Ayuti reads YouTube videos for you and sends you what they said. To do that it needs your email address and the channels you care about — and not much else. Nothing here is sold, and nothing is used for advertising.

This notice is provided under Articles 13 and 14 of the GDPR (Regulation (EU) 2016/679). Cookies have their own page: cookie policy.

Who is responsible

The data controller is Alberto Clemente, who runs Ayuti as an individual. You can reach him at clemalb@gmail.com for any question about this notice or to exercise the rights below.

What Ayuti collects, and why

Your account

Your email address, and your language preference. Ayuti has no passwords: you sign in through a one-time link sent to that address, so the address is the account. Legal basis: performance of the contract between you and Ayuti.

What you ask Ayuti to watch

The YouTube channels you configure, your delivery schedule, and the address reports are sent to. Legal basis: performance of the contract.

What Ayuti produces for you

Transcripts, summaries, extracted highlights, the knowledge graph, the Brief and the PDF reports built from the videos you follow, together with a record of which videos have been processed so the same one is not sent twice. These are stored against your account so you can read them again. Legal basis: performance of the contract.

Questions you ask

The questions you type on the Ask page are sent to OpenAI, together with the passages of your own transcripts they are answered from. Legal basis: performance of the contract.

Payments, if you subscribe to Ayuti Pro

Payment is handled by Stripe. Your card details go straight to Stripe and never reach Ayuti: the checkout page and the billing portal where you cancel are hosted by Stripe, not by us, so there is no card number for Ayuti to store or to lose. Ayuti sends Stripe your email address and your account identifier, so the subscription can be matched to the right account. In return it stores only the Stripe customer and subscription identifiers, whether the subscription is active, and the date the current period ends. Legal basis: performance of the contract.

Email delivery records

Which emails were sent to you and whether they were delivered, so failures can be diagnosed and retried. Legal basis: legitimate interest in running a service that demonstrably works.

Technical logs and error reports

Server logs and, when something breaks, an error report. Error reports are configured not to include personal data. Legal basis: legitimate interest in the security and reliability of the service.

Analytics

Page views and feature usage, and how you first found Ayuti (the campaign tag or referring site of the link you followed, kept with your account if you sign up), but only if you accepted analytics in the cookie banner. Legal basis: your consent, which you can withdraw at any time from the footer of any page.

Who else sees it

Ayuti does not sell data and does not share it for advertising. It does rely on a small number of suppliers, each bound by contract and each acting only on Ayuti's instructions, except where noted otherwise below:

• Vercel — hosting and delivery of the site.
• Neon — the database where your account and transcripts are stored.
• Resend — sending your sign-in links and report emails.
• Stripe — payments and subscriptions, if you subscribe to Ayuti Pro. Unlike the others, Stripe is not merely acting on Ayuti's instructions: for the payment itself it is a data controller in its own right, under its own privacy policy.
• PostHog — product analytics, on European servers, and only with your consent.
• Sentry — error monitoring, configured to exclude personal data.
• OpenAI — cleans up transcripts, writes summaries, answers your questions on the Ask page and writes the Brief. It receives the text of the videos you follow and, when you use Ask, your question with the relevant passages of your transcripts; not your email address.
• Google (Gemini API) — divides transcripts into sections. It receives the text of the videos you follow, not your account details.
• Supadata — retrieves the captions of the YouTube videos you follow. It receives only the video identifier.
• YouTube (Google) — consulted to read public video metadata and transcripts for the channels you choose. Ayuti sends no personal data of yours to YouTube.
• Canny — the public feedback board, if you choose to post to it.

Data may also be disclosed where the law requires it.

Transfers outside Europe

Some of these suppliers are based in the United States. Where data reaches them, the transfer relies on the European Commission's Standard Contractual Clauses or on an adequacy decision. Analytics data stays on European infrastructure.

How long it is kept

• Your account and everything attached to it: for as long as the account exists.
• Sign-in links: they expire shortly after being issued and are single-use.
• Email delivery records and technical logs: retained only as long as they are useful for diagnosing problems.
• Analytics: up to 12 months.
• Subscription and payment records: for as long as tax and accounting law obliges Ayuti to keep them, which outlasts the account itself.

Delete your account from Settings → Your data (or ask us to) and almost everything goes with it — the exception is the billing records above, which the law requires to be kept. You can also download a copy of all your data there at any time.

What you can do

Under the GDPR you have the right to ask for a copy of your data, to have it corrected, to have it deleted, to restrict or object to how it is used, and to receive it in a portable format. Where processing rests on consent, you can withdraw that consent at any time without affecting what was done beforehand.

If you believe your data has been mishandled you can complain to the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority where you live.

Automated decisions

Ayuti uses a language model to summarise videos, but it makes no automated decisions that produce legal effects for you or similarly affect you.

Children

Ayuti is not intended for children under 14 and does not knowingly collect their data.

Changes to this notice

If this notice changes, the date at the top changes with it. Material changes will be announced in the app.