MurmurCast

Privacy Policy

Last updated: March 2026

Who We Are

MurmurCast is operated by VulnXplorer. If you have any questions or concerns about this Privacy Policy, you can contact us at [email protected].

Data We Collect

We collect the following information when you use MurmurCast:

  • Account information: your name and email address, provided during registration.
  • YouTube subscription data: obtained through Google OAuth when you connect your YouTube account, including your subscribed channels and their public video metadata.
  • Usage data: information about how you interact with the service, such as pages visited, features used, and timestamps.

How We Use Your Data

Your data is used solely to provide the MurmurCast service. This includes:

  • Transcribing and summarizing content from your subscribed channels.
  • Generating and delivering personalized daily briefs.
  • Improving the reliability and quality of the service.

Third-Party Services

MurmurCast relies on the following third-party services to operate:

  • Google — OAuth authentication and YouTube API access for retrieving subscription and video data.
  • Anthropic (Claude) — AI-powered summarization of transcribed content.
  • OpenAI / Replicate (Whisper) — speech-to-text transcription of audio and video content.
  • Stripe — payment processing for subscription plans.
  • Resend — transactional email delivery for daily briefs and account notifications.

YouTube API Compliance

MurmurCast's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data Retention

Your account data (name, email, connected accounts) is retained for as long as your account exists. Transcripts and summaries are retained according to the limits of your subscription plan. When you delete your account, all associated data is permanently removed.

Account Deletion

You can delete your account at any time from the Settings page within the application. Deleting your account will permanently remove all of your data from our systems.

Cookies

MurmurCast uses JWT (JSON Web Token) cookies strictly for authentication purposes. We do not use tracking cookies, analytics cookies, or any third-party advertising cookies.

Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to access, correct, or delete your personal data. You may also request a full export of your data. To exercise any of these rights, please contact us at [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this page periodically for any changes.