Privacy Policy

1. Information We Collect

Account data: When you sign in with Google, we receive your name, email address, and profile picture from Google OAuth.

YouTube data: When you connect your YouTube channel, we store your channel ID, channel name, avatar, and subscriber count. We also store OAuth tokens (encrypted with AES-256-GCM) to enable pushing metadata to your videos. We fetch your last 30 video titles, descriptions, and tags to build your channel's AI profile.

Usage data: We store a history of AI generations (input URLs, generated titles/descriptions/tags, AI model used, token count, latency).

Prompt profiles: We store the prompt profiles you create (tone, keywords, writing style, examples).

2. How We Use Your Data

• Authenticate you and maintain your session
• Generate AI-optimized YouTube metadata for your videos
• Build a channel fingerprint to personalize AI prompts
• Push metadata to YouTube on your behalf (only when you click "Push to YouTube")
• Track your monthly usage against your plan limit
• Process payments via DodoPayments

We do not sell your data to third parties. We do not use your data for advertising.

3. YouTube API Data

TubePush uses the YouTube Data API v3. Data obtained from YouTube APIs is used solely to provide the Service. We store channel videos (title, description, tags, view count) for up to 30 days to build your AI channel profile. This data is not shared with third parties beyond the AI processing pipeline (OpenAI).

TubePush's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Third-Party Services

• OpenAI — processes transcripts and channel data to generate titles, descriptions, and tags. Data sent to OpenAI is governed by their privacy policy.
• DodoPayments — processes payments as our Merchant of Record. We store your DodoPayments customer ID and subscription status but not full payment card details.
• Neon (PostgreSQL) — stores all application data securely in the cloud.
• Upstash Redis — used for rate limiting. No personal data is stored in Redis.

5. Data Security

YouTube OAuth tokens are encrypted at rest using AES-256-GCM before being stored in our database. All data in transit is protected by TLS. Access to the database is restricted to application servers.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data (profiles, generation history, channel data, OAuth tokens) is permanently deleted within 30 days.

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to access, correct, or delete your personal data. You can delete your account and all associated data at any time from the Settings page. For other data requests, contact us at info@tubepush.io.

You can revoke TubePush's YouTube access at any time via Google Account Permissions.

8. Cookies

We use essential cookies only — for session management (NextAuth session cookie) and CSRF protection during YouTube OAuth. We do not use advertising or tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page.

10. Contact

For privacy-related questions, contact us at info@tubepush.io.