Privacy Policy

• We collect as little as we can. Today that's mostly the email you give us for early access.
• ListenPals processes public web data from official APIs and open datasets. We don't scrape.
• We never sell personal data or use it for advertising.
• You can ask us to see, fix, export or delete your data at any time.
• Otto is an AI. Its answers come with sources so you can check them.

ListenPals (listenpals.com) is operated by Adventure Digital Marketing Co., Ltd., a company registered in Thailand (198/82 Moo 1, Rangsit-Pathumthani Road, Baan Klang, Muang Pathumthani, Pathumthani 12000, Thailand). For your account and early-access data we are the "controller" under data protection laws such as the GDPR.

Questions or requests: hello@listenpals.com.

What we collect depends on how you use ListenPals:

• Early-access list. Your email address, your brand's website if you add it, your consent and when you gave it. Our form provider (Netlify) also records technical details such as IP address and browser to filter spam.
• Account and workspace (when accounts open). Your name, email, workspace and brand details, the competitors you track, your preferences, feedback such as thumbs up or down, and your messages to Otto.
• Connected accounts (optional, later). If you connect an account such as your YouTube channel, we receive the data you authorize, such as channel and video statistics and comments, plus an access token that we store encrypted.
• Public web data. To build insights for brands, we process publicly available data from official APIs and open datasets: public posts and the handles that posted them, news metadata, public statistics and trademark filings. This can include personal data of people who post publicly about brands (see "People in public data").
• Usage and device data. Basic logs (IP address, browser, pages visited, errors) that keep the service secure and working.

The public site uses no advertising or tracking cookies. When sign-in launches, we'll use strictly necessary cookies to keep you signed in. If we ever add analytics that need consent, we'll ask first and update this policy.

We use personal data only for these purposes and legal bases:

• To run the service you asked for (performance of a contract): your account, Pssts, Earshot, Moves and Otto's answers.
• To email you about early access (your consent, which you can withdraw at any time).
• To keep ListenPals secure and improve it (legitimate interests): preventing abuse, fixing bugs and learning which features help.
• To turn public data into brand insights (legitimate interests): we use only what we need, link back to the original, honor deletions and never build profiles of private individuals.
• To follow the law (legal obligation): for example tax, accounting and lawful requests.

Otto is an AI. We use AI providers such as OpenAI to classify, summarize and draft. They process data on our behalf under business API terms that do not allow them to train their models on it.

We don't use AI to make decisions about people that have legal or similarly significant effects. Otto can be wrong, so we show sources and label correlations as "pattern, not proof".

We never sell personal data or share it for cross-context behavioral advertising. We share it only with service providers that help us run ListenPals, under contracts that limit how they use it:

• Netlify: website hosting and early-access form submissions
• Supabase: database, sign-in and file storage (when accounts open)
• Render: background processing (when accounts open)
• OpenAI: AI processing for Otto (when accounts open)
• An email delivery provider for sign-in links and digests (when accounts open)

We may also disclose data if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business. We'll tell you before your data becomes subject to a different privacy policy.

ListenPals uses YouTube API Services. By using features that show YouTube content, you also agree to the YouTube Terms of Service. How Google handles data is described in the Google Privacy Policy.

• What we access: public video, channel and comment data from the YouTube Data API. If you connect your own channel, also that channel's statistics, videos and comments, read-only.
• How we use it: to show you videos and comments about your brand and category, with YouTube branding, and to create insights that we label as our own estimates, never as YouTube data.
• Who we share it with: no one, except service providers needed to run ListenPals (for example our AI provider for classification, which does not train on it). We don't sell or redistribute YouTube data.
• Cookies: ListenPals doesn't use cookies to track your YouTube activity. If we embed a YouTube player, YouTube may store or read cookies on your device under the Google Privacy Policy.
• Revoking access: disconnect in ListenPals under Settings → Connected accounts, or remove ListenPals in your Google security settings.
• Deletion: we delete stored YouTube data within 7 days after you disconnect (within 30 days if you revoke through Google), and we refresh or delete cached YouTube data at least every 30 days.

Our providers may process data outside your country, including in the United States. Where the GDPR or UK GDPR applies, we rely on safeguards such as the EU Standard Contractual Clauses or a provider's certification under the EU–US Data Privacy Framework.

• Early-access list: until you leave the list or ask us to delete it, and at most 24 months after the early-access program ends.
• Accounts: while your account is open. After you delete it, we erase your data within 30 days, and from backups within 90 days.
• Connected accounts: deleted within 7 days of disconnecting (see "YouTube data" for its specific rules).
• Public web data: only as long as it's useful for insights. When a source tells us something was deleted, we remove it.
• Logs: up to 90 days, unless we need them longer to investigate abuse.

Wherever you live, you can ask us to access, correct, export or delete your personal data, and to stop emailing you. Write to hello@listenpals.com. We'll reply within 30 days and may need to confirm it's really you.

EU, EEA and UK (GDPR). You also have the right to restrict or object to processing, to data portability, to withdraw consent at any time without affecting earlier processing, and to complain to your local data protection authority.

California (CCPA/CPRA). You have the right to know what personal information we collect, use and disclose; to delete and correct it; and to opt out of its sale or sharing. We don't sell or share personal information, and we won't treat you differently for using your rights. You can also use an authorized agent.

If a public post of yours shows up in ListenPals, it's because it was published publicly through a source whose terms allow our use. We show it only to the brand it's about, link to the original and remove it when you delete it at the source. You can also ask us to remove it at hello@listenpals.com.

We use encryption in transit (HTTPS), encrypt connected-account tokens at rest, limit who can access data and keep secrets out of our code. No system is perfectly secure. If a breach affects you, we'll tell you and the authorities as the law requires.

ListenPals is a business tool and isn't meant for anyone under 16. We don't knowingly collect children's data. If you think we have, tell us and we'll delete it.

We'll post updates here and change the date at the top. If a change is significant, we'll let people on our list or in the app know before it takes effect.

Adventure Digital Marketing Co., Ltd., 198/82 Moo 1, Rangsit-Pathumthani Road, Baan Klang, Muang Pathumthani, Pathumthani 12000, Thailand · hello@listenpals.com