Kritrim

Privacy Policy

Last updated: April 4, 2026

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and organization details. We do not store your password in plain text — it is securely hashed.

YouTube API Data

When you connect a YouTube channel, we access data via Google's YouTube Data API v3, including channel metadata, livestream details, and comment threads. We only access data necessary to provide the Service and do so in compliance with Google's API Services User Data Policy.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, API calls made, and error reports. This helps us improve the platform.

2. How We Use Your Information

  • To provide, maintain, and improve the Service.
  • To process transactions and send billing notifications.
  • To send service-related announcements (e.g., maintenance, security alerts).
  • To generate AI-powered comment responses using your configured settings.
  • To enforce our Terms of Service and prevent abuse.
  • To provide customer support and respond to inquiries.

3. Data Storage & Security

Your data is stored on our globally distributed infrastructure, including:

  • Distributed SQL Database — For structured account and operational data.
  • Edge KV Cache — Key-value storage for caching and sessions.
  • Object Storage — Scalable storage for thumbnails and assets.

All data is encrypted in transit (TLS 1.3) and at rest. We follow industry best practices for security, including regular access reviews and the principle of least privilege.

4. Third-Party Services

We use the following third-party services:

  • Google/YouTube API — To access and manage YouTube channel data.
  • OpenAI — To generate AI-powered comment responses. Comment content is sent to OpenAI's API for processing. We do not use your data to train AI models.
  • Infrastructure Providers — For hosting, CDN, security, and data storage.

5. Data Retention

  • Account data is retained as long as your account is active.
  • After account deletion, we retain data for 30 days prior to permanent deletion.
  • Audit logs may be retained for up to 1 year for compliance purposes.
  • Aggregated, anonymized analytics may be retained indefinitely.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — Request a copy of your personal data.
  • Correction — Request correction of inaccurate data.
  • Deletion — Request deletion of your data.
  • Portability — Request your data in a machine-readable format.
  • Objection — Object to certain processing of your data.

To exercise these rights, contact us at privacy@kritr.im.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising pixels. Session cookies expire when you close your browser or sign out.

8. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect personal information from children. If we discover we have collected data from a child, we will delete it promptly.

9. International Data Transfers

Your data may be processed in multiple countries through our globally distributed edge network. Our infrastructure providers are certified under the EU-US Data Privacy Framework and implement appropriate safeguards for international transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email at least 30 days before they take effect. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

12. Google API Disclosure

Kritrim's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.