1. Introduction

This Privacy Policy explains how WalloAI ("WalloAI", "we", "us", or "our") collects, uses, stores, shares, and protects information when you use wallo.io and our content intelligence tools, including our YouTube summarisation, TikTok analysis, Instagram analysis, and creator tools (the "Service").

2. Information We Collect

Depending on how you use the Service, we may collect:

• Google account information: your Google account identifier, email address, display name, and profile picture when you choose to sign in with Google.
• Content and activity: video and profile URLs you submit, prompts and chat messages, generated summaries and analyses, saved hooks and collections, tracked profiles, and your use of Service features.
• Account and billing records: credit balances, subscription status, transaction references, and related account activity. Stripe processes your payment card information; WalloAI does not store full payment card details.
• Technical and analytics information: pages viewed, feature events, device and browser information, approximate location derived from an IP address, cookie identifiers, and diagnostic information.

3. Google Sign-In Data

WalloAI uses Google Sign-In for authentication. We request only the basic OpenID, email, and profile permissions needed to sign you in. We use the resulting Google account identifier, email address, display name, and profile picture to authenticate you, create and display your WalloAI account, associate your saved content and credits with that account, prevent abuse, and provide account support.

Google Sign-In does not give WalloAI access to your Gmail, Google Drive, Google Calendar, contacts, private YouTube account data, or your Google password.

WalloAI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data; use it for targeted, personalised, retargeted, or interest-based advertising; use it to determine creditworthiness; or use it to train general-purpose or non-personalised artificial intelligence or machine-learning models.

4. How We Use Information

We use the information described above to:

• Authenticate users and maintain accounts.
• Provide summaries, analyses, chats, tracking, saved content, and other requested features.
• Manage credits, subscriptions, payments, and transaction records.
• Operate, secure, troubleshoot, and prevent misuse of the Service.
• Understand feature usage and improve the user-facing Service.
• Comply with legal obligations and enforce our Terms of Service.

5. How We Share Information

We do not sell your personal information. We disclose information only as needed to operate the Service, protect users and the Service, complete a business transaction, or comply with law. Service providers may process information on our behalf for the following purposes:

• Google Firebase: authentication and database services.

These providers may receive only the information reasonably needed to perform their services. We may also disclose information when required by law, to investigate fraud or security incidents, or as part of a merger, acquisition, financing, or sale of assets, subject to applicable legal requirements.

6. Data Storage and Security

Account and Service data is stored using Firebase and our other infrastructure providers. We use safeguards designed to protect personal information, including HTTPS encryption in transit, authentication controls, access restrictions, and provider security controls. Access is limited to service providers and personnel who need it for the purposes described in this policy. No system is completely secure, and we cannot guarantee absolute security.

Our providers may process information in Australia, the United States, and other countries where they operate. Those countries may have different data protection laws from your country of residence.

7. Data Retention and Deletion

We retain account and Service information while it is needed to provide and secure the Service and for legitimate operational purposes. We may retain limited records for longer when reasonably necessary for fraud prevention, dispute resolution, tax, accounting, payment, or legal obligations. When information is no longer needed, we delete or anonymise it in accordance with our operational processes.

Where the Service provides a delete control, you may delete individual history or saved-content items. You may also select Delete account from your account menu to permanently delete your authentication account and remove your ability to sign in. Deleting the authentication account does not automatically remove every Service, transaction, security, or legally required record associated with prior use of WalloAI.

8. Cookies and Similar Technologies

WalloAI and its providers use cookies, local storage, pixels, and similar technologies to keep you signed in, remember settings, measure feature use, diagnose problems, and measure advertising campaigns. These providers may collect technical information under their own privacy policies. You can restrict cookies through your browser, although doing so may affect Service functionality.

9. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information, or to object to or withdraw consent for certain processing. You can disconnect WalloAI from your Google Account through your Google Account's third-party connections settings. Disconnecting Google access does not itself delete information already stored by WalloAI.

10. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that such information has been collected, we will take appropriate steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes to the Service, our practices, or legal requirements. We will post the revised policy on this page and update the "Last updated" date. Where required, we will provide additional notice of material changes.