Privacy Policy

1. Information We Collect

We collect information that is necessary to provide and improve our Service. The types of information we collect are:

• Account Information: When you register with email and password, we collect your email address and store a salted hash of your password (we never store passwords in plaintext). When you register or log in with Google, your Google account email is collected, your Google account password is never seen or stored by us, and your Google display name (if provided by Google) is used to populate your contact record in our CRM (see the GoHighLevel disclosure in Section 3) and your analytics profile, but is not persisted in our application database.
• Phone Number Information: When you opt-in to receive SMS messages (such as for account verification, promotional offers, or credit claims), we collect and store your phone number. Phone numbers are collected only with your explicit consent and are used solely for the purposes disclosed at the time of collection.
• Payment Information: All payments are processed by Stripe. We do not collect or store your full credit card information. We only store your Stripe Customer ID to manage your subscription.
• User-Provided Content and Data: To provide our Service, we process and store the content you create through TubeGen, including video titles, scripts, image prompts, generated images, generated voiceovers, soundtracks, and rendered videos (collectively, "Generated Content"). Generated Content is stored as part of your project history so you can return to, edit, and re-render your projects. Projects that have not been modified for 30 days are auto-archived: the rendered media (images, voiceovers, soundtracks, videos) is deleted from storage to free space, while project metadata (titles, scripts, settings) is preserved. You may delete a project — and all associated Generated Content — at any time, and all Generated Content is deleted when you delete your account. For the "Style Creation" feature, we also store the YouTube URLs you provide along with the style name, voice ID, and speed settings you configure; transcripts of those YouTube URLs may be temporarily processed to learn your channel's writing style.
• Google Account & YouTube Channel Data (Optional): If you choose to connect your YouTube channel through our optional YouTube integration, we collect and store: the Google account email associated with your YouTube channel, your YouTube channel ID and channel title, and OAuth 2.0 access and refresh tokens (encrypted at rest). When you actively use the integration, we also fetch — at the time you request it — your channel statistics, your video list, and per-video metadata (title, view counts, engagement metrics) for display within TubeGen. We retain a reference (the YouTube video ID and publish timestamp) for videos you publish to YouTube through TubeGen so we can show your publishing history.
• Cookies: We use essential cookies solely for authentication purposes, such as a refresh token that allows you to remain logged in. We do not use cookies for tracking or advertising.
• Usage, Analytics, and Technical Data: We collect technical information (IP address, browser type, device type, operating system, request timestamps, pages visited, features used, and error events) through (i) standard server logs, (ii) Microsoft Clarity, which records clicks, scrolls, and session replays, and (iii) PostHog, which captures product analytics events, feature-usage telemetry, error tracking, and session replays. This data is used for product analytics, debugging, performance monitoring, abuse and fraud prevention, and security investigations. We do not use this data for advertising, remarketing, or sale to third parties.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our Service.
• To process your transactions and manage your subscription.
• To manage your account and send you transactional emails (e.g., payment receipts, password resets).
• To send you marketing and promotional communications via email. You may opt out of receiving these emails at any time by clicking the "unsubscribe" link provided in the email.
• To send SMS messages for account verification, security alerts, promotional offers, and service updates (only with your explicit consent).
• To improve the functionality and user experience of our Service.
• If you connect your YouTube channel, to display your channel and video statistics inside TubeGen, and to publish videos to your YouTube channel only when you explicitly initiate a publish action from within the Service.

