts: Processed and deleted within 24 hours after generation
• Generated blog content: Not stored (only you have access via the extension)

5.3 Automatic Data Deletion

When your license key expires, all associated data (credentials, usage logs, settings) is automatically deleted from our server after 90 days.

6. Security

We implement the following security measures:

• HTTPS Encryption: All communication between the extension and our server is encrypted with TLS/SSL
• Server-Side Storage: Sensitive credentials (CMS passwords, API keys) are stored on our secure server, never on your device
• Database Encryption: Credentials are encrypted at rest in our database
• License Key Authentication: Every request is authenticated using your unique license key
• No Access Logs: We do not store detailed access logs of your activities

7. Your Rights

7.1 Access Your Data

You can view your stored settings (WordPress & Ghost credentials) within the extension's Settings tab. All settings are associated with your license key.

7.2 Delete Your Data

You can:

• Clear your local history within the extension
• Delete your CMS credentials from Settings
• Request deletion of all your data from our servers by contacting us

7.3 Uninstall the Extension

Uninstalling the extension removes all local data. Server-side data is retained per our retention policy (see Section 5.3).

8. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by updating the "Effective Date" above. Your continued use of the extension after changes constitutes your acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: support@codespeedy.com

Website: https://subscription.codespeedy.com

10. Compliance

This Privacy Policy is designed to comply with privacy regulations including GDPR, CCPA, and other applicable laws. We are committed to protecting your privacy and handling your data responsibly.

This privacy policy is provided in HTML format and is ready to be published on your website or used in your website editor (TinyMCE, WordPress, Ghost, etc.).