Last updated: 4 September 2026 · Effective: 4 September 2026

This Privacy Policy explains how VidSEOKit LLC ("VidSEOKit", "we", "us" or "our") collects, uses, shares and protects personal information when you visit vidseokit.com or use any of our free creator tools (together, the "Service").

We are the data controller for the processing described here. Wherever this policy refers to "personal information", read it as including "personal data" under the EU and UK GDPR and "personal information" under the Australian Privacy Act 1988 and US state privacy laws.

1. Information we collect

1.1 Information you provide

The tools are anonymous and require no sign-up. You do, however, type things into them, and that text is sent to our servers so it can be analysed:

• SEO Analyzer: the video title, description, tags and target keyword you enter.
• Title Generator and Thumbnail Generator: the topic or subject you enter.
• Tag Extractor: the YouTube video URL you enter. We fetch the publicly available page at that URL to read its tags; we do not access your YouTube account and never request OAuth permissions.
• Earnings Calculator: your daily view count and selected niche. This runs on our servers to produce an estimate and is not linked to you.
• Contact: if you email us at info@easysignly.com, we receive your email address, your message and anything you attach.

Treat these fields as public. Do not paste personal information, client data, unreleased material or anything confidential into them — see section 3 for why.

1.2 Information collected automatically

• Log data: your IP address, browser type and version, operating system, referring page, the pages you view, and the date and time of each request. Our hosting provider records this to keep the Service running and secure.
• Approximate location: inferred from your IP address at country or region level. We do not collect GPS or precise location.
• Device and interaction data: screen size, language, and which tools you use, so we can see which features are worth keeping.
• Anti-abuse signals: Google reCAPTCHA collects device and behaviour signals to tell humans apart from bots.

1.3 Information stored on your device

We store one preference locally in your browser under the key "ct-theme", which remembers whether you chose the light or dark theme. It never leaves your device and we cannot read it from our servers. Clearing your browser storage removes it.

1.4 What we do not collect

• We do not collect passwords, because there are no accounts.
• We do not collect payment or card details. The tools are free.
• We do not request access to your YouTube, Google or social media accounts.
• We do not knowingly collect information from children (see section 10).
• We do not collect special-category or sensitive personal information, and we ask that you do not send us any.

2. How we use information, and our legal bases

If you are in the EEA, the UK or Switzerland, the GDPR requires us to name a legal basis for each purpose. Here they are:

• Providing the tools — to process the text you submit and return a result. Legal basis: performance of a contract with you (Art. 6(1)(b)), or our legitimate interest in delivering a service you asked for.
• Security and abuse prevention — to run reCAPTCHA, apply rate limits and block abusive traffic. Legal basis: legitimate interests (Art. 6(1)(f)) in keeping the Service available and protecting it from automated abuse.
• Service improvement — to understand aggregate usage and fix faults. Legal basis: legitimate interests in improving a product we offer free of charge.
• Advertising — to fund the Service through Google AdSense. Legal basis: your consent (Art. 6(1)(a)) where consent is required for cookies and personalised advertising; otherwise legitimate interests in showing non-personalised ads.
• Responding to you — to answer support emails and business enquiries. Legal basis: legitimate interests, or performance of a contract.
• Legal compliance — to meet our obligations, respond to lawful requests and establish or defend legal claims. Legal basis: legal obligation (Art. 6(1)(c)) and legitimate interests.

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You can object to that processing at any time — see section 12.

3. AI processing and your inputs

Our SEO Analyzer, Title Generator and Thumbnail Generator are powered by Google's Gemini generative AI models. When you submit a request, the text you entered is transmitted to Google's API for processing and the generated result is returned to you and displayed in your browser.

• We do not write your inputs or the generated outputs to a database, and we do not build a profile from them.
• Google processes those inputs under its own terms and may retain them for a limited period for abuse monitoring and, on some API tiers, for improving its models. We do not control that retention.
• Because of the above, you must not submit personal information about yourself or anyone else, confidential business material, or anything you are contractually barred from disclosing.
• AI output is generated by a statistical model. It can be inaccurate, generic or duplicated across users. Check anything before you publish it. See our Terms of Service for the full disclaimer.

Google's handling of data sent to its APIs is described in the Google Privacy Policy and the Gemini API terms.

4. Cookies, similar technologies and advertising

Cookies are small files placed on your device. We group them as follows:

• Strictly necessary — required for the site to work and to defend it against abuse, including Google reCAPTCHA. These are set without consent because the Service cannot be provided safely without them.
• Preferences — the local theme setting described in section 1.3. Set only after you use the theme toggle.
• Advertising — set by Google AdSense and its partners to serve, cap and measure ads, and — with consent — to personalise them based on your browsing across sites.

4.1 Consent in the EEA, UK and Switzerland

If you are located in the EEA, the UK or Switzerland, non-essential cookies are set only after you give consent through our cookie banner. Until you consent, advertising and measurement storage stays disabled through Google Consent Mode, and any ads shown are non-personalised.

