Privacy Policy

Newlett (the “Service”) is operated by Derivo Labs LLC (“we”, “our”, or “us”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Newlett website at newlett.com.

1. Who This Policy Covers

Newlett serves two groups of people:

• Creators: people who create a Newlett account, connect a YouTube channel, and send newsletters to their audience.
• Subscribers: people who subscribe to a creator’s newsletter, either through a Newlett-hosted subscribe page or by being added by the creator. We process subscriber data on behalf of the creator whose newsletter they joined.

2. Data We Collect

For creators:

• Account information: your email address and authentication credentials, including your Google account identity if you sign in with Google.
• Channel data: the public YouTube channel you connect, its public video metadata, thumbnails, and caption transcripts, which we fetch to generate your digests.
• Usage data: how you interact with the Service, such as pages visited, features used, and timestamps.
• Device information: browser type, operating system, and IP address.

For subscribers:

• Contact information: your email address and, optionally, your name.
• Subscription details: which newsletter you joined, when, and through which source (for example a subscribe page or an import by the creator).
• Delivery data: whether emails were delivered, and unsubscribe events.

3. How We Use Your Data

• To provide, operate, and maintain the Service.
• To detect a creator’s new YouTube uploads and generate AI-powered digests of that content.
• To deliver newsletters to subscribers on the creator’s behalf, including unsubscribe handling.
• To communicate with creators about updates, security alerts, and support.
• To detect, prevent, and address technical issues or abuse, including spam prevention.

We do not sell personal data. Subscriber lists belong to the creator whose newsletter the subscribers joined; we do not use subscriber emails for our own marketing and we do not share them with other creators.

4. Third-Party Services

We use the following services to operate Newlett. Each has its own privacy policy governing how it handles data:

• Supabase: database, file storage, and authentication.
• YouTube API Services (Google): fetching public video metadata and channel information.
• Anthropic (Claude): AI-powered summarisation of video transcripts.
• Resend: email delivery.
• Vercel: hosting and deployment infrastructure.
• OVH: servers used for processing video frames.

Because the Service uses YouTube API Services, users agree to be bound by the YouTube Terms of Service. Google’s handling of data is described in the Google Privacy Policy.

5. Cookies

The newlett.com website uses essential cookies to maintain your session and authentication state. We do not use advertising or cross-site tracking cookies. You can control cookies through your browser settings; disabling essential cookies may prevent you from signing in.

6. Data Retention

We retain creator data for as long as the account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we are required by law to retain it.

Subscriber records are retained for as long as the subscription is active. When a subscriber unsubscribes, we keep the minimum record needed to honor the unsubscribe permanently.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Request a portable copy of your data.
• Withdraw consent at any time, where processing is based on consent.

Subscribers can stop receiving a newsletter at any time using the unsubscribe link included in every email, no account required.

To exercise any of these rights, contact us at privacy@newlett.com.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the “Last updated” date. Material changes will be communicated to creators by email.

10. Contact Us

If you have questions about this Privacy Policy, contact us at: