Privacy Policy

1. Introduction

AI DIGITAL, publisher of the YouTube Niche Finder extension, is committed to protecting the privacy of its users. This privacy policy explains how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act.

2. Data Controller

3. Data Collected

We collect the following data:

Registration data:

• Email address
• Password (encrypted)

Usage data:

• YouTube API key (stored encrypted)
• Search and analysis history
• User preferences

Technical data:

• IP address, used only for security and abuse prevention
• Random installation and session identifiers
• Extension version and event timestamps
• Screens shown, essential actions, durations, successes, failures and technical error codes
• Number of videos analyzed and results returned, without search content

This usage journal contains no email address, password, API key, YouTube URL, search term or video title. We do not track every click. Only actions needed to understand the user journey and its sticking points are recorded.

4. Processing Purposes

Your data is used to:

• Create and manage your user account
• Provide extension features
• Improve our services
• Ensure extension security
• Contact you for important information
• Comply with our legal obligations

5. Legal Basis for Processing

The processing of your personal data is based on: (1) Your consent when creating your account, (2) Contract performance (service provision), (3) Our legitimate interests (service improvement, security), (4) Compliance with legal obligations.

6. Retention Period

The detailed usage journal is kept for no more than 180 days. Account data is retained while the account is in use, then archived for 3 years after deletion unless a legal requirement sets a different period.

7. Data Sharing

Your data may be shared with:

• Supabase : Database hosting (GDPR compliant)
• Vercel : Application hosting (GDPR compliant)
• YouTube API : For video analysis (public data only)

We never sell your data to third parties. All our subcontractors are subject to strict confidentiality obligations.

8. Data Security

We implement technical and organizational security measures:

• Password encryption (bcrypt)
• Encryption of sensitive API keys
• Secure HTTPS connections
• Secure authentication (Supabase Auth)
• Regular backups
• Monitoring and intrusion detection

9. Your Rights (GDPR)

In accordance with GDPR, you have the following rights:

• Right of access: Obtain a copy of your data
• Right to rectification: Correct your inaccurate data
• Right to erasure: Delete your data
• Right to restriction: Limit the processing of your data
• Right to portability: Receive your data in a structured format
• Right to object: Object to the processing of your data
• Right to withdraw consent: At any time

To exercise your rights, contact us via aidigital.fr. We will respond within one month.

10. Cookies and Similar Technologies

We use essential cookies for the operation of the extension (authentication, preferences). No advertising or third-party tracking cookies are used.

11. International Transfers

Your data is hosted within the European Union. In case of transfer outside the EU, we ensure that appropriate safeguards are in place (standard contractual clauses, Privacy Shield, etc.).

12. Policy Changes

We may modify this privacy policy. You will be informed of important changes by email. The current version is always available on this page.

13. Complaint

If you believe your rights are not being respected, you can file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr