EarlySignal Privacy Policy

Effective: August 15, 2026 · Version 2026-08-15

EarlySignal helps YouTube creators identify repeated audience questions and evaluate content opportunities. This policy explains what we collect, why we use it, and the choices available to account holders.

Information we collect

• Account data: name, email address, password hash, consent version, authentication sessions, and workspace settings.
• Public YouTube data: channel and video identifiers, titles, public statistics, public comments, and the minimum commenter identifiers needed to deduplicate and cluster evidence.
• Product activity: decisions, saved briefs, linked published videos, outcome checkpoints, and operational events needed to run and improve the service.
• Technical data: security logs, provider request metadata, error details, and coarse request information used for abuse prevention and reliability.

We do not require a YouTube password, store full videos, or access private or login-only content. Provider credentials remain server-side.

How we use information

We use account information to authenticate users, deliver the service, send requested account and weekly product emails, protect the platform, provide exports, and honor deletion requests. Public YouTube evidence is used to find repeated questions, calculate deterministic rankings, generate grounded briefs, and measure published outcomes.

AI processing

Language models may summarize stored evidence and produce grounded planning material. They do not set deterministic demand scores. Generated claims are checked against stored source identifiers before being shown.

Service providers

We may use infrastructure, email-delivery, database, monitoring, YouTube data, and language-model providers as processors. We send only the information needed for each task and do not sell personal information.

Retention

Account data is kept while an account is active and during the documented seven-day deletion grace period. Security and delivery audit records may be retained for legitimate security and compliance needs. Public evidence and aggregated, de-identified corpus data may remain after an account is removed because it is not owned by an individual workspace.

Your choices

Account owners can export their account data, unsubscribe from weekly email with one click, and request account deletion from Settings. A deletion request immediately revokes active sessions and permanently removes account identity after seven days. Contact us during that grace period if a request was made in error.

Security and international processing

We use hashed credentials and tokens, secure cookies in production, origin checks on state-changing requests, access controls, backups, and provider isolation. No online service can guarantee absolute security. Information may be processed where our service providers operate, subject to applicable safeguards.

Contact and changes

Questions or privacy requests may be sent to privacy@esignal.tech. Material changes will receive a new document version and, when required, renewed consent.