Privacy Policy

1. Who we are

Skim It is a subscription tool that monitors YouTube channels you choose, generates AI-written summaries of new videos, and emails you a digest on a schedule you select. The Service is operated by Parker Oak Holdings. For privacy questions, contact us at privacy@getskimit.com.

2. Information we collect

We collect the following categories of information:

• Account & identity. Your email address and a password (passwords are hashed and managed by our authentication provider — we never see your plaintext password). If you sign in with Google, we also receive your first name, last name, profile picture URL, and Google account identifier. These name and avatar fields are not collected for email/password sign-ups.
• Profile & preferences. Your timezone, digest frequency, preferred delivery hour, and interface preferences (such as inbox layout settings).
• Subscriptions & activity. The YouTube channels you subscribe to within Skim It, and per-video state you generate by using the Service — for example which summaries you have read, starred, archived, or had delivered to you, and the associated timestamps.
• Billing information.For paid plans, we store a Stripe customer identifier, subscription identifier, subscription status, billing-period dates, and your plan tier. Your usage against plan limits is calculated on demand from your activity rather than stored as a separate counter. Payment card details are handled entirely by Stripe — see "What we do not collect" below.
• Support content. The subject and message text of any support or feature-request tickets you submit, and our replies.
• Information collected automatically.We use Vercel Analytics to understand aggregate usage and performance (such as page views and load times). We also set a small number of functional cookies and browser-storage values to remember your interface preferences. See "Cookies and local storage" below.

3. What we do not collect

To be clear about our boundaries, we do not:

• Read, import, or store your personal YouTube subscription list, watch history, or any private YouTube account data. Skim It builds its channel catalog from public YouTube data and from channels you explicitly add — it does not connect to your YouTube account.
• Store your payment card number or other full payment credentials — those are handled solely by Stripe.
• Use advertising trackers, sell your personal information, or place email open/click tracking pixels in our messages.

4. How we use your information

We use the information we collect to:

• Provide the Service — detect new uploads on your channels, generate summaries, and send your scheduled digest and other transactional emails;
• Manage your account, plan, billing, and usage limits;
• Respond to your support and feature-request tickets;
• Maintain the security and integrity of the Service and prevent abuse;
• Understand aggregate usage and performance to improve the product; and
• Comply with our legal obligations.

We do not sell your personal information and we do not use it for third-party advertising.

5. Legal bases for processing (GDPR)

If you are in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases to process your personal data:

• Performance of a contract — to deliver the Service you sign up for, including summaries, digests, and billing;
• Legitimate interests — to secure the Service, prevent abuse, and understand aggregate usage to improve the product, balanced against your rights;
• Consent — where required, for example optional preferences you choose to provide; and
• Legal obligation — where we must retain or disclose information to comply with the law.

6. AI summaries and what we share with AI providers

To produce a summary, we retrieve the transcript of a public YouTube video and send that transcript, along with the video and channel titles, to our AI provider (Anthropic) for summarization. We do not send your name, email, account identifier, or any other personal identifier to the AI provider or to our transcript provider — they receive only video content and identifiers. Generated summaries are stored once per video and shared across all subscribers to that video.

7. Third-party sub-processors

We rely on the following service providers to operate Skim It. Each receives only the data needed for its function:

• Supabase — database, authentication, and realtime (stores your account and application data);
• Vercel — application hosting and, via Vercel Analytics, aggregate usage and performance metrics;
• Inngest — background job orchestration (processes video and user identifiers to run the pipeline);
• Anthropic — summary generation from video transcripts (no personal identifiers sent);
• Supadata — transcript retrieval (receives a video identifier only);
• Google / YouTube Data API — public channel and video metadata and thumbnails (requested with our API key, not your identity);
• Resend — transactional and digest email delivery (receives your email address and message content);
• Stripe — payment processing for paid plans (receives your email and payment details).

8. Cookies and local storage

Skim It uses only functional cookies and browser storage — we do not use advertising or cross-site tracking cookies. Specifically:

• Functional cookies remember interface preferences such as your inbox density and whether thumbnails are shown.
• Local storage in your browser remembers preferences such as sidebar state, reading-pane layout, and your recent searches. These values stay on your device and are not transmitted to us.
• Analytics from Vercel Analytics measures aggregate page views and performance and does not build advertising profiles.

You can clear cookies and local storage at any time through your browser settings; doing so resets these preferences.

9. Data retention

We retain your account information for as long as your account is active. Summaries and transcripts are stored as shared records to power the Service. Support tickets are retained to maintain a history of your requests. When you delete your account (see "Your rights"), your personal data and account-specific records are removed, except where we must retain certain information to comply with legal obligations or resolve disputes.

10. Data security

We protect your information using industry-standard measures, including encryption in transit, row-level security that isolates each user's data, and restricted administrative access. No method of transmission or storage is completely secure, but we work to safeguard your information and to limit access to those who need it to operate the Service.

11. International data transfers

Our service providers are primarily located in the United States, so your information may be processed there. Where we transfer personal data from the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

12. Your rights

Regardless of where you live, you may request to access, correct, export, or delete your personal information, and you may object to certain processing. To exercise these rights, or to delete your account, email privacy@getskimit.com and we will respond within a reasonable time.

13. Your rights in the EEA and UK (GDPR)

If you are in the EEA or the UK, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your data ("right to be forgotten");
• Restrict or object to certain processing;
• Receive your data in a portable, machine-readable format (data portability);
• Withdraw consent where processing is based on consent; and
• Lodge a complaint with your local data-protection supervisory authority.

14. Your rights in California (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect (described in "Information we collect" above), to request access to or deletion of that information, and to request correction of inaccurate information. You also have the right not to be discriminated against for exercising these rights.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. To exercise your California rights, email privacy@getskimit.com.

15. Children's privacy

Skim It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

16. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you by email or in-product notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

17. Contact

Questions about this policy or our data practices? Email privacy@getskimit.com. You can also review our Terms of Service.