• Consent is granular. You can accept analytics without accepting advertising, or refuse both, using the "Manage" option in the banner.
• Refusing is as easy as accepting. "Reject all" sits next to "Accept all", in the same size and style, on the first screen.
• You can change or withdraw your choices at any time using the Cookie Settings link in the site footer. Withdrawal takes effect immediately and is as easy as giving consent.
• We record what you chose and when. We ask again after 12 months so your consent does not go stale, and again whenever we materially change what the cookies do.
• Strictly necessary cookies are always on and are not covered by the banner, because the Service cannot be provided securely without them.

4.2 Google AdSense

Google, as a third-party vendor, uses cookies to serve ads on this site and may use the DoubleClick cookie or similar identifiers to serve ads based on your prior visits here and to other websites. You can opt out of personalised advertising at Google Ads Settings, opt out of many vendors at once at youradchoices.com (US), youronlinechoices.eu (EU/UK) or youronlinechoices.com.au (Australia). How Google uses data from sites that use its services is explained at policies.google.com/technologies/partner-sites.

4.3 Browser controls and Global Privacy Control

Most browsers let you block or delete cookies in their settings; blocking strictly necessary cookies may break parts of the Service. Where your browser or an extension sends a Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of the sale or sharing of your personal information under applicable US state laws.

5. Third parties we share information with

We do not sell your personal information for money. We share it only in the circumstances below, and only to the extent needed:

• Google LLC — Gemini API (processing tool inputs), reCAPTCHA (abuse prevention), AdSense (advertising) and Google Fonts (typefaces). Requests to Google Fonts and to our other content delivery networks expose your IP address to those providers as a technical necessity of loading files.
• Hosting and infrastructure providers — who run our servers and produce the log data described in section 1.2, acting on our instructions as processors.
• Content delivery networks — that serve stylesheets and scripts used by the site.
• Professional advisers — such as lawyers and accountants, where they need the information to advise us.
• Authorities and legal claims — where we are required by law, court order or a valid request from a public authority, or where disclosure is necessary to establish, exercise or defend legal claims, prevent fraud, or protect the rights and safety of any person.
• A successor entity — in connection with a merger, acquisition, financing or sale of assets. We will notify you before your information becomes subject to a materially different privacy policy.

For the purposes of certain US state laws, allowing advertising partners to set cookies for cross-context behavioural advertising can count as "sharing" or a "sale" even though no money changes hands. Section 13 explains how to opt out.

6. International transfers of information

We operate from the United States, and our service providers are located in the United States and other countries. If you use the Service from the EEA, the UK, Switzerland, Australia or elsewhere, your information will be transferred to and processed in countries whose data protection laws may differ from those in your own country.

• For transfers out of the EEA, we rely on the European Commission’s Standard Contractual Clauses, on an adequacy decision, or on our providers’ certification under the EU-US Data Privacy Framework, as applicable.
• For transfers out of the UK, we rely on the UK International Data Transfer Agreement or the UK Addendum to the Standard Contractual Clauses.
• For transfers out of Switzerland, we rely on the Swiss Standard Contractual Clauses or the Swiss-US Data Privacy Framework.
• For Australian users, this is an overseas disclosure under Australian Privacy Principle 8. We take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles.

You may request a copy of the safeguards we rely on by emailing us.

7. How long we keep information

• Tool inputs and AI outputs — held only for as long as it takes to process your request and return a result. Not written to a database by us.
• Server logs — retained for a limited period — ordinarily no more than 90 days — for security, diagnostics and abuse investigation, then deleted or aggregated.
• Support emails — retained for up to 24 months after your enquiry is resolved, so we can handle follow-ups and keep a record of what was agreed.
• Advertising and analytics cookies — retained for the periods set by the relevant provider, which are disclosed in our consent banner and in Google’s documentation.
• Records we must keep by law — retained for the period the relevant law requires, and then deleted.

8. Security

We use HTTPS for all traffic, transmit tool requests over encrypted connections, apply rate limiting and bot protection, and keep the amount of personal information we hold deliberately small — the strongest protection being that we do not retain your inputs at all.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs, we will notify the relevant supervisory authority and, where required, affected individuals, within the timeframes set by applicable law — including 72 hours under the EU and UK GDPR and the Notifiable Data Breaches scheme under the Australian Privacy Act.

9. Automated decision-making

The Service generates scores, suggestions and estimates automatically, but these are informational outputs about content you supply. We do not carry out automated decision-making that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 of the GDPR, and we do not profile you for that purpose.

10. Children’s privacy

The Service is intended for people aged 16 and over and is not directed to children. We do not knowingly collect personal information from children under 16 (or under 13 in the United States, for the purposes of the Children’s Online Privacy Protection Act). If you believe a child has provided us with personal information, contact us and we will delete it promptly. Where local law sets a different age of digital consent, that age applies.

11. Your rights — everyone

Wherever you live, you may ask us to:

• confirm whether we hold personal information about you, and give you a copy;
• correct information that is inaccurate or incomplete;
• delete information we no longer have a lawful reason to keep;
• stop sending you marketing, and withdraw any consent you have given;
• explain how we handled your information.

We will not discriminate against you for exercising any of these rights.

12. If you are in the EEA, the UK or Switzerland

Under the EU GDPR, the UK GDPR and the Swiss FADP you have the rights to:

• Access — obtain confirmation of processing and a copy of your personal data.
• Rectification — have inaccurate data corrected and incomplete data completed.
• Erasure — have your data deleted where one of the grounds in Article 17 applies.
• Restriction — limit how we use your data while a dispute about it is resolved.
• Portability — receive data you provided in a structured, machine-readable format, and have it sent to another controller where technically feasible.
• Object — object at any time to processing based on legitimate interests, and object absolutely to processing for direct marketing.
• Withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Complain — lodge a complaint with a supervisory authority (see section 16).

We respond within one month, extendable by two further months for complex requests, and we will tell you if we need that extension.

13. If you are in the United States

This section applies to residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws in force. It supplements the rest of this policy.

13.1 Categories of personal information

In the 12 months before the date at the top of this policy, we collected the following categories under the California Consumer Privacy Act, as amended by the CPRA:

• Identifiers — IP address and, if you email us, your email address. Source: you and your device. Purpose: security, service delivery, support. Disclosed to: hosting, security and advertising providers.
• Internet or network activity — pages viewed, tools used, referring URL, browser and device characteristics. Source: your device. Purpose: security, improvement, advertising. Disclosed to: hosting and advertising providers.
• Geolocation data — coarse country or region inferred from IP. Source: your device. Purpose: security, legal compliance, ad delivery. Disclosed to: hosting and advertising providers.
• Commercial or inference data — advertising interest signals inferred by Google. Source: advertising cookies. Purpose: advertising. Disclosed to: Google and its ad partners.
• Sensitive personal information — none. We do not collect it and do not use or disclose it for purposes that would trigger the right to limit.

13.2 Sale and sharing

We do not sell personal information for monetary consideration. We do allow advertising partners to set cookies for cross-context behavioural advertising, which counts as "sharing" under the CPRA and as a "sale" or "targeted advertising" under several other state laws. You may opt out at any time by using the Cookie Settings link in the site footer, by enabling Global Privacy Control in your browser, by using the Google opt-out links in section 4.2, or by emailing us. We do not knowingly sell or share the personal information of consumers under 16.

13.3 Your state-law rights

• Know and access the categories and specific pieces of personal information we collected about you.
• Delete personal information we collected from you, subject to statutory exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information and of targeted advertising.
• Limit the use and disclosure of sensitive personal information (not applicable, as we collect none).
• Appeal a refused request, in states that provide an appeal right. If we deny your appeal, we will tell you how to contact your state Attorney General.
• Be free from discrimination or retaliation for exercising these rights.

Send requests to info@easysignly.com with "Privacy Request" in the subject line. Because we do not maintain accounts, we verify requests by matching them against the limited information we hold; we may ask for additional detail, and we may be unable to complete a request we cannot reasonably verify. An authorised agent may submit a request on your behalf with written proof of authority. We respond within 45 days, extendable by a further 45 days with notice.

14. If you are in Australia

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. In addition to the rights in section 11:

• You may deal with us anonymously or under a pseudonym wherever it is lawful and practicable — and with our tools, it always is, because no identification is required.
• You may request access to the personal information we hold about you (APP 12) and ask us to correct it (APP 13). We will respond within a reasonable period, ordinarily 30 days, and will give reasons in writing if we refuse.
• We disclose personal information to overseas recipients as described in section 6, principally in the United States (APP 8).
• Eligible data breaches are notified to the Office of the Australian Information Commissioner and to affected individuals under the Notifiable Data Breaches scheme.

If you are unhappy with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

15. If you are in Canada

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws. You may access and correct your personal information and withdraw consent subject to legal and contractual restrictions, and you may complain to the Office of the Privacy Commissioner of Canada.

16. Contact and complaints

For any privacy question or request, email info@easysignly.com. A postal address is available on request. We ask that you contact us first so we have a chance to put things right — but you always have the right to go straight to a regulator:

• EEA — your national data protection authority. The list is maintained by the European Data Protection Board at edpb.europa.eu.
• United Kingdom — the Information Commissioner’s Office at ico.org.uk, or 0303 123 1113.
• Switzerland — the Federal Data Protection and Information Commissioner at edoeb.admin.ch.
• Australia — the Office of the Australian Information Commissioner at oaic.gov.au.
• Canada — the Office of the Privacy Commissioner of Canada at priv.gc.ca.
• United States — your state Attorney General; in California, also the California Privacy Protection Agency.

17. Changes to this policy

We may update this policy to reflect changes to the Service, our providers or the law. The "Last updated" date at the top always shows the current version. If a change materially affects how we use your personal information, we will give prominent notice on the site before it takes effect and, where the law requires it, ask for your consent again. Continuing to use the Service after an update means you accept the revised policy.