Privacy Policy.

ATTO is operated by [FOUNDER: confirm legal operator name and any DBA] (“ATTO”, “we”, “us”). This policy covers ATTO's thumbnail and packaging tools at packager.tryatto.com: the thumbnail gallery and search, collections, the workspace, the shelf test on /compare, Pro analysis, and the Packager.

ATTO Live, our streaming product, has its own policy at tryatto.com/privacy.

ATTO uses YouTube API Services (the YouTube Data API) to find and show public YouTube videos: their titles, channel names, thumbnails and public statistics such as view counts. When you use those features, Google also processes data under its own policy. Read the Google Privacy Policy at https://policies.google.com/privacy. By using ATTO you also agree to the YouTube Terms of Service.

We never ask for access to your YouTube account. Signing in with Google shares only your basic Google profile with us (see below). We can't see your watch history, subscriptions, private videos, YouTube Analytics or anything else in your YouTube or Google account, and we can't post, upload or change anything there.

Your account

• Google sign-in: your name, email address, profile photo and Google account ID. That's the standard “basic profile” permission and nothing more.
• Email sign-in: your email address. Your password is handled by Firebase Authentication (Google). We never see or store it in readable form.
• Plan and billing: your plan, subscription status and dates, your Stripe customer ID and a record of your payments (amount, date, plan). Card details go straight to Stripe. We never see or store your full card number.

What you do in ATTO

• Searches. The words you search for, which we send to YouTube (see “Who we share it with”). We cache search results by query for about 24 hours. The cache isn't linked to your account.
• Collections. The collections you create and the videos you save to them.
• Titles and thumbnails you test. Drafts you score in the workspace or on /compare are sent to our analysis servers to be scored. We don't keep them after the score comes back.

Packager inputs and results

When you request a package, we store what you give us so we can build it:

• your video description, key moment, sample title, text preference, and any links you paste (your channel, a clip or a VOD);
• images you upload: a sample thumbnail, reference photos with their labels (“my cousin”, “the silver mic”), and face photos you save under “My identity”;
• the titles and thumbnail variants we generate for you, including upscaled HD files.

Usage metering and security

• Daily and lifetime counters of searches, analyses, audits and downloads, keyed to your account ID or, if you're signed out, to an anonymous ID and your IP address. We use them to apply free-plan limits and fair use.
• Server logs kept by our hosting providers: IP address, browser type, the pages and API routes requested, and timestamps. We use them for security and to fix problems.
• A bot check from Cloudflare Turnstile on signed-out search (see “Cookies and device storage”).

What we don't collect

We don't collect precise location, contacts or advertising IDs. We don't collect YouTube account data, and we don't infer sensitive characteristics about you.

Face and reference photos are the most personal things you give us, so they get the strictest rules:

• One purpose. We use them only to put you, or the person or object you labeled, into your own thumbnails.
• Pixels, not people. We find where a face is in the frame and measure its exposure, brightness and sharpness so it reads well in a thumbnail. That's a photographic measurement of light. We don't create face-recognition templates, we don't identify anyone, and we don't infer or label skin type, race, ethnicity, age, gender or any other sensitive characteristic of anyone in your photos.
• Private to your account. Only you, and the systems that build your package, can access them. Other users can't see them.
• Not used for training. We don't use your photos or other uploads to train ATTO's models.
• Deletable any time. Remove a face photo in Packager → My identity and we delete the stored file. Deleting your account deletes all of them.

Only upload photos of yourself, or of people who have agreed to it. For anyone under 18, you need a parent's or guardian's permission.

To power the gallery, search, collections and benchmarks, we store public data from the YouTube API: video IDs, titles, channel names and IDs, view counts and other public statistics, publish dates, durations, tags and thumbnail links. We also store our own analysis of those thumbnails, such as colors, text, layout and image embeddings. When you search, the public results YouTube returns may be added to this library.

Planned retention: refresh or delete stored YouTube API data within 30 days. This is a deployment gate, not a verified statement about the current service. Before publication, confirm coverage for unavailable videos, saved collections, caches, aggregates and derived records in the deployment gates document.

Thumbnails are shown from YouTube's image servers, through our hosting provider's short-lived image cache. We don't sell or hand out copies of other creators' thumbnails. Downloads cover your own generated packages: 720p on Free, and up to 4K on Pro.

When a Pro user asks for an AI analysis of a video, we send that video's thumbnail and title to OpenAI. A 30-day limit on stored analysis results is planned; confirm cache expiry and deletion in the deployment gates document before publication.

Scores, outlier multipliers, predicted performance, packaging scores and niche benchmarks are ATTO's own estimates, not YouTube data. Our models calculate them from the visual features of public thumbnails and their public performance. We label them in the product (“ATTO estimate · not YouTube data”). Estimates derived from YouTube API data are included in the planned 30-day retention policy; coverage and any required approval must be verified before publication.

Estimates are there to help you make decisions. They don't promise any result on YouTube.

• to run ATTO: sign you in, show and search videos, keep your collections;
• to build your packages and score your titles and thumbnails;
• to take payments and manage your plan;
• to apply free-plan limits and fair use, and to stop abuse, fraud and bots;
• to answer your messages and give support;
• to find and fix bugs and improve ATTO, using counts rather than your content;
• to meet legal obligations and enforce our Terms.

We don't sell your personal information, and we don't share it for advertising. ATTO shows no ads. We don't let third parties serve content or ads in ATTO, and we don't use third-party analytics or advertising trackers.

We share information only with the service providers that run ATTO for us, only for the purposes below, and under their own privacy and data-processing terms:

YouTube. When you search, your search terms are sent to YouTube through the YouTube API. Google's handling of that request is covered by the Google Privacy Policy.

Packager rendering. Packages are built on servers and computers ATTO operates. Working copies of your files are made there only while your package renders, and we delete them within 7 days after it finishes.

We may also share information if the law requires it, to protect people's safety or ATTO's rights, or as part of a merger or sale of the business. In a sale, this policy would keep applying to your data.

Our providers are mainly in the United States, so your information is processed in the U.S. and wherever those providers operate.

ATTO stores a small amount of information on your device, and lets two providers do the same:

We don't use advertising or analytics cookies. If you block cookies or site storage, sign-in and free-search limits may stop working.

Delete your account in ATTO

Sign in and open the Account menu → Delete my account. That deletes your account and profile, collections, Packager requests, uploads (face and reference photos included) and generated results. It also cancels any active subscription. We complete deletion within 7 days. Exceptions are records the law requires us to keep, such as payment records, and the minimal account deletion marker described above. That server-only account_deletions marker contains only your UID and deletion-request timestamp and prevents late recreation of deleted data.

Delete individual items

You can delete a face photo at any time in Packager → My identity, and cancel a package request while it's still queued. To delete something else on its own, such as a finished package or a collection, email us and we'll delete it within 7 days.

Or ask us by email

Email [FOUNDER: supply a verified privacy contact email] from the address on your account and ask us to delete your data. We'll confirm and complete it within 7 days.

Deleting ATTO data doesn't touch YouTube

Deleting your ATTO account or data doesn't delete, change or affect anything on YouTube or in your Google account, and deleting things on YouTube doesn't delete your ATTO account.

Revoke ATTO's access to your Google account

On top of deleting your data, you can remove ATTO's access to your Google account at any time on Google's security settings page: https://security.google.com/settings/security/permissions. Revoking access stops Google sign-in to ATTO but doesn't delete what we already store, so use the steps above for that.

We encrypt traffic in transit (HTTPS). Uploads and results are locked to your account by access rules, and only our servers hold the keys that reach our database and our AI providers. No system is perfectly secure, though. If you find a security problem, please email [FOUNDER: supply a verified privacy contact email].

Wherever you live, you can ask us to show you, correct, export or delete your personal information. You can also object to how we use it. Email [FOUNDER: supply a verified privacy contact email] and we'll respond within the time the law gives us, usually 30 days or sooner. We won't treat you differently for asking.

UK, EU and Switzerland

We use your information to provide the service you signed up for (contract), to keep ATTO secure and prevent abuse (legitimate interests), and to meet legal duties. We use face photos because you chose to upload them for that purpose (consent), and you can withdraw consent by deleting them. You can also complain to your local data protection authority.

California

We don't sell or “share” personal information (as the CCPA defines those terms), and we don't use sensitive personal information to infer characteristics about you.

ATTO isn't for children under 13, or under the minimum age in your country if that's higher, and we don't knowingly collect their information. If you think a child has given us personal information, email [FOUNDER: supply a verified privacy contact email] and we'll delete it.

When we change this policy we'll update the effective date at the top. If a change is significant, we'll tell you in ATTO or by email before it takes effect.

Questions or complaints about how ATTO handles your information? Contact us and we'll get back to you.