arlivo

Privacy Policy

Last updated: February 15, 2026

1. Introduction

Parlivo ("we", "our", "us") operates the Parlivo platform at parlivo.app. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our service.

By using Parlivo, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our service.

2. Data We Collect

2.1 Account Information

When you create an account, we collect:

  • Name
  • Email address
  • Profile picture (if you sign in via Google OAuth)
  • Hashed password (if you use email/password authentication)

2.2 YouTube Data

When you connect a YouTube channel, we access and store:

  • Channel metadata (name, description, subscriber count, profile image)
  • Video metadata (titles, descriptions, publish dates, view/like/comment counts, thumbnails)
  • Public comments and replies on your videos

We access this data through the YouTube Data API v3. We do not access your private YouTube account, analytics, revenue data, or any data from other channels you do not explicitly connect.

2.3 Usage Data

We automatically collect:

  • Pages visited and features used
  • Analysis and chat usage counts (for billing purposes)
  • IP address (for rate limiting only, not stored long-term)
  • Browser type and device information

2.4 Payment Data

Payment processing is handled entirely by Stripe. We do not store your credit card number, CVC, or full card details. We only receive from Stripe: your subscription status, plan type, and billing period dates.

3. How We Use Your Data

  • Provide the service: analyze YouTube comments using AI, generate insights, and power the RAG chat
  • AI processing: comments are sent to third-party AI providers (Google Gemini, OpenAI) for analysis and embedding generation. These providers process data according to their own privacy policies and do not use your data for training.
  • Billing: track usage to enforce plan limits and process payments via Stripe
  • Communication: send transactional emails (verification, password reset) via Resend
  • Security: rate limiting, fraud prevention, and abuse detection
  • Improvement: understand how the platform is used to improve features

4. Third-Party Services

We use the following third-party services that may process your data:

  • YouTube Data API v3 (Google) - accessing public YouTube data
  • Google Gemini - AI analysis of comments
  • OpenAI - generating text embeddings for search
  • Stripe - payment processing
  • Neon - PostgreSQL database hosting (EU region)
  • Resend - transactional emails
  • Upstash - rate limiting (Redis)
  • Vercel - application hosting
  • Trigger.dev - background job processing

Each service operates under its own privacy policy. We recommend reviewing their policies for details on how they handle data.

5. Google API Services Disclosure

Parlivo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Storage and Security

  • Your data is stored on servers located in the European Union (Neon PostgreSQL, eu-central-1)
  • All data is encrypted in transit (TLS/HTTPS) and at rest
  • Passwords are hashed using industry-standard algorithms
  • Authentication sessions use secure, HTTP-only cookies
  • We implement rate limiting to prevent abuse
  • Access to production data is restricted to authorized personnel only

7. Data Retention

  • Account data: retained as long as your account is active
  • YouTube data: retained as long as the channel is connected. Removed when you disconnect the channel or delete your account
  • Analysis results: retained as long as the associated video exists in your account
  • Chat history: retained as long as your account is active
  • IP addresses: used transiently for rate limiting, not stored permanently

When you delete your account, all associated data (channels, videos, analyses, chat history, embeddings) is permanently deleted within 30 days.

8. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

  • Access - request a copy of the personal data we hold about you
  • Rectification - request correction of inaccurate data
  • Erasure - request deletion of your data ("right to be forgotten")
  • Portability - request your data in a structured, machine-readable format
  • Restriction - request that we limit the processing of your data
  • Objection - object to certain types of processing

You can exercise most of these rights directly from your account settings (e.g., updating your name, deleting your account). For any other request, contact us at contact@parlivo.com.

9. Cookies

We use the following cookies:

  • Authentication cookies (essential) - maintain your login session. These are strictly necessary and cannot be disabled.
  • Locale preference (functional) - remember your language choice
  • Theme preference (functional) - remember your light/dark mode choice

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

10. Children's Privacy

Parlivo is not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our platform. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For any questions about this Privacy Policy or your data, contact us at:

contact@parlivo.com