Privacy Policy

This Privacy Policy explains how tubecp ("we", "us") collects, uses, and shares information when you use our website and application (the "Service").

1. Information we collect

Account information

When you sign up or sign in, we store account data in Neon PostgreSQL, including your email address, name, authentication identifiers, and session metadata needed to operate the Service. Neon privacy policy: neon.tech/privacy-policy.

Subscription and usage data (Neon PostgreSQL)

We store subscription and usage data in Neon PostgreSQL, including your plan, billing period and renewal dates, usage counters (research, knowledge-base builds, chat messages), and Polar subscription references. Neon privacy policy: neon.tech/privacy-policy.

Operational cache (Upstash Redis)

We use Upstash Redis for caching transcripts, rate-limit state, and knowledge-base metadata needed to provide the Service. Upstash privacy policy: upstash.com/trust/privacy.

Research and chat content (OpenRouter)

When you run research, build knowledge bases, or chat, we send prompts and related context to OpenRouter, which routes requests to AI model providers. This may include your research topics, video titles and descriptions, transcript excerpts, embeddings, and chat messages. OpenRouter privacy policy: openrouter.ai/privacy.

YouTube data (YouTube Data API)

To search and rank videos, we query the YouTube Data API using your research topics. We receive public video metadata such as titles, descriptions, channel names, thumbnails, and video IDs. We do not access your personal YouTube account unless you explicitly connect one in a future feature. Google's privacy policy applies: policies.google.com/privacy.

Payment information (Polar)

Paid subscriptions are processed by Polar as merchant of record. Polar collects billing details, payment method information, and transaction records. We receive subscription status, plan identifiers, and Polar customer references—not full payment card numbers. Polar privacy policy: polar.sh/legal/privacy.

Diagnostics (Sentry)

If configured, we use Sentry to collect error reports and performance data, which may include request paths, browser or device information, IP-derived location (at city level), stack traces, and technical logs. We configure Sentry to avoid sending unnecessary personal data. Sentry privacy policy: sentry.io/privacy.

Information you provide directly

This includes research queries, chat messages, support emails, and feedback you choose to send us.

2. How we use information

• Provide, operate, and secure the Service
• Authenticate users and enforce plan limits
• Process subscriptions and deliver paid features
• Improve reliability, performance, and product quality
• Respond to support requests and legal obligations
• Detect abuse, fraud, and violations of our Terms

3. Legal bases (EEA/UK users)

Where applicable, we process personal data based on contract performance (providing the Service), legitimate interests (security, analytics, improvement), consent (where required), and legal obligations.

4. How we share information

We share information with service providers that help us run the Service:

• Neon — user account storage
• Upstash — usage data and rate limiting
• OpenRouter — AI inference and embeddings
• Google / YouTube — video search metadata
• Polar — payments and subscriptions
• Sentry — error monitoring
• Vercel — hosting and infrastructure

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale.

5. Data retention

We retain account and usage data while your account is active and as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. Knowledge-base data may be deleted when you remove a knowledge base, cancel a paid plan, or after a reasonable inactivity period. Logs and error reports are retained for a limited period consistent with operational needs.

6. Security

We use industry-standard measures including encrypted connections (HTTPS), access controls, and third-party infrastructure with security certifications. No method of transmission or storage is completely secure.

7. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You can update account details on your account page where available. To exercise privacy rights, contact us at support@tubecp.com. You may also lodge a complaint with your local data protection authority.

8. International transfers

We and our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses.

9. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children.

10. Changes

We may update this Privacy Policy from time to time. We will post the revised version with an updated "Last updated" date. Material changes may be communicated by email or in-app notice where appropriate.

11. Contact

Privacy questions: support@tubecp.com