Privacy policy

1. Who we are

ChalkTalkis a web app for making tutorial videos by chatting with AI. It is built and run by an independent developer, Udit Kumar ("we", "us"), who is responsible for your data under this policy.

This policy covers the ChalkTalk website, the web app, and the ChalkTalk MCP server that connects AI tools such as Claude, ChatGPT, and Cursor to your account. Questions go to support@chalktalk.dev.

2. What we collect

Information you give us

• Account details: your name, email address, and password, which we store only as a hash. If you sign in with Google, we receive your name, email address, and profile picture instead of a password.
• Your content: projects, scripts, narration text, chat messages and prompts, images you attach, narration audio, and videos you render or export.
• API keys: if you connect your own AI provider key, we store it encrypted.
• Messages to us: anything you send to support@chalktalk.dev.

Information collected as you use ChalkTalk

• Usage counts: AI tokens, narration characters, and render seconds, used to apply plan limits.
• Sessions and devices: IP address and browser user agent for each signed-in session.
• Connected apps: which MCP clients you have authorized and the access tokens issued to them.
• Logs: server logs and logs of AI requests, used to find and fix errors.
• Product analytics: pages you view, features you use, clicks, approximate location from your IP address, and device and browser type. When you are signed in, this is linked to your account id, never your email or name. We may record sessions to see where people get stuck, with everything typed into forms hidden.

We use analytics only to understand and improve ChalkTalk. We do not use advertising trackers, and we do not buy data about you from anyone.

3. Google user data

When you choose "Continue with Google", ChalkTalk requests only the basic sign-in scopes: openid, email, and profile. We use your Google name, email address, and profile picture only to create your account, sign you in, and show your name and picture in the app. We do not request or access your Gmail, Drive, Calendar, contacts, or any other Google data.

We do not sell Google user data, use it for advertising, or use it to develop, improve, or train AI models. We share it only with the providers that host our app and database, and only to run ChalkTalk.

ChalkTalk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove ChalkTalk's access at any time from your Google account permissions.

4. How we use your data

• To provide ChalkTalk: save your work, generate scripts and narration, and render videos.
• To keep accounts secure and prevent abuse, such as duplicate free accounts.
• To apply usage limits and, if you subscribe, manage billing.
• To find and fix bugs and keep the service reliable.
• To understand how ChalkTalk is used, such as how many people use it each month and which features they rely on, so we can improve it.
• To reply when you contact us, and to send notices about your account or these policies.

We do not sell your personal information, show you ads, or use your content to train our own AI models.

5. AI processing

ChalkTalk sends your prompts, chat messages, attached images, and the relevant parts of your project to AI model providers to generate responses, through their APIs. Their own policies govern how they handle that data: Anthropic, OpenAI, and OpenRouter.

If you connect your own API key, those requests go to that provider under your agreement with them.

6. Connected AI tools (MCP)

When you connect an AI tool to ChalkTalkthrough our MCP server, you approve it on a consent screen that names the tool and what it can do. The tool can then read and change your projects on your behalf. What the tool does with the data it receives is governed by that tool's own privacy policy, not this one.

To disconnect a tool, remove it in that tool's settings, or email support@chalktalk.dev and we will revoke its access.

7. Who we share data with

We share data only with service providers that help us run ChalkTalk, and only what each one needs. They may use it only to provide their service to us.

We may also share data:

• When you choose to: a project share link lets anyone with the link view that project until you turn it off.
• When the law requires it: to comply with a valid legal request, or to protect the safety and rights of users and the public.
• If the business changes hands: as part of a merger or sale, in which case this policy continues to apply to your data.

8. Legal bases (EEA and UK)

• Contract: to provide the service you signed up for.
• Legitimate interests: to keep the service secure, prevent abuse, fix problems, and measure how the service is used.
• Consent: for Google sign-in and connecting AI tools, which you can withdraw at any time.
• Legal obligation: to keep records the law requires, such as billing records.

9. Retention and deletion

We keep your account and content for as long as your account exists. Logs are kept only as long as needed to debug and secure the service.

To delete your account and its projects, email support@chalktalk.dev from the address on your account. We will delete it within 30 days, except records we must keep by law, such as billing records. Copies in backups are removed as those backups expire.

10. International transfers

Our providers may process your data in countries other than yours, including the United States. Where the law requires it, we rely on safeguards such as the providers' standard contractual clauses.

11. Security

Data is encrypted in transit with HTTPS. Passwords are hashed, stored API keys are encrypted, and connected apps get their own revocable tokens. No system is perfectly secure; if you find a vulnerability, please tell us at support@chalktalk.dev.

12. Your rights and choices

Depending on where you live, you can ask us to:

• Give you a copy of your personal data.
• Correct data that is wrong.
• Delete your data.
• Send your data to you in a portable format.
• Stop or limit certain processing.

Email support@chalktalk.dev and we will respond within 30 days. We will not treat you differently for using these rights. You can also complain to your local data protection authority.

We do not sell or share personal information for cross-context behavioral advertising, as those terms are defined under California law.

13. Cookies and local storage

We use essential cookies to keep you signed in and protect your session, and your browser's local storage to remember preferences such as theme and editor settings.

Our analytics run without cookies or browser storage. We do not use advertising or third-party tracking cookies. To opt out of analytics, use a browser or extension that blocks tracking, or email support@chalktalk.dev and we will exclude your account.

14. Children

ChalkTalk is not meant for children under 13, or under the minimum age in your country, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

15. Changes to this policy

If we change this policy, we will update the date at the top. For significant changes, we will also notify you by email or in the app before they take effect.

16. Contact

Questions, requests, or complaints about privacy: support@chalktalk.dev.