This Privacy Policy explains how Part Two P.2 LLC ("we", "us", "our") collects, uses, and shares information when you use the To The Point Chrome extension (the "Extension"), our website at tothepoint.space (the "Site"), and related services, features, and content (collectively, the "Services"). By using the Services, you agree to this Policy.
1) Data we collect
A) Personal data you provide
Account details (Google Sign-In): When you sign up or sign in, we receive your email address and profile info provided by Google (e.g., name, avatar). We use this to create and secure your account, validate your subscription, and send transactional emails.
Payment & subscription (via Stripe): When you start a 3-day free trial or subscribe for $10/month, payments are processed by Stripe. We receive limited billing metadata (e.g., customer ID, status, last 4 digits) but not full card numbers. We may receive your email and country for receipts, tax, and support.
Support messages: If you contact us, we collect your message and contact details.
B) Derivative/technical data (Site & Services)
Device/usage basics (Site): IP address, browser/OS, language, pages viewed, referrers, and timestamps.
Diagnostics: Basic error logs (e.g., request failures, response times) used to improve reliability. These exclude video content and are not used to profile you.
C) App/feature usage data
Extension interactions: Feature toggles, success/error states, and frequency of use (e.g., exports used) to improve UX and send relevant tips.
D) Data processed to generate summaries
YouTube inputs: Video URL, title, channel, timestamps, and captions/transcripts.
Local vs. server processing: When possible, processing happens locally in your browser. For some features (e.g., longer videos or exports), the Extension securely sends necessary inputs (e.g., transcript text, timestamps, URL) to our servers to generate results.
Account linkage: Summary features operate under your signed-in account to validate your subscription and apply settings.
2) Cookies & similar technologies
Site analytics: We use Google Analytics (GA4) to understand basic traffic and usage.
Embedded players: If we embed a YouTube player on the Site, YouTube/Google may set cookies necessary to operate that player. Please see their policies for details.
No ad tracking: We do not use third-party advertising cookies.
You can control cookies via your browser settings.
3) How we use information
Provide, operate, and improve the Services (including account authentication, generating summaries, and performance).
Manage trials, subscriptions, billing, and receipts.
Communicate about onboarding, product updates, and support (see Emails below).
Detect, prevent, and address abuse, fraud, or technical issues.
Comply with legal obligations.
4) Emails & your choices
Transactional/account emails: sign-in links/codes, security alerts, receipts, trial/subscription status, and critical updates (cannot be unsubscribed).
Product & onboarding tips and announcements (feature updates; changes to terms/policies). You can unsubscribe from non-transactional emails via the link in the email.
We may tailor non-transactional emails based on in-product activity (e.g., whether you used exports). We do not tailor emails based on which specific videos you watch.
5) Legal bases (EEA/UK)
We process personal data based on contract (to deliver the Services), legitimate interests (e.g., to improve and secure the Services), and consent (where required, e.g., certain cookies).
6) Sharing
Processors: We use service providers like Stripe (payments) and Google Analytics (analytics) under data processing terms. They may only process data per our instructions.
Legal & safety: We may disclose information to comply with law or protect rights, safety, or Service integrity.
No selling: We do not sell personal data.
7) Data retention
Server-processed summary inputs/outputs: retained only as long as needed to generate results and ensure reliability, typically ephemeral or up to 30 days in short-lived logs (debugging/abuse prevention).
Billing records: kept as required for tax, accounting, and compliance (6–10 years, jurisdiction-dependent).
Support messages: retained for support history unless you request deletion.
8) Security
We use reasonable administrative, technical, and organizational measures (e.g., encryption in transit, access controls). No method is 100% secure.
9) Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, port, or object to processing. Contact tothepointextension@gmail.com to exercise rights. You can also:
EEA/UK users may lodge complaints with their local supervisory authority.
10) International transfers
If data is transferred outside your region (e.g., to the U.S.), we use appropriate safeguards such as Standard Contractual Clauses.
11) Children
The Services are not for children under 13 (or the age required in your region). We do not knowingly collect data from children.
12) Third-party services & YouTube
We are not affiliated with YouTube/Google. If we use YouTube data or APIs, usage will comply with YouTube's Terms of Service and Google Privacy Policy. YouTube content is used only to generate summaries and not stored longer than necessary.
13) Changes
We may update this Policy. We'll post the new version with a revised "Last updated" date. Material changes will be highlighted or otherwise communicated.