At MoodScanr (operated by Innovation Tek Ltd), we protect your personal data in strict compliance with the European Union General Data Protection Regulation (GDPR) and global privacy standards.
We never sell, rent, or trade your personal information or YouTube analysis logs to advertising networks or data brokers.
You retain complete rights to access, export, rectify, or permanently delete your account and analysis data at any time.
All data in transit and at rest is secured using AES-256 encryption and TLS 1.3 protocols on Google Cloud Platform.
Under Article 4(7) of the EU GDPR, the Data Controller responsible for your personal data processing in relation to the MoodScanr Web Application and Chrome Extension is:
We collect and process minimal personal data necessary to provide you with YouTube comment sentiment analysis and extension features:
Email address, full name, encrypted password hash (bcrypt), assigned account role (User, Dev, Admin), subscription tier (Free, Pro), and account creation timestamp.
When you choose to sign in via Google OAuth, we receive your Google ID, verified email address, full name, and avatar URL provided by Google Identity Services. We do NOT collect or store your Google password.
Public YouTube video URLs, video titles, channel names, public comment text excerpts, sentiment distribution scores (positive, neutral, negative percentage), and AI summary outputs.
Active extension session tokens stored in local storage (`chrome.storage.local`), error trace logs, and API request diagnostics used strictly for maintaining service uptime.
In compliance with GDPR Article 6, we process your personal data under the following legal grounds:
| Processing Purpose | Data Category | GDPR Legal Basis |
|---|---|---|
| Account Creation & Authentication | Email, Password Hash, Google ID | Contract Performance (Art. 6(1)(b)) |
| Sentiment Analysis & Report Generation | YouTube URLs, Public Comments | Contract Performance (Art. 6(1)(b)) |
| Billing & Subscription Management | Stripe Customer ID, Plan Tier | Legal Obligation (Art. 6(1)(c)) |
| Service Security & Diagnostics | Error Logs, Request Metrics | Legitimate Interest (Art. 6(1)(f)) |
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory legal obligations.
If you are located in the European Union or European Economic Area (EEA), you enjoy the following enforceable rights under the GDPR:
Request a complete copy of all personal data held about you.
Request correction of inaccurate or incomplete personal information.
Permanently delete your account and all associated logs from our databases.
Export your analysis records and reports in structured JSON or CSV format.
We partner with trusted third-party infrastructure providers to run our services. All subprocessors comply with EU Standard Contractual Clauses (SCCs) or EU-US Data Privacy Framework certifications:
To exercise any of your GDPR rights or submit privacy inquiries, please contact our Data Protection Officer: