Effective 4 November 2026
Privacy policy
This policy covers Cutkoi's public information site and controlled development prototype. Cutkoi is operated by Axel Viking Cornelius, an individual developer in Sweden, not a registered company. Contact: axelcornelius93@gmail.com.
1. Information we process
The public site does not offer registration or collect payment details. Hosting and network providers may process your IP address, browser information and request logs to deliver and secure the site. We do not add advertising trackers or analytics cookies.
In the prototype, we process test account email addresses, authentication and session records, project briefs, selected settings, research sources, AI outputs, revisions, approvals and operational records such as request identifiers, token usage and cost. Do not enter sensitive personal information or material you are not entitled to use.
2. YouTube API Services and Google
Cutkoi uses YouTube API Services to search for public videos and retrieve their titles, channel identifiers and names, publication dates, thumbnails, durations, public view/like/comment counts and availability or licence information. We do not obtain private channel analytics or ask for your YouTube password. This research workflow does not connect your Google account through OAuth or upload videos to your channel.
Google's handling of information is described in the Google Privacy Policy. YouTube use is subject to the YouTube Terms of Service. Source links open YouTube; prototype source thumbnails may load from Google's image servers, which then receive your network request. The public walkthrough is a locally recorded MP4, not an embedded YouTube player.
3. AI processing and purpose
Cutkoi uses research to help develop original concepts. Selected public YouTube URLs are submitted to Google's Gemini video-understanding service for qualitative observations about visible content, audio and narrative structure. Briefs, selected source metadata and observations are processed with Anthropic's Claude to plan research, assess evidence and propose concepts. Cutkoi does not download or rehost full YouTube videos or full transcripts as part of this route.
AI observations may be inaccurate and are subject to human review. We do not treat public view counts as private audience-retention data or guarantee performance. The contractual permissions for analysing standard-licence public references through this combined API route remain under review before production launch; technical operation alone does not establish permission.
4. Service providers and sharing
We use Railway for application hosting, Supabase/PostgreSQL for account and application data, and Cloudflare for DNS, transactional email and encrypted backup storage. Google and Anthropic process the inputs described above. Stripe is used for payment integration testing; public paid service is not currently offered. We do not sell personal data. Access is limited to the developer and service providers needed to operate, test and secure the service, or disclosures required by law.
Providers can process data outside Sweden or the EEA. Their applicable service terms, data-processing arrangements and transfer safeguards govern their processing. Contact us for information about a specific provider or transfer. Provider-side security logs and retention are separate from Cutkoi's own deletion controls; we do not promise that deleting a project instantly deletes every provider record.
5. Retention and deletion
Public YouTube source metadata and source-dependent research artifacts in the prototype are assigned a maximum 29-day lifetime. Expired sources must be refreshed or removed from usable research; source-derived artifacts inherit the relevant expiry. Operational execution logs and read manifests normally have a 30-day retention period, unless a documented security, debugging or legal reason requires longer retention. Original project content and account records are separate from YouTube source data and are retained while needed for the project or account.
To request access, correction or deletion of account, project or source-related data, email axelcornelius93@gmail.com. Identify the account email or project/source concerned; do not send passwords. We may verify identity before acting. We aim to handle requests promptly and respond within the applicable legal timeframe, normally one month. Necessary security or legal records may be retained with restricted access. Encrypted backups may persist until their retention expires; deletion records are applied when restoring them so deleted data is not made available again.
No Google-account authorisation is currently requested. You can review any Google-connected apps at Google account permissions; this is separate from requesting deletion of data held by Cutkoi.
6. Cookies, security and your choices
The prototype uses necessary authentication/session cookies and security controls. The public information site sets no application cookies. We use access controls and encryption in transit and protect stored credentials. No system can be guaranteed completely secure. Contact us if you suspect a security or privacy problem.
7. Legal basis and rights
Where applicable, we process information to provide a requested service, for legitimate interests in developing and securing the prototype, to meet legal obligations, or with consent for optional processing. You may request access, correction, erasure, restriction or portability, object to processing and withdraw consent where consent is the basis. You can complain to Sweden's Integritetsskyddsmyndigheten (IMY). AI recommendations do not make decisions with legal or similarly significant effects about you.
8. Age and updates
The prototype is intended for adults aged 18 or over and is not directed at children. We will update this policy before material changes to data use or a public launch and obtain any required renewed agreement. The effective date above identifies this version.