What data we process
- Telegram account information you provide via the Telegram Login Widget: numeric user ID, first name, last name (if set), username (if set), language code, and the HMAC signature Telegram issues to prove the login. We never receive your phone number or password.
- Authentication token (JWT) issued by our server after Telegram login. In the Chrome extension the token is stored in
chrome.storage.local on your own device. - YouTube video metadata and subtitles you submit: video ID, video title, subtitle language, and the subtitle text extracted from the YouTube page you are currently viewing. This data is sent to our server only when you click a “Full text” or “Summary” button in the extension.
- Audio and video files you upload to the Telegram bot, together with duration and size, processed for transcription.
- Usage and billing records: balance in seconds, Telegram Stars purchases, counts of successful and failed jobs, and processing logs (timing and cost).
What we do not collect
- We do not collect your browsing history, cookies from other sites, or any page content outside of YouTube pages you explicitly submit.
- We do not read or write data on non-YouTube tabs. The extension's
activeTab permission is used only on the active YouTube watch page and only when you click a button in the extension popup. - We do not use cookies or analytics for tracking.
How we use the data
- To authenticate you and keep you signed in (JWT cookie / local token).
- To transcribe and summarize the media you submit and return the result to your Telegram chat or browser.
- To track your remaining balance in seconds and record Telegram Stars purchases.
- To diagnose errors and improve reliability (processing logs).
Third-party services
To deliver the service we send the content you submit to the following providers. Their own privacy policies apply:
- OpenAI — for speech-to-text transcription (Whisper / GPT-4o-transcribe) and GPT-based summarization.
- Telegram — for bot messaging, login, and payments via Telegram Stars.
- YouTube — subtitle data is read by the extension from pages you are viewing on youtube.com. We do not call YouTube APIs on your behalf.
We do not sell, rent, or share your personal data with any other third party. Data is not used for advertising.
Data retention
Transcription results, YouTube summaries, processing logs, and billing records are stored in our database for as long as your account exists so you can access your history. You can request deletion of your account and associated data by contacting us at privacy@napole.ru. For regular (non-admin) users, the raw transcription text is not stored inside internal processing logs.
Security
All traffic to our servers is encrypted with TLS. Authentication tokens are stored locally on your device; server-side secrets are stored in encrypted form.
Children
The service is not directed at children under 13. If you believe a child has provided data, contact us and we will delete it.
Changes
If this policy changes we will update the “Last updated” date above. Material changes may also be announced via the Telegram bot.