Privacy Policy

SecondTakeAI is a workflow tool for YouTube creators and their teams. It analyzes a channel you own and turns that analysis into video ideas.

The controller responsible for your data is SecondTakeAI, Inc., a Delaware corporation, 2810 North Church Street, Wilmington, DE 19802, United States. Questions about this policy or your data go to privacy@secondtakeai.com.

SecondTakeAI is currently in private beta and available by invitation only.

SecondTakeAI uses YouTube API Services. Connecting your Google account is optional — the app works without it, with fewer signals. If you do connect it, we request exactly two scopes, both read-only. We never request write access, so SecondTakeAI cannot upload, edit, or delete anything on your channel.

Concretely, that means we do not sell your Google data, do not use it for advertising, and do not use it to train generalized AI or machine learning models. We do not allow humans to read it, except with your explicit permission, to resolve a specific support issue you raised, for security purposes, or where required by law. We transfer it only to the service providers listed below, and only to operate the features you asked for.

Your use of YouTube through SecondTakeAI is also governed by the YouTube Terms of Service and the Google Privacy Policy.

Revoking access.You can revoke SecondTakeAI's access to your Google account at any time at myaccount.google.com/permissions. You can also disconnect from inside the app, in your cockpit settings, which deletes the access and refresh tokens we hold. To withdraw the grant on Google's side as well, use the Google link above.

How we store the tokens. Google refresh and access tokens are encrypted with AES-256-GCM before they are written to our database, and are decrypted only in our server runtime at the moment a request to Google is made.

• Account information. Your email address and name, handled by our authentication provider Clerk, plus the plan limits attached to your account.
• Invitations. If you invite a teammate to a cockpit, we store the email address you provide so we can deliver and match the invitation — including before that person has an account.
• Content you create. Cockpit and channel settings, workflow runs, generated ideas, concepts, talking points, thumbnail concepts, and any feedback or notes you write.
• Files you upload. Style reference images used to guide thumbnail generation. We never ask you to upload audio or video.
• Public YouTube data. Video metadata, titles, thumbnails, and comments retrieved from public YouTube endpoints — for your channel and for comparable public channels. See data about other people.
• Usage data. Product analytics about how the app is used, and metering of the API costs each cockpit incurs, so we can enforce spend limits.

We do not collect payment information. SecondTakeAI does not currently process payments through the app.

• To operate the product and the workflow runs you start.
• To analyze your channel and generate ideas, scripts, talking points, and thumbnail concepts.
• To authenticate you and enforce your plan's limits.
• To keep the service secure, debug failures, and understand which features get used.
• To contact you about your account or the beta.

If you are in the EEA or UK, our legal bases are: performance of our contract with you (operating the product), your consent (connecting your Google account, which you can withdraw at any time), and our legitimate interests (security, debugging, and product improvement).

SecondTakeAI is built on third-party AI models. To generate ideas we send content to them — including video transcripts, titles, public comments, channel analysis, and any style references or notes you provide.

We use Google Gemini for text and image generation, and Gladia for transcription. Gladia receives the public YouTube URL of a video and fetches it directly; we do not upload your media. Gladia's transcription also produces speaker separation, sentiment, and named entities from what is said in the video.

We do not use your data to train our own models, and we do not permit our providers to use data received from Google APIs to train generalized models.

We do not sell your personal information. We share it only with the service providers that run the product, each processing data on our instructions:

• Clerk — authentication. Your email, name, and account metadata.
• Convex — our database (United States). All application data described in this policy.
• Vercel — hosting. Serves the app and processes request traffic.
• Inngest — background job orchestration. Job payloads containing workspace, run, and video identifiers.
• Cloudflare R2 — file storage. Generated and uploaded images.
• Google — YouTube Data API, YouTube Analytics API, and Gemini models.
• Gladia — transcription, as described above.
• PostHog — product analytics. Your user ID, email, and name, plus how you use the app.

We may also disclose information where required by law, to enforce our terms, or in connection with a merger or acquisition — in which case we will tell you before your data becomes subject to a different policy.

To benchmark a channel, SecondTakeAI reads data that YouTube makes publicly available. This includes public comments — with the commenter's display name and channel ID — and the public channel names, video titles, and thumbnails of other creators. That data is retrieved through YouTube's public API, stored, and used as analysis input.

We do not use it to contact anyone, build advertising profiles, or identify people beyond what YouTube already publishes. If you appear in this data and want it removed, email privacy@secondtakeai.com.

We keep your data for as long as your account is active, and afterward for as long as we need it to operate the service, resolve disputes, and meet our legal obligations. Cached YouTube data is refreshed as your channel changes.

When you disconnect a Google connection, the stored tokens are cleared from our systems at that point.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict processing, and to withdraw consent. You can exercise any of these by emailing privacy@secondtakeai.com. We handle these requests manually and will respond within 30 days. We will not treat you differently for making a request.

• Disconnect Google — in your cockpit settings, and at myaccount.google.com/permissions.
• Delete your data — email us and we will delete your account and the content associated with it.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

Data is encrypted in transit with TLS. Google OAuth tokens are additionally encrypted at rest with AES-256-GCM, with keys held outside the database. Access to production systems is limited to people who need it. No system is perfectly secure, and we cannot guarantee absolute security.

SecondTakeAI is operated from the United States and your data is processed there, along with our service providers' regions. If you are outside the United States, using SecondTakeAI means your data is transferred to a country whose data protection laws may differ from your own. Where required, we rely on the European Commission's Standard Contractual Clauses for these transfers.

SecondTakeAI is not for children. You must be at least 16, or 13 where local law allows, to use it. We do not knowingly collect data from children. If you believe a child has given us data, email us and we will delete it.

We will update this page as the product changes and revise the effective date above. If a change materially affects how we handle your data, we will notify you by email or in the app before it takes effect.

Questions, requests, or complaints — email privacy@secondtakeai.com, or write to us: