Privacy Policy

Last updated: 12 May 2026

Komodo ("we", "us", or "our") operates the Komodo platform, accessible at usekomodo.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information we collect

We collect information you provide directly to us, including:

• Account information (name, email address) via Clerk authentication
• YouTube account data you authorise us to access (channel name, analytics, video metadata)
• Content you create using our tools (titles, descriptions, thumbnail designs, captions)
• Billing information processed by Stripe (we do not store card details)
• Usage data and log files collected automatically when you use the service

2. How we use your information

We use the information we collect to:

• Provide, maintain, and improve the Komodo service
• Process transactions and send related information
• Generate AI-powered SEO suggestions, thumbnails, and captions personalised to your channel
• Push approved content to YouTube on your behalf when you authorise this action
• Send service-related communications (account notices, security alerts)
• Respond to your comments and questions

3. YouTube API data

Komodo uses the YouTube API Services to connect to your channel. By connecting your YouTube account, you authorise Komodo to access the following data via the YouTube Data API and YouTube Analytics API:

• Channel information — name, handle, avatar, subscriber count, and video count
• Video metadata — titles, descriptions, tags, thumbnails, and upload status
• Channel analytics — views, impressions, click-through rate, average watch time, and related performance metrics
• Video captions — transcript data used to generate SEO suggestions
• Comments — reading comments on your videos and posting replies on your behalf when you explicitly request this

This data is used solely to provide Komodo's features to you — generating SEO metadata, building thumbnails, suggesting comment replies, and displaying your channel analytics. It is never used for advertising, profiling, or any purpose unrelated to operating the Komodo service on your behalf.

We store OAuth tokens securely in our database to maintain your connection without requiring repeated authorisation. When you disconnect your YouTube account within Komodo, your OAuth token is deleted from our systems immediately. You can also revoke access at any time via your Google Account permissions page.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve, or train generalised AI or machine learning models.

4. Data sharing and disclosure

We do not sell your personal data. We do not transfer or disclose Google user data to third parties for advertising, remarketing, data brokering, or any purpose other than providing Komodo's features to you. We may share your information only with:

• Service providers — third parties that help us operate the service (Supabase for database hosting, Clerk for authentication, Stripe for payments, Vercel for hosting, Bunny CDN for video delivery). These providers are contractually prohibited from using your data for any purpose other than providing their services to us.
• AI providers — video transcripts and channel context are sent to Anthropic and OpenAI APIs solely to generate SEO suggestions, thumbnail prompts, and caption outputs for you. This data is processed under their API terms and is not used to train their models. Google user data sent to AI providers is used exclusively to deliver features you have requested and for no other purpose.
• Legal requirements — where required by law, court order, or to protect the rights and safety of Komodo and its users.

5. Data retention and deletion

We retain your account data for as long as your account is active. Generated content (titles, descriptions, thumbnails, captions) is stored so you can access your history within the app. YouTube OAuth tokens are retained only while your channel is connected; they are deleted immediately upon disconnection. You can request full deletion of your account and associated data at any time by contacting us at hello@usekomodo.com. We will action deletion requests within 30 days.

6. Cookies and tracking

We use session cookies necessary for authentication and service functionality. We do not use advertising cookies or cross-site tracking. Analytics, if used, are limited to aggregate usage data to improve the product.

7. Security

We implement appropriate technical and organisational measures to protect your information, including encrypted connections (HTTPS), secure token storage, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your rights (UK & EU)

If you are located in the UK or European Economic Area, you have rights including:

• The right to access your personal data
• The right to correct inaccurate data
• The right to request deletion of your data
• The right to object to or restrict processing
• The right to data portability

To exercise these rights, contact us at hello@usekomodo.com.

9. Children's privacy

Komodo is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a prominent notice on the service. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy, please contact us at:
hello@usekomodo.com