ProphetaLabs Privacy Policy
Last Updated: October 23, 2026
Centrality LTD operates ProphetaLabs. For privacy questions or requests, email info@prophetalabs.com.
Centrality LTD · Business No. 765487103
14 Discovery Ridge Rd SW
Calgary, AB T3H 4P8
Canada
What we collect and why
- Accounts: usernames, email addresses, sign-in and invitation details, agreement acceptance records, and profile information supplied through Google sign-in.
- Content: uploaded or imported videos, audio, frames, transcripts, metadata, prompts, results and feedback. Content may identify you or other people.
- Connected channels: YouTube channel and video information, performance and audience-retention analytics, and authorization tokens.
- Payments and operations: purchase and credit records, subscription plans and status, renewal and cancellation records, payment references, and records of authorized service access, including complimentary access; support messages, IP addresses, browser/device information, sessions and processing logs. Checkout providers collect payment details.
We use this information to operate accounts, process content, display analytics, deliver results, handle payments, subscriptions and support, determine service access, maintain credit balances, improve the service, prevent misuse and meet legal obligations. We may use uploaded or synced content and related data to train and improve ProphetaLabs models.
Who receives information
- Cloudflare: hosting, storage and email.
- dstack: managing processing workers.
- Runpod: computing infrastructure.
- AI processing providers: We currently use OpenAI and may use other AI providers in the future. We will update this list when providers change.
- Polar: payments, subscriptions and refunds.
- Google / YouTube: sign-in, channel connections and video players.
Data shared depends on the features you use. Processing on our behalf is governed by our provider agreements; Polar and Google also process information for their own services. We may disclose information at your direction, to professional advisers, as legally required, to protect rights or investigate abuse, or in a business transfer subject to privacy law.
YouTube, cookies and connected services
ProphetaLabs uses YouTube API Services to retrieve and display authorized channel information and analytics. We store tokens to maintain your connection. Disconnect a channel in ProphetaLabs, close your account, or use Google account permissions to revoke access. Disconnecting or closing your account also requests deletion of applicable stored YouTube user data; no separate email is needed.
We delete that data as soon as possible and within 7 calendar days of a deletion request or revocation through ProphetaLabs. For revocation through Google, we stop authorized access and delete the data as soon as possible and within 30 calendar days of the revocation. This includes applicable tokens, channel, video and analytics records and provider copies. Deleting our copies does not delete data on YouTube itself.
We use cookies and browser storage for sign-in, security and preferences. Blocking them may prevent features from working. Checkout providers and embedded YouTube players may collect device information and use cookies when loaded or used. See the Google Privacy Policy and provider links above.
Retention and deletion
We keep account records and saved content to provide your account and library; logs and support records as needed for troubleshooting, security and disputes; and billing records for accounting, tax and legal obligations.
Cancelling a subscription does not close your account or request data deletion. We retain account, subscription and credit records to maintain your open account and balance. You can request closure or deletion without subscribing; the deletion requirements below still apply.
On request, we delete Customer Content within 7 calendar days, including associated personal data in frames, transcripts, analysis records and copies held by providers on our behalf. Specify your account, channel or content in your request; you need not identify every technical copy. Any legally required retention is limited to that purpose. Billing or backup retention does not generally justify retaining videos or overriding YouTube deletion requirements. YouTube data also remains subject to applicable API storage and refresh rules.
Processing on your behalf
As part of our Terms of Service, we process personal data in your content and results during the service only on your in-app or written instructions. You must have the necessary permissions. We require staff confidentiality, appropriate security, prompt breach notification, and legally required assistance with privacy requests, security, assessments, consultations and audits.
You authorize the listed processing providers. We require equivalent safeguards, remain responsible for their work, and notify you of changes with an opportunity to object. Transfers must comply with privacy law.
When services end, we return or delete data and copies at your choice within the deadlines above, unless legally required to retain them. We notify you of legally required processing where permitted, and instructions we believe unlawful. These commitments override general content-use, training and backup permissions.
Security and international processing
We use access controls and other safeguards, but cannot guarantee complete security. Providers may process information abroad under different laws and government-access rules. Contact us for details of applicable transfer safeguards.
Your rights
Email info@prophetalabs.com for access, correction, deletion, account closure, portability, restriction, objection or consent withdrawal, where applicable. We may verify your identity or authority, respond within legal deadlines and explain any refusal. Withdrawal does not undo prior lawful processing and may affect dependent features. You may complain to your local regulator, including Alberta's Information and Privacy Commissioner where applicable.
Where EU or UK law applies, our legal bases are performing our agreement for requested services, legitimate interests for proportionate security and operations, legal obligations for required records, and consent where required.
Policy updates
We update this policy when practices change, notify you of material changes, and obtain consent where required.