Privacy Policy

Brevyd (the “Service”) is operated by Derivo Labs LLC (“we”, “our”, or “us”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Brevyd website at brevyd.com and the Brevyd Chrome extension.

1. Data We Collect

We may collect the following types of information:

• Account information: your name, email address, and authentication credentials when you create an account.
• Usage data: information about how you interact with the Service, including pages visited, features used, and timestamps.
• YouTube preferences: the channels and creators you choose to follow, your bookmarks, and search queries.
• Device information: browser type, operating system, IP address, and device identifiers.

2. Browser Extension

The Brevyd Chrome extension runs only on YouTube watch pages and is triggered by the user clicking “Digest This Video” or “Ask the video.” It does not run on, scrape, or monitor any other tab or site.

When you click one of those buttons, the extension collects and transmits the following to our servers at brevyd.com:

• Your Brevyd authentication token — stored locally in your browser via chrome.storage.local after you paste it once, and sent to brevyd.com to identify your account.
• The transcript of the YouTube video you actively requested a digest or Q&A for. The extension extracts this from YouTube’s caption track and sends it to brevyd.com to generate the summary or answer.
• The YouTube video ID and URL of that watch page. Not collected from any other tab.
• Questions you type into Ask the video, so we can generate an answer and store the conversation against your account.
• Issue reports you submit via the in-panel “Report this issue” button, including the video and any error context attached.

The extension does not transmit your YouTube cookies. Your YouTube SAPISID cookie is read locally only to compute a SAPISIDHASH signature required by YouTube’s InnerTube API to fetch the transcript. Only the resulting hash is sent — to youtube.com, as an Authorization header on a YouTube-bound request. The raw cookie value never leaves your browser and is never transmitted to brevyd.com or to any third party.

The only third-party services involved in the extension flow are Anthropic (for AI generation), Supabase (for storage), and Vercel (for hosting brevyd.com). All of these are named in section 4 below. The extension itself contains no analytics, tracking, or advertising SDKs.

3. How We Use Your Data

• To provide, operate, and maintain the Service.
• To generate AI-powered video summaries based on your followed creators.
• To send you digest emails and notifications you have opted into.
• To improve and personalise your experience.
• To communicate with you about updates, security alerts, and support.
• To detect, prevent, and address technical issues or abuse.

4. Third-Party Services

We use the following third-party services to operate Brevyd. Each has its own privacy policy governing how they handle data:

• Supabase — database and authentication.
• YouTube API (Google) — fetching video metadata and transcripts from public YouTube content.
• Anthropic (Claude) — AI-powered summarisation of video content.
• Vercel — hosting and deployment infrastructure.
• Resend — transactional and digest email delivery.

5. Cookies

The brevyd.com website uses essential cookies to maintain your session and authentication state. You can control cookie preferences through your browser settings; disabling essential cookies may affect your ability to use the Service.

The Chrome extension does not set or transmit cookies. As noted in section 2, it reads your YouTube SAPISID cookie locally only to sign requests against YouTube’s own API. The cookie value never leaves your browser.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Request a portable copy of your data.
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, please contact us at privacy@brevyd.com.

8. Contact Us

If you have questions about this Privacy Policy, please contact us at: