This Privacy Policy explains how Part Two P.2 LLC ("we", "us", "our") collects, uses, and shares information when you use the To The Point Chrome extension (the "Extension"), our website at tothepoint.space (the "Site"), and related services, features, and content (collectively, the "Services"). By using the Services, you agree to this Policy.
1) Data we collect
A) Personal data you provide
Account details (Google Sign-In): When you sign up or sign in, we receive your email address and profile info provided by Google (e.g., name, avatar). We use this to create and secure your account, validate your subscription, and send transactional emails.
Payment & subscription (via Stripe): When you start a 3-day free trial or subscribe for $10/month, payments are processed by Stripe. We receive limited billing metadata (e.g., customer ID, status, last 4 digits) but not full card numbers. We may receive your email and country for receipts, tax, and support.
Support messages: If you contact us, we collect your message and contact details.
B) Derivative/technical data (Site & Services)
Device/usage basics (Site): IP address, browser/OS, language, pages viewed, referrers, and timestamps.
Diagnostics: Basic error logs (e.g., request failures, response times) used to improve reliability. These exclude video content and are not used to profile you.
C) App/feature usage data
Extension interactions: Feature toggles, success/error states, and frequency of use (e.g., exports used) to improve UX and send relevant tips.
D) Data processed to generate summaries
YouTube inputs: Video URL, title, channel, timestamps, and captions/transcripts.
Server processing: To generate a summary, the Extension sends the video ID and title to our servers. Our servers fetch the video's public captions through a caption provider (poix.io) and send the title and transcript to OpenAI to produce the summary and timeline. OpenAI's API terms apply to that processing; we do not send your name or email to OpenAI.
Summary cache: Generated summaries are stored per video (not per user) so that other viewers of the same video get an instant result. The cache contains the video title and the generated text, not your identity.
Usage counts: We store a per-day count of summaries against your Google account email to apply the free daily limit and plan limits.
Account linkage: Summary features operate under your signed-in account to validate your subscription and apply settings.
2) Cookies & similar technologies
Site analytics: We use Google Analytics (GA4) to understand basic traffic and usage.
Embedded players: If we embed a YouTube player on the Site, YouTube/Google may set cookies necessary to operate that player. Please see their policies for details.
No ad tracking: We do not use third-party advertising cookies.
You can control cookies via your browser settings.
3) How we use information
Provide, operate, and improve the Services (including account authentication, generating summaries, and performance).
Manage trials, subscriptions, billing, and receipts.
Communicate about onboarding, product updates, and support (see Emails below).
Detect, prevent, and address abuse, fraud, or technical issues.
Comply with legal obligations.
4) Emails & your choices
Transactional/account emails: sign-in links/codes, security alerts, receipts, trial/subscription status, and critical updates (cannot be unsubscribed).
Product & onboarding tips and announcements (feature updates; changes to terms/policies). You can unsubscribe from non-transactional emails via the link in the email.
We may tailor non-transactional emails based on in-product activity (e.g., whether you used exports). We do not tailor emails based on which specific videos you watch.
5) Legal bases (EEA/UK)
We process personal data based on contract (to deliver the Services), legitimate interests (e.g., to improve and secure the Services), and consent (where required, e.g., certain cookies).
6) Sharing
Processors: We use service providers like Stripe (payments) and Google Analytics (analytics) under data processing terms. They may only process data per our instructions.
Legal & safety: We may disclose information to comply with law or protect rights, safety, or Service integrity.
No selling: We do not sell personal data.
7) Data retention
Transcripts: processed in memory to generate the summary and not stored by us.
Generated summaries: cached per video until we remove them or the video is no longer available.
Usage counts and plan records: kept while you have an account with us; request deletion at any time.
Server logs: up to 30 days (debugging/abuse prevention).
Billing records: kept as required for tax, accounting, and compliance (6–10 years, jurisdiction-dependent).
Support messages: retained for support history unless you request deletion.
8) Security
We use reasonable administrative, technical, and organizational measures (e.g., encryption in transit, access controls). No method is 100% secure.
9) Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, port, or object to processing. Contact tothepointextension@gmail.com to exercise rights. You can also:
EEA/UK users may lodge complaints with their local supervisory authority.
10) International transfers
If data is transferred outside your region (e.g., to the U.S.), we use appropriate safeguards such as Standard Contractual Clauses.
11) Children
The Services are not for children under 13 (or the age required in your region). We do not knowingly collect data from children.
12) Third-party services & YouTube
We are not affiliated with YouTube/Google. Captions are obtained through a third-party caption provider (poix.io) and summaries are generated by OpenAI's API. Payments are processed by Stripe; we never see your card number. YouTube content is used only to generate summaries.
13) Changes
We may update this Policy. We'll post the new version with a revised "Last updated" date. Material changes will be highlighted or otherwise communicated.