Last updated: 2026-08-12
Gistilo ("we," "us," "our") provides an online tool that summarizes public video content and generates concise notes and insights.
Legal owner: Gistilo, British Columbia, Canada.
Contact: [email protected]
This policy explains what personal data we collect, how we use it, how long we keep it, and your rights. It applies to our website and app at Gistilo.com, our Gistilo browser extension for Chrome and Firefox, and any connected endpoints we operate.
Payments are processed by Stripe. We do not collect or have access to complete payment card details (such as full card number or CVC). We may receive limited billing details (e.g., last four digits, card brand, expiry month/year) from Stripe for receipts and fraud prevention.
The Gistilo extension adds a summary panel to YouTube watch pages. It is active only on youtube.com, and the only server it sends data to is Gistilo.
Stored on your device (browser extension storage; not sent to us except where stated below):
Captions. When you press Summarize, the extension reads the caption track that YouTube publishes for that video and sends the caption text to Gistilo, which is what we summarize. Reading the captions in your browser rather than from our servers is what lets us summarize videos that block requests from data centres. This happens only for a video you explicitly ask us to summarize, never in the background and never for videos you merely watch. If the captions cannot be read, our servers fetch them instead and the result is the same.
Sent to Gistilo when you request a summary:
What the extension does not do:
We do not sell data collected by the extension, do not transfer it to third parties except the processors listed in section 11, and do not use it for advertising or for any purpose unrelated to producing your summaries.
Caption text is used to generate your summary and may be cached so the same video does not have to be processed twice. Summaries you generate while signed in are saved to your account history. Both are covered by the retention and deletion terms in sections 5 and 6. Uninstalling the extension removes the locally stored items above; to delete account data, use the account deletion options described in section 6.
We do not use third‑party advertising cookies.
Depending on your location, you may have rights to access, correct, delete, or export your data, and object to/limit certain processing. To exercise rights, email [email protected] from the address associated with your account. We may verify your identity before acting.
We use reasonable safeguards: HTTPS in transit, hashed passwords, role‑limited access, and Stripe for payments. No method is 100% secure; report issues to [email protected].
The Service is not directed to children under 13 (or the age required in your country). Do not use the Service if you are under that age.
We may interact with third‑party platforms to fetch publicly available information that helps provide the Service (e.g., retrieving basic video metadata). Your use of those platforms remains subject to their terms and privacy policies. We do not connect to or access your personal accounts on those platforms.
We may process data in Canada, the United States, or other countries where our providers operate. When transferring personal data, we use appropriate safeguards (e.g., contractual clauses).
Key providers include payment processors (e.g., Stripe) and hosting/infrastructure vendors. They process data on our behalf under appropriate agreements.
We may update this policy at any time without prior notice (unless notice is required by law). We will post the updated policy with a new "Last updated" date; continued use after the effective date means you accept the changes.
Email: [email protected]
