Privacy Policy

Introduction

SIA "Erik Johansson IT", a company registered in Latvia under registration number 40103797562, with its registered office at Rīga, Miķeļa iela 1 - 27, LV-1010, Latvia ("we," "our," or "us"), operates Watchfully (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

Information We Collect

Personal Information

When you use our Service, we may collect certain personally identifiable information that can be used to identify you, including but not limited to:

• Name and email address (obtained through Google OAuth)
• Google account profile information (name, profile picture)
• YouTube subscriptions when you authorize YouTube read-only access
• Watchfully library data, viewing activity, collections, channel groups, and preferences that you create or use in the Service

Automatically Collected Information

We may automatically collect certain information when you visit, use, or navigate the Service, including:

• Log and usage data (IP address, browser type, device information)
• Device data (device type, operating system)
• Location data (derived from IP address)
• Cookies and similar tracking technologies

How We Use Your Information

We use the information we collect or receive to:

• Provide, operate, and maintain our Service
• Improve, personalize, and expand our Service
• Understand and analyze how you use our Service
• Develop new products, services, features, and functionality
• Communicate with you for customer service, updates, and promotional purposes
• Send you administrative information
• Prevent fraud, abuse, and security incidents
• Comply with legal obligations

YouTube API Services

Our Service uses YouTube API Services to access your YouTube data. By using our Service, you are agreeing to be bound by the YouTube Terms of Service. We access YouTube data needed to provide the Service, including the data you explicitly authorize and public information about content in your Watchfully library:

• Your YouTube subscriptions
• Public channel and video information used in your Watchfully library

Watchfully does not request access to your YouTube watch history. Viewing activity recorded while you use Watchfully is Watchfully service data and is not written to or read from your YouTube watch history.

Watchfully does not create or manage YouTube playlists.

Watchfully's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke our access to your YouTube data at any time by visiting your Google Account's security settings page.

We use Sentry as an error-monitoring service provider. Sentry receives limited diagnostic information to help us investigate reliability and security issues and retains it for up to 30 days. We do not intentionally provide Sentry with OAuth tokens or Google or YouTube API payloads.

Removing Google access, either in Watchfully or through your Google Account, permanently removes the associated OAuth credentials and stops Watchfully from accessing further Google or YouTube data. It does not delete your Watchfully account, library, preferences, or viewing history. You can delete those separately from Settings.

Data Security

We implement appropriate technical and organizational security measures designed to protect your personal information. However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your personal information, we will securely delete or anonymize it.

While your Watchfully account remains active, we retain the name, email address, and profile image provided through Google Sign-In as needed to operate your account, provide sign-in and support, and protect the Service. Removing Google access does not remove this account information; deleting your Watchfully account does.

To help recover from accidental loss or technical failures, we keep encrypted backup copies of Service data for up to six days. Backup copies are access-restricted and are not used in normal operation.

Account Deletion

You can permanently delete your Watchfully account from Settings. This deletes your account profile, sessions, Google credentials, library, viewing data, preferences, and other data stored for your account, and revokes Watchfully's Google access. It does not delete your Google or YouTube account, videos, or subscriptions at Google. We promptly remove the related YouTube API data from our active systems. Limited technical copies may remain in encrypted backups for up to six days and in rolling database binary logs and server logs for up to seven days, or longer where retention is required by law.

To protect Watchfully and enforce introductory or promotional limits, we retain a limited pseudonymous record for up to 12 months after deletion. It contains an HMAC- derived identifier from your normalized email address, not your email address or a copy of your former account. We use it only for security, abuse prevention, repeat-registration detection, confirmation that a deletion occurred, and trial or promotional-limit enforcement. After this period, we remove the HMAC and retain only non-identifying aggregate deletion information. These records are not used to build a historical profile.

You may optionally provide deletion feedback, including a reason and a free-text comment. We store this in the deleted-account record, separately from your active account, alongside the limited HMAC-derived identifier described above. We also record a broad registration-length bucket for aggregate statistics. Please do not include personal information in the comment. After up to 12 months, we delete the HMAC and any free-text feedback, retaining only non-identifying aggregate information, such as the selected reason, deletion date, and registration-length bucket.

Billing, tax, or other records that we are legally required to retain may be kept for their applicable statutory retention periods.

Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following situations:

• Service Providers: We may share your information with third-party service providers who perform services on our behalf (hosting, analytics, customer service).
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• With Your Consent: We may disclose your information for any other purpose with your consent.

Your Data Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: The right to request copies of your personal information.
• Rectification: The right to request correction of inaccurate information.
• Erasure: The right to request deletion of your personal information.
• Restriction: The right to request that we restrict processing of your information.
• Objection: The right to object to our processing of your information.
• Data Portability: The right to request transfer of your information to another organization or directly to you.

To exercise these rights, please contact us at [email protected].

Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Third-Party Links

Our Service may contain links to third-party websites or services that are not owned or controlled by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. We strongly advise you to review the privacy policy of every site you visit.

Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take necessary actions.

International Data Transfers

Your information, including personal data, may be transferred to—and maintained on—computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. By using our Service, you acknowledge that your information may be processed in Latvia and in other countries where our service providers operate, in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

• By email: [email protected]
• By visiting this page: Contact Support