Privacy Policy

What we collect.

• Account data: email address and plan status when you create an account or purchase a plan.
• Payment data: handled entirely by our third-party payment provider, which acts as merchant of record. We never see or store your card details; the provider's own privacy policy applies to the checkout.
• Usage data: plan-limit counters (e.g. bulk runs used today) needed to operate the free and paid tiers.
• Extension data: the extension reads the YouTube pages you open or the URLs you submit in order to extract links, transcripts, thumbnails, and public metadata. RapidFetch is intended for your own channel and content you are authorized to access, and you are responsible for having the rights to anything you extract. All extraction happens locally in your browser; the content of videos, transcripts, and channels you extract is never sent to or stored on our servers.

Why we can process your data (legal bases).

Where laws like the GDPR/UK GDPR apply, we process personal data to: perform our contract with you (create your account and provide the Service); pursue our legitimate interests (operate, secure, and improve the Service, and prevent abuse); comply with legal obligations; and, where required, with your consent, which you can withdraw at any time.

What we don't do.

We do not sell personal data. We do not use extension data for advertising, profiling, or any purpose unrelated to the extraction you requested.

Chrome Web Store Limited Use.

Our use of data obtained through the extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements: data is used only to provide the user-facing extraction features, and is not transferred to third parties except as needed to provide the feature, comply with law, or as part of a merger/acquisition with notice.

Processors we use.

A third-party payment provider (merchant of record for purchases), plus cloud hosting and database providers, and Google (for account sign-in). Each processes data only to provide its part of the service.

International transfers.

We operate from Pakistan and use service providers that may be located in other countries. Where we transfer personal data from the EEA, the UK, or similar regions, we rely on appropriate safeguards such as Standard Contractual Clauses. Contact us for details.

Team and Business accounts.

For Business or team plans, the account owner controls their team members’ data and acts as the data controller; we act as a processor on their behalf and process that data only to provide the Service. A Data Processing Addendum is available on request at support@rapidfetch.io.

Security and data breaches.

We use reasonable technical and organizational measures to protect your data. No system is perfectly secure, but if a breach affects your personal data we will notify affected users and, where the law requires, the relevant authorities, without undue delay.

Retention.

Account data is kept while your account is active and deleted within 30 days of a deletion request. Usage counters rotate continuously.

Your rights.

Depending on where you live (e.g. GDPR/UK GDPR, CCPA), you may request access, correction, deletion, or export of your personal data, and object to processing. Email support@rapidfetch.io; we respond within 30 days. We don't discriminate for exercising rights, and you may also complain to your local data-protection authority.

Children.

The Service is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, email support@rapidfetch.io and we will delete it.

Changes.

We'll post updates here and note the date above; material changes will be announced.