We do not use your prompts, Generated Content, or any data obtained from the YouTube API or any other Google API to train our own AI models. We do not use any data obtained from the YouTube API to train, fine-tune, or improve any third-party AI model.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• AI / Content Generation Providers: To operate our Service, we send the prompts and assets needed to fulfill your generation requests to the following providers: Anthropic (Claude — script and title generation), OpenAI (GPT models — script and prompt support), xAI (Grok — title generation, image editing for Custom Turbo), Eleven Labs (voice synthesis), Google (Gemini-family image generation including Nano Banana 2 — used solely as an image-generation backend; we do not use Google for text generation), Ideogram (image generation), fal.ai and Runware (image and animation rendering), HeyGen (avatar video generation), and Storyblocks (B-Roll video stock).
• Infrastructure Providers: Stripe (payment processing), Whop (alternative payment processing), Tolt (affiliate / referral tracking), MongoDB Atlas (primary database), Cloudflare R2 (asset storage), Render (application hosting), Remotion Lambda (video rendering compute), Microsoft Clarity and PostHog (product analytics, error tracking, session replay), GoHighLevel (customer relationship management — email and, for Google sign-up users, first and last name from your Google profile are added as a CRM contact for marketing and support communications), and our SMS provider for text messaging.
• YouTube Data — Strict Separation: Information obtained from the YouTube API or about your connected YouTube channel is not shared with any of the AI providers listed above, including Google's AI services (Gemini, Nano Banana 2), and is not shared with any third party for any other purpose. The only data flow involving YouTube data is (i) reading data from your channel through the YouTube Data API for display inside TubeGen, and (ii) transmitting your video file to YouTube on your behalf when you explicitly click Publish. YouTube data is never sold, never used for advertising or remarketing, never transferred to advertisers or data brokers, and never used to train any artificial intelligence or machine learning model — ours or any third party's.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
• Legal Requirements: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation.

4. Google API Services & YouTube Integration

4.1. Limited Use Compliance. TubeGen's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4.2. YouTube API Services. The YouTube integration in TubeGen is built on the YouTube API Services. By using this integration, you also agree to the YouTube Terms of Service and Google's Privacy Policy.

4.3. OAuth Scopes Requested. When you connect your YouTube channel, we request only the minimum scopes necessary:

• youtube.readonly — to read your channel information, video list, and statistics so we can display them inside TubeGen.
• youtube.upload — to publish videos that you have rendered in TubeGen to your YouTube channel, only when you explicitly click a Publish button inside the Service.
• yt-analytics.readonly (optional) — to display deeper analytics such as watch time and audience retention, only if you opt into the analytics feature.

We do not request the broader full-control youtube scope, and we do not request any Google scope beyond those listed above for this integration.

4.4. Token Storage. OAuth 2.0 access and refresh tokens issued to TubeGen are encrypted at rest in our database. Tokens are never exposed to your web browser, never transmitted in URL parameters, and never shared with any third party. We use these tokens only to make YouTube API calls on your behalf at your request.

4.5. How YouTube Data Is Used. Data fetched from the YouTube API is used solely to (a) render channel and video information back to you inside TubeGen, and (b) when you initiate a publish action, transmit your video file to YouTube. We do not store viewer-side data, comments authored by other users, or any data belonging to YouTube channels other than the channel you have personally connected to TubeGen.

4.6. How YouTube Data Is Not Used.

• We do not use YouTube data for advertising, including remarketing, lookalike audiences, or interest-based advertising.
• We do not use YouTube data to train, retrain, or improve any artificial intelligence or machine learning model — ours or any third party's.
• We do not aggregate YouTube data across users to produce any external product, dataset, or report.
• We do not transfer YouTube data to data brokers, advertising networks, or any third party other than as strictly necessary to operate the integration (e.g., transmitting your video file to YouTube via the YouTube API on your behalf).
• No employee or contractor of TubeGen reads or inspects your YouTube data, except (i) at your explicit request to assist with a support issue, (ii) for security investigations such as suspected abuse, fraud, or violation of our Terms, (iii) to comply with applicable law, or (iv) where the data has been aggregated and anonymized for internal operations consistent with the Google API Services User Data Policy.

4.7. Disconnecting Your YouTube Account. You can disconnect your YouTube account from TubeGen at any time:

• In TubeGen: open Settings → Connected Accounts → click Disconnect YouTube. This revokes our OAuth token with Google and permanently deletes the stored channel reference, encrypted tokens, and cached YouTube data from our active systems.
• Through Google: visit https://myaccount.google.com/permissions and revoke TubeGen's access. This invalidates our tokens immediately.

4.8. Retention of YouTube Data. OAuth tokens and cached YouTube data are deleted from our active systems within 7 days of disconnection or account deletion. Backup copies are purged within an additional 30 days under our normal backup rotation. References to videos you have published to YouTube through TubeGen (YouTube video ID and publish timestamp only — no media files) may be retained as part of your project history for as long as your account is active, and can be deleted on request by emailing support@tubegen.ai.

5. Data Security and Retention

5.1. Security: We implement modern, industry-standard administrative, technical, and physical security measures to protect your information. This includes hashing passwords with industry-standard algorithms, encrypting OAuth tokens and other secrets at rest, and storing infrastructure secrets in a secure key-management system. However, no electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

5.2. Retention: We retain your personal information only for as long as your account is active, with the following clarifications: (a) generated content (scripts, voiceovers, images) tied to a project follows our standard archive policy and is deleted on project archive or account deletion; (b) OAuth tokens for connected Google/YouTube accounts are stored encrypted and are deleted within 7 days of you disconnecting that account or deleting your TubeGen account; (c) cached YouTube channel and video metadata is deleted within 7 days of disconnection or account deletion. All personal data is deleted from our active systems immediately upon account deletion, with backups purged within an additional 30 days.

6. Your Data Rights and Choices

You have the following rights regarding your personal information:

• Access and Deletion: You may request to access your data or delete your account and all associated information by emailing us at support@tubegen.ai.
• Disconnect Connected Accounts: You may disconnect your YouTube or any other connected Google account at any time from Settings → Connected Accounts inside TubeGen, or by visiting https://myaccount.google.com/permissions.
• Opt-Out of Marketing: You can unsubscribe from our marketing emails at any time using the link provided in the email.
• Do Not Track: Our Service does not currently respond to "Do Not Track" signals from web browsers.

7. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under the age of 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it as soon as possible.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.

9. SMS/Text Messaging Terms

9.1. Consent and Opt-In: By providing your phone number and checking the consent box, you expressly consent to receive text messages from TubeGen LTD. These messages may include:

• Account verification codes
• Security alerts and account notifications
• Promotional offers and marketing messages
• Service updates and reminders
• Credit claim notifications

9.2. Message Frequency: Message frequency may vary. You may receive up to 10 messages per month, though the actual number will depend on your account activity and preferences.

9.3. Message and Data Rates: Standard message and data rates may apply based on your mobile carrier's plan. TubeGen is not responsible for these charges.

9.4. Opt-Out Instructions: You may opt out of receiving SMS messages at any time by:

• Replying STOP to any text message from us
• Contacting us at support@tubegen.ai
• Updating your preferences in your account settings

After opting out, you will receive a one-time confirmation message. You may still receive important account-related messages that are necessary for service delivery.

9.5. Help and Support: For help with SMS messages, reply HELP to any message or contact support@tubegen.ai.

9.6. Supported Carriers: Our SMS service is compatible with major U.S. carriers including AT&T, Verizon, T-Mobile, Sprint, and others. Carrier support is subject to change.

9.7. Phone Number Changes: You are responsible for notifying us if your phone number changes. Update your phone number in your account settings or contact support.

10. Data Protection for SMS Services

10.1. Phone Number Storage: Phone numbers are stored securely using industry-standard encryption methods. We implement appropriate technical and organizational measures to protect phone numbers against unauthorized access, alteration, disclosure, or destruction.

10.2. Phone Number Sharing: We do not sell, rent, or share your phone number with third parties for their marketing purposes. Your phone number is only shared with our SMS service providers as necessary to deliver messages to you.

10.3. Compliance: Our SMS practices comply with the Telephone Consumer Protection Act (TCPA), CAN-SPAM Act, and other applicable laws and regulations regarding electronic communications.

10.4. Age Restrictions: You must be 18 years or older to opt-in to our SMS services. By providing your phone number, you confirm that you meet this age requirement.