Privacy Policy

Qurutu ("we," "our," or "us") operates the Qurutu website and Chrome extension. Qurutu lets you capture web content to Google Docs and generate AI-curated YouTube learning playlists. By using Qurutu, you agree to this Privacy Policy.

Account information: Email address, name, and Google account details for authentication.

Content data: Text, code, images, and source URLs you choose to capture — transferred directly to your Google Docs, not stored on our servers.

Playlist data: Queries you submit for playlist generation, generated curricula, and selected YouTube video metadata. This data is stored to display your playlists within Qurutu.

YouTube account data: When you connect YouTube, we use your OAuth token solely to create and manage playlists on your behalf. We do not read, store, or share your YouTube watch history, subscriptions, or any other YouTube data.

Subscription and billing data: Plan type, credit balance, payment status, payment event records (amount, status, timestamps), and raw webhook payloads received from Dodo Payments for audit and idempotency purposes. We do not store card or banking details — payment transactions are processed directly by Dodo Payments.

Technical data: Browser type, usage statistics, error logs, and IP address for security and performance.

• Provide and maintain the Qurutu service
• Process and save content to your Google Docs
• Generate AI-curated YouTube playlists using your query
• Export playlists to your YouTube account when you request it
• Authenticate your account and maintain security
• Manage your subscription, credits, and billing
• Improve the product and user experience
• Provide customer support
• Prevent fraud and ensure service security

Qurutu integrates with the following Google APIs:

• Google Sign-In: Basic profile (name, email) for authentication.
• Google Docs: Create and modify documents you explicitly select. Content is written directly to your Docs via OAuth 2.0 and is not stored on our servers.
• Google Drive: Access limited to files Qurutu creates or you explicitly open with Qurutu.
• YouTube Data API v3: Used exclusively to create playlists and add videos to them on your YouTube account when you initiate an export. We use the youtube scope solely for playlists.insert and playlistItems.insert. We do not access, read, or store any other YouTube account data.

You can revoke any of these permissions at any time through your Google account settings at myaccount.google.com/permissions.

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Qurutu uses Google Gemini AI to generate playlist curricula and select videos. Your playlist query is sent to the Gemini API to produce a structured learning plan. We do not use your queries to train AI models.

YouTube video search and metadata is retrieved via the YouTube Data API v3 using public search — no user authentication is required for this step.

• Active Tab: Capture content from the current page
• Storage: Save preferences locally
• Identity: Authenticate with Google
• Host Permissions: Access page content for capturing

All transmission is encrypted via HTTPS/TLS. We use OAuth 2.0 for Google authentication. OAuth tokens are encrypted at rest.

Retention periods: account info until deletion, playlist data until you delete it, aggregated analytics up to 2 years, error logs up to 30 days. Captured web content is not retained by us.

We do not sell your data. We share only with Google Services (as required by the product), Dodo Payments (for billing), Google Gemini AI (for playlist generation), and when required by law. All third-party providers are bound by confidentiality agreements.

You may request access, correction, deletion, or export of your data at any time. To exercise these rights, contact support@qurutu.com.

Questions about this policy? Email support@qurutu.com.