Privacy Policy
Last updated: 2026-07-02
SubmissionTree helps grapplers turn instructional videos into structured, trainable game plans. This policy explains what personal data we collect, why we collect it, and the choices you have. It applies to the SubmissionTree web application and related services.
1. Data we collect
Account data: your email address, display name, and a hashed password (or your OAuth identity if you sign in with a third-party provider). Content data: the videos you import, the technique trees, game plans, training plans, tags, notes, and training logs you create. Imported video transcripts are handled as transient processing data and are not kept long-term — see "Data retention" below. Usage data: basic technical logs (IP address, browser type, timestamps) needed to operate and secure the service. Browser extension: when you import through our browser extension, it uses your sign-in (email/authentication) so the import reaches your account, and it sends the YouTube transcript together with basic video metadata (such as the title and video ID) for the video you choose, solely to generate your private analysis.
2. How we use your data
We use your data to provide the service: importing videos, extracting techniques, building your library, generating training plans, and tracking your progress. We also use it to secure accounts, prevent abuse, provide support, and improve the product. We do not sell your personal data.
3. AI processing
Video transcripts you import are processed by third-party large language model providers to extract techniques and structure. Only the transcript content and related metadata required for extraction is sent; your account identity is not shared with these providers as part of the extraction request. The raw transcript is used only to generate your private analysis and is then deleted under our retention policy (see "Data retention"); we keep only the derived analysis, not the raw transcript text.
4. Third-party services
We rely on a small number of processors: cloud hosting, AI model providers for extraction (currently Google and Anthropic), and a payment processor for paid subscriptions. Payment card details are handled entirely by the payment processor and never touch our servers. Imported videos remain hosted on YouTube and are subject to YouTube's own terms and privacy policy. We do not sell your personal data or share it with advertisers.
5. Data retention
Imported video transcripts are transient: they are used only to generate your private analysis (your technique tree) and are then automatically deleted by a scheduled cleanup job shortly after processing — typically within about 30 minutes. We retain only the derived analysis (your technique trees, game plans, and related data), never the raw transcript text. Your other content stays in your account for as long as the account exists, and items you move to the trash can be purged by you at any time. When you delete your account, your personal data and content are deleted within 30 days, except where retention is legally required. Deleted data — including transcripts already removed — may persist in encrypted backups until those backups age out of their retention window, after which it is permanently gone.
6. Your rights
You can access, correct, export, or delete your data. You may also object to or restrict certain processing. To exercise any of these rights, contact us at the address below; we respond within 30 days.
7. Cookies and sessions
We use strictly necessary cookies and browser storage to keep you signed in and remember preferences such as language and theme. We do not use third-party advertising or tracking cookies.
8. Security
Passwords are stored hashed, traffic is encrypted in transit, and access to production data is restricted. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you without undue delay.
9. Changes to this policy
We may update this policy as the service evolves. Material changes will be announced in the application before they take effect. Continued use of the service after a change means you accept the updated policy.