Privacy Policy

1. Introduction

WhitelistVideo ("we," "our," or "us") is committed to protecting the privacy of families using our parental control software. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Chrome extension and Progressive Web App (PWA) dashboard.

This policy applies to:

• WhitelistVideo Chrome Extension
• WhitelistVideo Parent Dashboard (PWA)
• WhitelistVideo Website (whitelistvideo.com)

By using WhitelistVideo, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Parent Account Information

When you create a WhitelistVideo account, we collect:

• Email Address: For account creation, authentication, and notifications
• Password: Securely hashed and stored
• Payment Information: Processed by third-party payment processors (Stripe/PayPal) for paid subscriptions
• Account Settings: Your preferences, subscription tier, and configuration

2.2 Child Profile Information

We collect minimal information about child profiles:

• Profile Name: A nickname or first name only (not required to be real name)
• Age Range: To provide age-appropriate content filtering
• No Personal Identifiable Information: We do NOT collect last names, birthdates, photos, or contact information for children

2.3 Usage Data

We automatically collect certain information when the extension is used:

• Video Request Data: URLs and metadata of videos requested by children
• Whitelist Data: Videos and channels you've approved
• Viewing History: Which approved videos were watched (optional, can be disabled)
• Extension Activity: Timestamps, browser version, extension version
• AI Category Preferences: Categories you've enabled for auto-whitelisting (Premium tier only)

2.4 Technical Information

• Device type and operating system
• Browser type and version
• IP address (for security and fraud prevention)
• Extension installation ID (anonymous identifier)

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Delivery

• Enable parent-child video approval workflow
• Synchronize whitelists across devices
• Provide real-time notifications for video requests
• Enforce content filtering based on your settings

3.2 AI Features (Premium Tier)

• Analyze video content to auto-approve educational videos in selected categories
• Improve AI accuracy based on your approval patterns (opt-in only)
• Train platform algorithms to show age-appropriate recommendations

3.3 Account Management

• Authenticate your account and prevent unauthorized access
• Process subscription payments and billing
• Send service-related emails (approval requests, subscription updates)
• Provide customer support

3.4 Product Improvement

• Analyze aggregated, anonymized usage data to improve features
• Fix bugs and optimize performance
• Develop new features based on usage patterns

3.5 Security and Compliance

• Detect and prevent fraudulent accounts
• Ensure COPPA compliance
• Protect against security threats

4. COPPA Compliance & Children's Privacy

4.1 No Direct Child Data Collection

WhitelistVideo does NOT collect personal information directly from children. All account creation, settings, and permissions are managed by parents.

4.2 What Children Cannot Do

• Create accounts
• Enter personal information
• Communicate with other users
• Make purchases
• Access the internet without parental oversight

4.3 Parental Control & Consent

Parents have full control over:

• Creating and deleting child profiles
• Reviewing all video requests and viewing history
• Deleting any child-related data at any time
• Opting out of optional data collection (viewing history, AI training)

4.4 Data Minimization

We only collect the minimum data necessary to provide the service. Child profiles contain only:

• A nickname (can be pseudonym)
• Age range (for filtering)
• Video approval history (managed by parent)

5. How We Share Your Information

We do NOT sell your personal information or your child's data to anyone.

5.1 Service Providers

We share limited data with trusted third-party service providers who help us operate WhitelistVideo:

• Cloud Hosting: Vercel, AWS (for infrastructure)
• Payment Processing: Stripe, PayPal (they never see your full payment details)
• Email Services: SendGrid, Mailgun (for transactional emails only)
• Analytics: Aggregated, anonymized data only (no PII)

All service providers are contractually required to protect your data and use it only for WhitelistVideo services.

5.2 Legal Requirements

We may disclose information if required by law:

• To comply with legal obligations, court orders, or subpoenas
• To protect the rights, property, or safety of WhitelistVideo, our users, or the public
• To prevent fraud or security threats

5.3 Business Transfers

If WhitelistVideo is acquired or merged with another company, your information may be transferred. We will notify you via email and provide options before any transfer of your child's data.

6. Data Security

We implement industry-standard security measures to protect your information:

6.1 Technical Safeguards

• Encryption: All data transmitted is encrypted using TLS/SSL
• Password Security: Passwords are hashed using bcrypt with salt
• Secure Storage: Data stored in encrypted databases
• Access Controls: Strict employee access limits with multi-factor authentication

6.2 Extension Security

• Chrome Enterprise Policies prevent unauthorized uninstallation
• Regular security audits and updates
• Code signed and verified by Chrome Web Store

6.3 Limitations

While we implement strong security measures, no internet transmission is 100% secure. You are responsible for maintaining the confidentiality of your account password.

7. Data Retention

We retain your information only as long as necessary to provide our services:

• Active Accounts: Data retained while your account is active
• Deleted Accounts: Data permanently deleted within 30 days of account deletion request
• Viewing History: Can be automatically deleted after 90 days (configurable in settings)
• Legal Requirements: Some data may be retained longer if required by law (e.g., billing records for 7 years)

8. Your Rights & Choices

8.1 Parental Rights

As a parent, you have the right to:

• Access: View all data associated with your account and child profiles
• Correct: Update or correct inaccurate information
• Delete: Request deletion of your account and all associated data
• Export: Download a copy of your data in machine-readable format
• Opt-Out: Disable optional features like viewing history or AI training

8.2 Communication Preferences

• You can opt-out of marketing emails (but not service-related emails)
• Configure notification preferences in your dashboard
• Unsubscribe link provided in all marketing emails

8.3 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: support@whitelist.video
• Settings: Account settings in your parent dashboard

We will respond within 30 days of your request.

9. International Users

WhitelistVideo is based in the United States. If you access our services from outside the U.S., your information may be transferred to, stored, and processed in the U.S.

9.1 GDPR Compliance (EU Users)

For users in the European Union, we comply with GDPR:

• Legal basis for processing: Parental consent and contract performance
• Data transfers comply with standard contractual clauses
• You have additional rights under GDPR (right to erasure, data portability, etc.)

9.2 CCPA Compliance (California Users)

California residents have additional rights under CCPA. See our CCPA Notice below.

10. Third-Party Services

WhitelistVideo filters content on third-party platforms (YouTube, etc.), but we do not control these platforms' privacy practices.

• YouTube's Privacy Policy: https://policies.google.com/privacy
• Chrome Web Store Privacy: https://www.google.com/chrome/privacy/

We recommend reviewing these third-party privacy policies.

11. Updates to This Policy

We may update this Privacy Policy from time to time. When we make material changes:

• We will notify you via email at least 30 days in advance
• We will update the "Last Updated" date at the top
• Continued use after changes constitutes acceptance

12. Contact Us

If you have questions about this Privacy Policy or our data practices:

California Privacy Rights (CCPA)

California residents have specific rights under the California Consumer Privacy Act (CCPA):

Right to Know

You have the right to request:

• Categories of personal information collected
• Sources from which information was collected
• Business purpose for collection
• Categories of third parties with whom we share information

Right to Delete

You can request deletion of your personal information, subject to certain exceptions.

Right to Opt-Out

We do NOT sell personal information. We do not and will not sell your or your child's personal information to third parties.

Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

Exercise Your Rights

Email: support@whitelist.video with subject line "CCPA Request"