Privacy Policy

1. Who is responsible

The data controller is KnowStash S.R.L., Romania. For anything privacy-related, write to support@knowstash.ai.

2. What we collect, and why

• Account data: your email address, display name, and sign-in identity (password hash held by Firebase, or your Google account link). Why: to create and secure your account. Legal basis: contract.
• Your content: the videos you stash (identifiers, transcripts, and derived data), the notes generated for you, your prompts, collections, queues, and monitor configurations. Why: this is the service. Legal basis: contract.
• Usage & billing records: your credit balance, a ledger of credit grants and spends, and per-action spend history. Why: metered pricing needs a meter; you see the same records we do. Legal basis: contract, plus legal obligations (accounting).
• Payment data: handled by Paddle, our merchant of record. We receive confirmation of payments, the package purchased, and invoice metadata, never your card number. Legal basis: contract.
• Support correspondence: emails you send us. Why: to help you. Legal basis: legitimate interest.
• Marketing email choices (optional): which marketing emails you've asked for (product updates and offers are separate choices), and a record of when you gave or withdrew each. Why: so we only send news to people who asked, and can prove it. Legal basis: consent (Art. 6(1)(a) GDPR), withdrawable anytime (section 6).
• Technical data: server logs (including IP addresses) and bot-check signals, kept briefly. Why: security, abuse prevention, and rate limiting. Legal basis: legitimate interest.

We do not run advertising, sell personal data, or track you across other sites, and we make no automated decisions about you that have legal or similarly significant effects.

3. The browser extension

The KnowStash Chrome extension is one of the ways to use the service, and this policy covers it in full. What it does in your browser, precisely:

• It only runs on YouTube. The extension activates on youtube.com and nowhere else. It does not collect your browsing history, and it does not scrape or transmit page content. The only things that ever leave your browser are listed next.
• What it sends to our servers: your sign-in (email address and authentication token), the identifiers (video ID or URL) of YouTube videos you explicitly act on (stash, ask, note, queue, or monitor), and the content you create: questions, notes, prompts, collections, and queues. In addition, to show stash badges on thumbnails and the panel's status for the video you open, the extension checks videos shown on YouTube pages against your library. These checks send the video identifiers to our servers; they happen only while you're signed in, they are read-only lookups of your own library, and they are not kept as a history of what you browse or watch.
• What it keeps locally: your settings, preferences, and signed-in session, cached in the browser's extension storage (chrome.storage). Removing the extension clears them.
• What it never does: no ads, no third-party analytics, no selling of data, and no payment handling. Purchases happen only on knowstash.ai, processed by Paddle; the extension never sees payment details.

Everything the extension sends us is ordinary account data under this policy, so the deletion and erasure routes in section 8 cover it all.

4. AI processing

To generate a note, the relevant video content and your instructions are sent to third-party AI inference providers, which return the note text. We send what the task needs, not your identity. Notes are stored in your library until you delete them.

5. Who processes data for us

• Google Cloud / Firebase: hosting, infrastructure, and authentication (our primary infrastructure runs in the EU).
• Paddle: payments, as merchant of record.
• Resend: email. Transactional messages (confirmation links, password resets, monitor emails) and, only if you opted in, the product updates and offers described in section 6.
• Cloudflare: the Turnstile bot check on public signup forms.
• AI inference providers: note generation, as described above.

Where a provider processes data outside the EEA, the transfer is covered by appropriate safeguards (such as the EU Standard Contractual Clauses or an adequacy decision).

6. Marketing email

If you opt in at signup, or turn them on later in the app's Settings, we'll send you marketing email. There are two kinds, each with its own checkbox and its own consent: product updates (new features and changes to KnowStash) and offers (discounts and plan promotions). The signup form may suggest a choice by pre-selecting the product-updates box; you can untick anything before submitting, what counts is what you leave selected, and neither is ever a condition of creating an account. The legal basis is your consent (Art. 6(1)(a) GDPR).

You can withdraw either consent whenever you like, and it's as easy as giving it was: flip the toggles in Settings, or use the unsubscribe link in the footer of any of these emails. Withdrawing changes nothing else about your account. The emails are sent through Resend, our email processor (section 5). We keep a record of each opt-in and opt-out (when it happened, through which screen, the wording in force at the time, and which boxes came pre-selected), because the GDPR requires us to be able to demonstrate consent (Art. 7). Transactional email (confirmation links, password resets, and the monitor emails you configure yourself) isn't marketing and doesn't depend on these choices.

7. How long we keep things

• Your content and account data: until you delete it, or your account is erased.
• Billing and ledger records: as long as accounting law requires. When an account is erased, these are pseudonymized: your email is replaced with a random token, so the accounting trail no longer identifies you. Payment records held by Paddle follow Paddle's own retention duties as merchant of record.
• Marketing consent records (section 6): kept while your account exists as our proof of consent. When an account is erased, your contact entry at Resend is deleted and the consent records are pseudonymized the same way as the ledger.
• Server logs and bot-check data: short rotation windows (about 30 days), then gone.
• Database backups: expire automatically on a rotation of about a week. Erased data can persist in backups until then.
• Support email: as long as the conversation is useful to you.

8. Your rights, and deleting your account

Under the GDPR you can ask for access to your data, correction, erasure, portability, restriction, or object to processing based on legitimate interest. Two routes, depending on what you want:

• Wipe your content: the Account page erases all your notes, videos, queues, collections, prompts, and spend history in one action, anytime. Your sign-in and balance stay.
• Delete your account entirely: email support@knowstash.ai from your account address and we erase everything: content, sign-in, subscription, the lot (with the accounting carve-out above). We act without undue delay, in practice within days, always within 30.

For anything else, the same address works. We respond promptly and don't make it weird. You can also complain to a supervisory authority: in Romania that's ANSPDCP (dataprotection.ro), or use the authority of the country you live in.

9. Cookies and local storage

We use browser storage (localStorage and IndexedDB) to keep you signed in and to remember preferences. That's it. The Chrome extension does the same with its extension storage (chrome.storage): your session and preferences, nothing tracked. No advertising or analytics cookies. During checkout, Paddle sets the cookies it needs to process payment; the Cloudflare bot check may set its own when it appears.

10. Children

KnowStash is not directed at children under 16, and we don't knowingly collect their data.

11. Changes

If this policy changes materially, we'll tell you by email or in-app notice before it takes effect. The date at the top always reflects the current version.

12. Contact

KnowStash S.R.L., Romania · support@knowstash.ai