1. Introduction
CommentPilot is a web application that helps YouTube creators review, draft, and publish responses to comments on their own videos. This Privacy Policy describes what information CommentPilot collects, how it is used, and the choices available to you. It applies to commentpilot.ai and the CommentPilot web application.
For any privacy question, contact support@commentpilot.ai.
2. Information we collect
- Account information: your name, email address, and Google Account identifier, obtained from Google's OpenID, email, and profile scopes when you sign in.
- YouTube data accessed via Google APIs: channel metadata (ID, title, thumbnail), metadata for videos on your own channel, comment threads on your own videos, channel membership lists for your own channel, and YouTube Analytics time-series such as views per day.
- Usage data: interactions with features, configuration choices, and error logs used to operate and improve the service.
- Billing data: payment processing is handled by our payment provider; CommentPilot stores only non-sensitive references such as plan status and transaction identifiers.
3. How we use YouTube API Services data
CommentPilot uses YouTube API Services to provide its core functionality. Each scope is used for a specific, narrow purpose:
youtube.force-ssl: read comment threads on your own videos so you can review them in the CommentPilot dashboard, and publish reply comments on your behalf only when you explicitly click to publish a draft.youtube.channel-memberships.creator: display membership badges next to commenters so you can prioritize replies to paying members.yt-analytics.readonly: display per-video view trends alongside comment activity on your dashboard.
CommentPilot only accesses data for the channel you have authenticated. It never accesses other users' private data, and it does not sell or share YouTube data with third parties for advertising.
4. YouTube API Services compliance
This application uses YouTube API Services. By using CommentPilot you acknowledge and agree to:
You can revoke CommentPilot's access to your Google account at any time at https://myaccount.google.com/permissions.
5. AI processing and third-party providers
When you request an AI-assisted draft, CommentPilot sends the minimum payload needed (such as the comment text and your configured style guidance) to large-language-model providers that generate the suggestion. These providers process the payload to return a response and may apply their own abuse-prevention measures. Handling by these providers is governed by their own terms and privacy policies.
6. Data sharing
CommentPilot does not sell personal data. We share data only:
- With infrastructure and AI subprocessors that are required to operate the service;
- When required by law, regulation, or valid legal process;
- To protect the rights, property, or safety of CommentPilot, our users, or the public.
7. Data retention and deletion
- YouTube-derived data is retained while your account is active and is used only to operate the dashboard features you use.
- You can disconnect your Google account from CommentPilot at any time, which removes the stored OAuth tokens.
- On account deletion, personal data and YouTube-derived data are removed from active systems within 30 days. Routine backups roll off on the standard backup retention window.
8. Your rights
You can request access to, correction of, export of, or deletion of the personal data we hold about you by emailing support@commentpilot.ai. We will respond in a reasonable time.
9. Security
CommentPilot uses industry-standard technical and organizational measures to protect data in transit and at rest. No system is perfectly secure, and we cannot guarantee absolute security.
10. Children
CommentPilot is not directed to children under 13 (or the applicable local minimum age). We do not knowingly collect personal data from children.
11. International transfers
CommentPilot may process and store data in countries other than your country of residence. Where required, we rely on appropriate transfer safeguards.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date above and, where appropriate, by in-app notice or email.
13. Contact
Questions about this policy? Email support@commentpilot.ai.