隱私權政策

1. 營運者

CommentBrief is an independent creator-research service. References to “CommentBrief”, “we”, or “us” mean the operator of commentbrief.com. Privacy questions can be sent to the contact address shown on this page.

2. 我們蒐集哪些資料

• Google sign-in data: verified email address, display name, profile image, and authentication identifiers needed to keep your workspace private.
• Information you submit: public YouTube video URLs, requested sample size, sort order, report language, automation settings, and support or deletion requests.
• Public YouTube API data: video and channel identifiers, title, channel name, thumbnail, publication time, and a bounded sample of public top-level comments including comment ID, text, like count, and publication time. We do not intentionally collect commenter names, avatars, or channel IDs for analysis.
• Service records: analysis status, generated reports, usage and token counts, safe error details, locale, essential session cookies, and security/request metadata processed by our infrastructure providers.

3. 資料用途

• Authenticate users and provide private workspaces.
• Retrieve public comments through the official YouTube Data API and generate evidence-linked reports.
• Operate automations, prevent duplicate or abusive requests, troubleshoot failures, protect the service, and comply with law and platform policies.
• We do not sell personal information or use YouTube data to build profiles of individual commenters, infer sensitive personal traits, or serve behavioral advertising.

4. Google 與 YouTube API 服務

CommentBrief uses YouTube API Services. Public video analysis uses a server-side project API key and does not request access to your YouTube channel. Google sign-in currently requests only basic identity information and does not grant CommentBrief permission to manage YouTube content.

Use of CommentBrief is also subject to the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy. You can review or revoke Google permissions from Google's security settings; revoking sign-in access may prevent future login.

5. AI 與服務供應商

To create a report, the selected public comment text and minimal evidence fields are sent to our configured AI model provider. We do not intentionally include your Google profile or commenter identity in model prompts. Our current providers may change as we improve reliability, and this policy will be updated before a materially different use.

• Railway processes application hosting, databases, and operational logs.
• Cloudflare provides DNS, content delivery, TLS, and security processing.
• Google provides sign-in, the YouTube Data API, and the currently configured Gemini API used to process comment samples and generate reports.
• Gemini API data-use terms differ by service tier. Public production processing must use a tier and configuration appropriate for customer data; applicable provider terms govern any international processing and retention.

6. Cookie 與安全

CommentBrief uses essential cookies for encrypted login sessions and language preference. Cloudflare may use security technologies to prevent abuse. We do not currently use third-party advertising cookies. We use access controls, TLS, server-side secrets, bounded sessions, and private workspaces, but no online service can guarantee absolute security.

7. 保存期限

• Raw comment snapshots and evidence excerpts are assigned a seven-day deletion deadline for retry and evidence handling.
• Public YouTube video metadata is assigned a 30-day refresh or deletion deadline.
• Derived reports and account records are kept while your account is active or as needed to provide the service, subject to YouTube policy and any approved derived-metrics terms.
• Security and queue logs exclude comment bodies where practical and are retained only for operational, fraud-prevention, and legal needs.
• Deletion requests are processed as soon as practical and no later than seven calendar days. Limited records may be retained when required by law or to document completion of the request.

8. 你的選擇與權利

You can stop using the service, revoke Google access, or use the Data Deletion page to delete your CommentBrief account and associated workspace data. Depending on where you live, you may also request access, correction, restriction, objection, or a portable copy of personal information. We may need to verify your identity before acting on a request.

9. 未成年人、變更與聯絡

CommentBrief is a professional creator tool and is not directed to children. Do not use it if you are below the minimum age required to consent to online services in your jurisdiction. We may update this policy when the service or law changes; material changes will be announced in the product or on this page.