Privacy Policy

Information We Collect; Account Information; Usage Data; Cookies; Analytics; Google Authentication; Stripe Payments; Transcript Storage; AI Processing; Legal Basis for Processing; Data Retention; Data Security; International Transfers; User Rights under GDPR; Right to Delete Account; Contact; Changes to this Policy.

We collect information you provide, including YouTube URLs, selected languages, prompts, support messages, and account details, plus technical information generated when you use TubeText.

Account data may include your name, email address, authentication provider identifier, preferences, plan, usage allowances, and account timestamps.

We may collect IP address, browser and device information, pages visited, feature events, timestamps, error logs, and security signals to operate, troubleshoot, and protect TubeText.

We use essential cookies for authentication, security, preferences, and consent choices. Optional analytics cookies are used only where consent is required and obtained. See the Cookie Policy (/cookie-policy).

With consent where required, Google Analytics helps us understand aggregated service usage and performance. You can withdraw analytics consent through Cookie Settings.

If you choose Google Sign-In, Google provides the account details needed to authenticate you, such as your name, email address, profile image, and provider identifier. TubeText never collects your Google account password or YouTube password.

Stripe processes subscription and one-time payments and may provide us with customer, transaction, subscription, payment-status, country, and limited payment-method information. TubeText does not receive or store complete card numbers.

TubeText stores submitted YouTube URLs, generated transcripts, related metadata, and account associations in Supabase so you can access history and paid features. Public YouTube video files are not hosted by TubeText.

Prompts and relevant transcript text may be sent to OpenAI when OpenAI is configured to generate summaries, notes, or translations. We send only the data reasonably needed for the requested feature and do not use AI output as a substitute for human verification.

Under the GDPR, we process data to perform our contract with you, comply with legal obligations, pursue legitimate interests such as security and service improvement, and, for optional analytics or other activities where required, based on consent. We may also process data to establish or defend legal claims.

We retain account and transcript data while your account is active and as needed to provide the service. We may retain billing, security, backup, and legal records for the periods required by law or reasonably necessary for disputes and fraud prevention, then delete or anonymize them.

We use reasonable technical and organizational safeguards, including access controls and secure service providers. No online system is completely secure, so we cannot guarantee absolute security.

Our providers may process data outside the EEA. Where GDPR applies, we use lawful transfer mechanisms such as adequacy decisions, Standard Contractual Clauses, and supplementary safeguards where appropriate.

Where GDPR applies, you may request access, correction, erasure, restriction, portability, or objection; withdraw consent without affecting earlier processing; and complain to your supervisory authority. Rights may be limited where the law permits.

You may use the account-deletion control where available or contact {{LegalEmail}}. We will delete or anonymize eligible data after verifying the request, subject to legal retention duties, fraud prevention, and limited backup cycles.

The data controller is {{CompanyName}}, {{CompanyAddress}}. Send privacy or GDPR requests to {{LegalEmail}}. Additional support details are at Contact Us (/contact-us).

We may update this Policy when our processing, providers, or legal obligations change. We will revise the date above and provide additional notice where required.