Privacy Policy

Last Updated: December 15, 2025

CoreWise ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our web application located at https://corewise.video (the "Service").

By accessing or using our Service, you agree to the terms of this Privacy Policy.

1. Who We Are

The Service is owned and operated by an individual developer based in the Commonwealth of Virginia, United States.

Contact Email: support@corewise.video

2. Information We Collect

We collect only the data necessary to function, improve our Service, and provide you with AI-generated insights.

A. Information You Provide

• Account Data: When you register, we collect your email address and a password. Passwords are hashed using the crypto.scrypt algorithm with a cryptographic salt before storage; we never see or store your raw password.
• Profile Data: We store your chosen username and your visibility preferences.
• User Content: We store the YouTube URLs you submit, the video metadata (titles, thumbnails, channel names), and the AI-generated insights/summaries created for your library.

B. Automatically Collected Data

• Activity Metrics: We track your usage to provide gamification features, including "Wisdom Points," current/longest streaks, last activity date, and account creation date.
• Technical Data: For anonymous users, we generate a unique User ID based on a hashed IP address to allow temporary usage limits.

3. How We Use Artificial Intelligence (AI)

CoreWise utilizes third-party Artificial Intelligence services to analyze video transcripts. We prioritize your data privacy by using paid, commercial tiers of these services.

Our AI Providers:

• Anthropic (Claude)
• OpenAI (GPT)
• Google (Gemini)

How we protect your data with AI:

1. No Model Training: We use the paid API (Application Programming Interface) tiers for all the providers listed above. Under standard commercial terms, data sent to these APIs is not used to train their public AI models.
2. Data Minimization: We send only the video transcript to the AI. We do not share your email address, password, or username with AI providers.
3. Retention: These providers may temporarily retain API inputs for up to 30 days solely for abuse monitoring purposes, after which they are deleted.

4. Third-Party Services & Data Sharing

We do not sell, trade, or rent your personal identification information to others. We share data only with the following service providers necessary to operate the Service:

• Supadata — Purpose: fetching YouTube transcripts. Data shared: YouTube Video IDs. Supadata processes video IDs to return transcripts.
• Replit / Neon — Purpose: database hosting. Data shared: all encrypted user data. Data is stored in secure, production-grade databases.

5. Cookies and Tracking Technologies

We do not use third-party tracking pixels, advertising cookies, or Google Analytics. We use 3 strictly functional cookies to ensure the site works correctly.

• corewise_session_user_id — Purpose: keeps you logged in. Duration: 30 days. Type: HttpOnly (secure, cannot be accessed by scripts).
• corewise_user_id — Purpose: identifies anonymous users. Duration: 1 year. Type: functional, accessible to JS.
• Express session — Purpose: manages site stability. Duration: session. Type: HttpOnly.

Note: Since these cookies are strictly necessary for the technical operation of the site, they are generally exempt from "opt-in" consent requirements, though we disclose them here for transparency.

6. Data Retention and Deletion

• Retention: We retain your account information and library data indefinitely while your account is active to provide the Service.
• Account Deletion: You may delete your account at any time using the "Delete Account" button located in your user settings.
  • What happens when you delete: Your personal information (email, password hash) and your personal library of insights are permanently removed from our active database.
  • Backups: Residual copies may remain in encrypted backup systems for a limited period (typically up to 30 days) before being overwritten, as part of standard disaster recovery protocols.

7. Security of Your Data

We employ industry-standard security measures to protect your information:

• Encryption: All traffic is served over HTTPS (TLS/SSL).
• Hashing: Passwords are salted and hashed using scrypt.
• Access Control: HttpOnly cookies prevent Cross-Site Scripting (XSS) attacks on your session.
• Protection: We implement rate limiting and CSRF (Cross-Site Request Forgery) protection.

Disclaimer: No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

8. Children's Privacy

Our Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without verification of parental consent, we will take steps to remove that information from our servers.

9. Your Rights

Regardless of where you live, we extend the following rights to all users:

• Access: You have the right to view the data we hold about you (visible in your profile/library).
• Correction: You may update your profile information at any time.
• Deletion: You may delete your account and associated data directly through the Service.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: support@corewise.video