Privacy Policy

The short version

Resculpt stores the videos you upload, the scripts and voiceovers it makes from them, and — if you connect one — permission to upload to your YouTube channel along with the public figures showing how those videos then did. It does not sell anything to anyone, does not show advertising, and runs no third-party analytics or tracking. You can delete your account and its media at any time from Settings.

What we collect

• Your account. Your email address, and the name and profile picture your sign-in provider gives us. If you sign in by email link, only the address.
• What you upload. Video files, and any music you add.
• What we derive from it. A transcript of the original narration with word timings, the rewritten script, the synthesized voiceover audio, and the rendered output file.
• Connected YouTube channels.The channel's ID, title, handle and thumbnail, and an OAuth refresh token so we can upload on your behalf later. The token is encrypted before it is stored.
• Public figures from a connected channel. While a channel is connected we record, on a schedule, its subscriber, view and video counts, and the title, publish date, thumbnail and view, like and comment counts of the videos on it. We keep each reading rather than only the latest one, because a single number cannot tell you whether a video is still growing.
• Scheduled uploads. The title, description, tags, scheduled time and privacy setting you chose, and the resulting YouTube video ID.
• An activity log. Which processing steps ran, when, how long they took, roughly what they cost us, and the error message if one failed. This is how we bill, and how we can tell you why something did not work.
• A session cookie. One, so you stay signed in. There are no advertising cookies and no tracking pixels.

If you connect a YouTube channel

Resculpt uses YouTube API Services. Connecting a channel is entirely optional — every other part of the product works without it, and you can download your finished video instead.

We ask for two permissions, and this is everything we do with them:

• Upload videos (youtube.upload) — to upload a video you made in Resculpt and scheduled, one upload per scheduled video. We never edit or delete anything already on your channel, and never touch comments, playlists, ratings or subscriptions.
• See your channel details (youtube.readonly) — read when you connect, to get your channel's name and thumbnail so you can tell which channel you connected, and then on a schedule for as long as the channel stays connected, to collect the figures the Analytics page is built from: your channel's subscriber, view and video counts, and the title, publish date, thumbnail and view, like and comment counts of the videos on it. This covers every video on the channel, not only the ones we uploaded, because the page answers whether the videos we rebuilt did better than the ones we did not. These are the same public figures any visitor to your channel can see, with one exception: as the channel's owner we are shown your subscriber count even when you have hidden it from the public. When it is hidden we record nothing for it rather than the number, so it is not stored and not displayed. We do not read the text of comments, your subscriptions, or the private analytics in YouTube Studio — watch time, traffic sources and audience demographics need a separate permission we do not ask for. Collection stops the moment you disconnect.

We do not use YouTube API data to train machine learning or AI models, and we do not share it with anyone for that purpose.

Disconnecting a channel in Settings deletes our stored token and revokes our access at Google. Collection stops there and then; the figures already collected stay, so the Analytics page still shows what happened, and they go when you delete your account. Videos already uploaded to YouTube stay on YouTube — deleting data from Resculpt does not delete anything from your YouTube channel, and you would need to remove those from YouTube Studio yourself.

Who else sees it

We do not sell your data and we do not share it for advertising. Running the product means passing parts of it to service providers who process it on our behalf, and only for that purpose:

• OpenAI or Anthropic — receives your transcript and script text in order to rewrite it and to write a title and description.
• ElevenLabs — receives the original audio to transcribe it, and the new script text to speak it.
• Vercel — hosting, and the private storage your media sits in.
• Railway — our database, and the container that renders and uploads video.
• Resend — sends sign-in emails, if you use an email link.
• Apify — used only if you import a video by pasting a link, to fetch that video.
• Google / YouTube — receives the finished video and its details, only for uploads you schedule.

We may also disclose information if the law requires it, or to investigate abuse of the service.

Where it is kept, and for how long

Media is stored in private storage and is served only over short-lived signed links, so a URL alone does not grant anyone access. Your YouTube refresh token is encrypted before it is written to the database. Encryption at rest protects a leaked backup or database access; it cannot protect against a compromise of the running service, which necessarily holds the key.

We keep your projects and media until you delete them. Deleting a project removes its media immediately and keeps a minimal record that the project existed, for billing history. Deleting your account removes your projects, your uploads, your connected channels, your stored tokens, and every figure we collected from those channels.

Your choices

• Delete any project, and its media goes with it.
• Disconnect a YouTube channel in Settings at any time.
• Revoke our access directly at the Google security settings page, which works even if you never open Resculpt again.
• Delete your whole account in Settings. This is immediate and cannot be undone.
• Ask us anything, or ask for a copy or deletion of your data, at mrdailystacks@gmail.com. We will respond within 30 days.

Children

Resculpt is not intended for anyone under 13, and we do not knowingly collect information from them. If you believe a child has given us information, email us and we will delete it.

Changes

If this policy changes in a way that materially affects how we handle your data, we will say so on this page and update the date at the top before the change takes effect.

Contact

mrdailystacks@gmail.com.