Privacy Policy & Data Protection
At MoodScanr (operated by Innovation Tek Ltd), we protect your personal data in strict compliance with the European Union General Data Protection Regulation (GDPR) and global privacy standards.
Zero Unauthorised Sharing
We never sell, rent, or trade your personal information or YouTube analysis logs to advertising networks or data brokers.
Full GDPR Rights Control
You retain complete rights to access, export, rectify, or permanently delete your account and analysis data at any time.
Encrypted GCP Infrastructure
All data in transit and at rest is secured using AES-256 encryption and TLS 1.3 protocols on Google Cloud Platform.
Identity of the Data Controller
Under Article 4(7) of the EU GDPR, the Data Controller responsible for your personal data processing in relation to the MoodScanr Web Application and Chrome Extension is:
Categories of Personal Data We Collect
We collect and process minimal personal data necessary to provide you with YouTube comment sentiment analysis and extension features:
Account Registration & Identity Data
Email address, full name, encrypted password hash (bcrypt), assigned account role (User, Dev, Admin), subscription tier (Free, Pro), and account creation timestamp.
Google Single Sign-On (OAuth 2.0) Data
When you choose to sign in via Google OAuth, we receive your Google ID, verified email address, full name, and avatar URL provided by Google Identity Services. We do NOT collect or store your Google password.
YouTube Analysis & Video Data
Public YouTube video URLs, video titles, channel names, public comment text excerpts, sentiment distribution scores (positive, neutral, negative percentage), and AI summary outputs.
Browser Extension Sync & Operational Logs
Active extension session tokens stored in local storage (`chrome.storage.local`), error trace logs, and API request diagnostics used strictly for maintaining service uptime.
Legal Bases for Data Processing (GDPR Art. 6)
In compliance with GDPR Article 6, we process your personal data under the following legal grounds:
| Processing Purpose | Data Category | GDPR Legal Basis |
|---|---|---|
| Account Creation & Authentication | Email, Password Hash, Google ID | Contract Performance (Art. 6(1)(b)) |
| Sentiment Analysis & Report Generation | YouTube URLs, Public Comments | Contract Performance (Art. 6(1)(b)) |
| Billing & Subscription Management | Stripe Customer ID, Plan Tier | Legal Obligation (Art. 6(1)(c)) |
| Service Security & Diagnostics | Error Logs, Request Metrics | Legitimate Interest (Art. 6(1)(f)) |
Data Retention Policy
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory legal obligations.
- Account Profile Data: Retained for the duration of your active account subscription. Deleted within 30 days of account cancellation.
- Analysis History & Bookmarks: Stored until deleted manually by you in the Dashboard or upon account deletion.
- System & Error Logs: Automatically purged after 30 rolling days.
Your Data Protection Rights (GDPR Art. 15–22)
If you are located in the European Union or European Economic Area (EEA), you enjoy the following enforceable rights under the GDPR:
Request a complete copy of all personal data held about you.
Request correction of inaccurate or incomplete personal information.
Permanently delete your account and all associated logs from our databases.
Export your analysis records and reports in structured JSON or CSV format.
Third-Party Data Subprocessors
We partner with trusted third-party infrastructure providers to run our services. All subprocessors comply with EU Standard Contractual Clauses (SCCs) or EU-US Data Privacy Framework certifications:
- Google Cloud Platform (GCP): Backend hosting, Cloud Run serverless execution, and Cloud SQL PostgreSQL database.
- Google Gemini AI: Natural Language Processing and sentiment analysis synthesis.
- Stripe Inc.: Payment processing and subscription invoice management (PCI-DSS Level 1 compliant).
Contact & Supervisory Authority
To exercise any of your GDPR rights or submit privacy inquiries, please contact our Data Protection Officer: