Effective September 29, 2026

Privacy Policy

This policy describes data handling for Brand Extractor and the experimental agent tools offered alongside it.

What the service processes

The API processes the URL you submit, the public page returned by that URL, request timestamps, request IDs, technical status, response time, candidate counts, and whether a payment header was present. Application telemetry hashes the requested hostname and user-agent rather than intentionally logging their raw values.

Screenshot requests also process page scripts, images, fonts, rendered pixels, final page URLs, network and output byte counts, and load warnings. The application records a hashed payer identifier when available to measure repeat usage. It does not intentionally log submitted URLs, screenshot contents, or payment authorization headers.

Transcript requests process the submitted public YouTube video URL, available caption text and timestamps, language information, and technical success or failure. The application does not intentionally log or retain full transcript text, video URLs, or payment authorization headers. To fulfil these requests, it sends the video URL to ScrapeCreators, which may retain request metadata and response data under its own privacy policy.

Payments

x402 payments are processed by the configured facilitator and public blockchain. Wallet addresses, amounts, transaction identifiers, and timestamps may be publicly visible and may be processed under the facilitator’s own privacy terms.

Storage and retention

Fetched page bodies, extracted results, and retrieved transcripts are processed in memory and are not intentionally stored by the application. Responses use no-store cache instructions. Operational telemetry is intended to be retained for no more than 30 days, although hosting, upstream data, security, and payment providers may retain their own logs or response data for different periods.

Customer screenshots are returned directly without application image storage. Each capture uses isolated temporary browser contexts, which are closed after the request. Browser temporary files are cleaned up on normal shutdown; the hosting runtime may retain temporary storage until it is recycled after an abnormal termination. Public sample screenshots used in our own benchmark are retained separately for quality review.

Why data is processed

Brand Extractor processes this information to fulfill requests, prevent abuse and private-network access, diagnose failures, measure whether the experiment is used, and investigate payment or refund issues.

Third parties and international processing

The submitted website receives a request from the service infrastructure and can observe its IP address and user-agent. Transcript requests are sent to ScrapeCreators for caption retrieval. Hosting, upstream data, logging, facilitator, and blockchain providers may process data in other countries. The service does not sell personal information.

Your choices

Do not submit URLs containing secrets, access tokens, personal data, or non-public resources. For a privacy request, contact the operator and include any relevant request ID. Some blockchain records cannot be altered or deleted by the operator.

Contact

Privacy questions: support@ilyyya.com.