Privacy Policy

What we collect

If you only read: we create an anonymous session identifier, stored in your browser, so the Host chat remembers your conversation as you move between pages. It is not linked to a name or an email address. Your chat messages are stored with it, and so is which show page you were on when you sent them.

If you make an account: your email address, a display name, a public handle, and anything you choose to add such as a short bio or social handles. Email and password are held by our authentication service; we never see your password.

If you publish a review: what you wrote, said or recorded. For video and audio reviews that includes the original recording, a transcript of it, and the edited cut we produce. It also includes the scores you confirm, the sentences the Host quoted as evidence for each score, and the full provenance trail of who proposed, confirmed and approved each change — that trail is public, by design, on your review page.

If you tell the Host your taste: the preferences you describe, any content sensitivities you set, and a numeric representation of that profile used to compare it with reviewers’ profiles. The numeric form is derived from your own words and is not reversible into them.

We do not use advertising trackers, we do not sell personal information, and we do not buy data about you from anyone else.

Google account data

This section is specific, because you deserve specifics before you connect a Google account.

If you connect a YouTube channel, we ask Google for permission to upload videos, manage playlists, and read your channel’s name and ID. We use them for exactly three things: publishing review videos you or an administrator queue, setting the thumbnail we rendered for that video, and creating or adding to a playlist for the show being reviewed. We read your channel’s name so the connection can be labelled something recognisable rather than an opaque ID.

We store your channel ID, its title and handle, the permissions you granted, and the refresh token Google issues. That token lives in our database in a table that denies all access to browser-side clients; only our server processes can read it. We do not read your other videos, your analytics, your subscribers, your comments, or your email beyond the account you signed in with.

EyeOnBroadway’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third parties except as necessary to provide this service, we do not use it for advertising, and no human reads it except where required to resolve a support issue you raise or to comply with the law.

You can disconnect a channel at any time, which blanks the stored token immediately. You can also revoke our access from your own Google Account at myaccount.google.com/permissions. Videos already published to your channel belong to your channel; deleting them is yours to do.

Who processes your data

We keep the list short on purpose, and every entry here is a service that actually runs in the product today:

• Our own servers — the database, file storage and authentication run on infrastructure we operate directly, not on a managed third-party platform.
• Render — hosts the website itself.
• Anthropic — the Host’s conversation, score proposals and written summaries. Your chat messages and review text are sent for processing.
• Deepgram and Together.ai — speech-to-text for recorded reviews. Your audio is sent for transcription.
• ElevenLabs — the Host’s spoken voice, and reviewer voice selection.
• Together.ai, Hedra and Tavus — image and video generation used for show artwork and the Host’s presence.
• Brevo — sends sign-in links and account email.
• Google / YouTube — only if you connect a channel, as described above.

These are processors acting on our instructions. None of them is permitted to use your data for their own purposes.

What is public

Published reviews are public: the review itself, the scores, the quoted evidence, the reviewer’s display name and handle, and the provenance trail. That is the point of the platform — a review nobody can check is a review nobody should trust.

Your email address is never public. Draft reviews are visible only to you and to the editor until you confirm and they are approved. Your taste profile is never shown to anyone else; it only affects the scores you see.

How long we keep it

Account and review data is kept while your account exists. Anonymous chat sessions and their transcripts are kept so the conversation survives a page change; they are not retained indefinitely once a session has gone quiet. Original recordings are kept alongside the published cut, because a review’s evidence is part of its provenance.

We use soft deletion internally, which means a deleted row is marked and excluded rather than erased on the spot. On request we will hard-delete your personal data.

Your choices

• Ask for a copy of what we hold about you.
• Ask us to correct it, or correct it yourself on your account page.
• Ask us to delete it. Published reviews are the one thing we may ask you about first, because other reviewers’ aggregate scores are computed partly from them.
• Disconnect a linked YouTube channel, or revoke access at Google.
• Clear your browser storage to drop the anonymous chat session.

Write to privacy@eyeonbroadway.com and we will answer.

Children

EyeOnBroadway is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us personal information, write to us and we will remove it.

Changes

If this policy changes in a way that affects what we collect or who processes it, we will update the date at the top and, where the change is significant, tell account holders directly.

See also our Terms of Service.