Privacy Policy

1. What we collect

• Email address — used to sign you in with a magic link, to send you notices about your critiques and billing, and as your account identifier.
• Links you submit — the YouTube URLs you ask Plumb to measure, the transcripts retrieved for them, and the critiques produced.
• Billing records — your subscription plan, credit balance history, and a Stripe customer reference. Card details go directly to Stripe and are never stored by Plumb.
• Basic technical data — server logs with IP address, browser type, and request timing, kept for security and debugging.

Plumb does not use advertising trackers, analytics cookies, or third-party marketing pixels.

2. Cookies

Plumb sets only the cookies needed to keep you signed in. There are no tracking or advertising cookies, which is why there is no cookie banner.

3. How your data is used

To provide the service: sign you in, retrieve the transcript for a video you submit, generate the critique, deliver it to you, and bill your account. To keep the service secure and working. To contact you about your account, your critiques, or changes to these policies. We do not sell your data and do not use it for advertising.

4. Who we share it with

Plumb runs on a small set of service providers, each receiving only what its job requires:

• Supabase — database and authentication (your email and account data).
• Stripe — payments and subscriptions (your email and payment details, handled under Stripe's own privacy policy).
• Anthropic — the model that generates critiques receives the video transcript. It does not receive your email or identity.
• Supadata — retrieves YouTube transcripts; receives only the video link.
• Resend — sends transactional email (your email address and the message).
• Vercel — hosts the application and holds server logs.

We will also disclose data if required by law or to protect the service and its users from abuse.

5. Your critiques

Critiques are private to your account by default. A critique becomes visible to others only if you choose to publish it to the public archive. Published critiques display the video and the critique, not your identity.

6. Retention

Account data and critiques are kept for as long as your account exists. Billing records are kept as long as required for tax and accounting purposes. Server logs are kept for a limited period for security. When you close your account, your personal data is deleted except where we must retain it by law; published critiques are unpublished at the same time.

7. Your rights

You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete your account and data. Email alexherndon@gmail.com and we will respond within thirty days. Depending on where you live you may have additional rights under local law, which we will honor.

8. Children

Plumb is not directed at children under 13 and does not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

9. Security

Data is encrypted in transit, access to production systems is limited, and sign-in never involves a password that could be leaked. No system is perfectly secure; if we learn of a breach affecting your data we will tell you.

10. Changes and contact

We may update this policy; the date at the top will change when we do. Questions: alexherndon@gmail.com.