Privacy Policy

Information we collect

• Account information, such as email address, name, role, and account status.
• Usage information, such as feature usage, Token balance changes, model-reported Token totals, request status, timestamps, tool activity, and error logs.
• Research content you provide or create, such as prompts, video links, uploaded media, transcripts, notes, maps, method extraction, Agent Research messages, and script rewrites.
• Technical information, such as browser, device, IP address, cookies, and security logs.
• Payment information handled by Paddle. Oxally does not store your full card number or full payment credentials.

How we use information

• To provide, secure, maintain, and improve Oxally services.
• To process video links, uploads, transcripts, AI requests, research tools, and generated materials requested by you.
• To manage accounts, Token balances, billing records, support requests, abuse prevention, and security controls.
• To comply with legal, tax, accounting, fraud prevention, and payment processing requirements.

Browser Extension: Oxally YouTube Summary & Subtitles

• Extension settings, screenshots, captions, and evidence are stored locally in the browser by default.
• Screenshots are not uploaded automatically.
• The extension reads YouTube video information and captions only after you request a supported action, such as generating a summary or downloading captions.
• Video URLs, metadata, and user-requested captions may be sent to Oxally to provide summary and Research features.
• Oxally may process requested content through configured AI providers such as GPT, Gemini, or Claude.
• Optional screenshot access is used only after you click the YouTube camera button.
• The extension does not continuously monitor browsing activity and does not request cookies or browsing history.
• Device authorization tokens are stored in protected extension storage and can be revoked.

Google Drive connection

• Connecting Google Drive is optional and requires your explicit Google authorization. Oxally requests the drive.file permission, which is limited to files created by Oxally or files you explicitly select or share with Oxally; Oxally does not request permission to search or access your entire Google Drive.
• Google OAuth access and refresh tokens are stored only on Oxally servers in encrypted form. They are not exposed to the browser extension, AI models, or other users.
• Google Drive file metadata or content is accessed only when you request a supported Google Drive operation. Content may be sent to the AI provider selected for that user-requested operation only as necessary to provide the feature.
• Oxally does not sell Google user data, use it for advertising, or use Google Drive content for unrelated purposes.
• Disconnecting Google Drive asks Google to revoke the authorization and removes the stored encrypted credentials after revocation is confirmed. You can also revoke Oxally directly from your Google Account permissions.
• Oxally's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Third-party providers

Oxally may send the material needed for a requested operation to third-party providers for AI model processing, payment processing, hosting, security, media access, search, or data APIs. The provider used depends on the feature, source, and operational availability. These providers process information only as needed to provide their services to Oxally or to you.

Data retention

We keep information for as long as needed to provide the service, maintain billing and security records, comply with legal obligations, resolve disputes, and enforce our agreements. Temporary generated assets and logs may be deleted according to operational retention limits.

Your choices

• You may update certain account information in your user center.
• You may contact us to request access, correction, deletion, or export of your personal information, subject to legal and security limitations.
• You may stop using Oxally at any time.

International processing

Oxally and its providers may process information in countries other than your country of residence. We use reasonable safeguards appropriate to the nature of the service.

Contact

For privacy requests, contact [email protected].