Privacy Policy

TubeWizz (“we”, “our”, or “us”) operates the website tubewizz.com and the TubeWizz application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the service.

Account information: When you register, we collect your email address and, optionally, your name and profile details you provide during onboarding.

Content you upload: Videos, images, and other files you upload to use our tools. These are processed to generate AI output and stored temporarily in our cloud storage (72-hour TTL by default).

Usage data: We collect information about how you interact with our services, pages visited, tools used, features clicked, via our product analytics.

YouTube data (via the YouTube API Services and YouTube Analytics API):When you choose to connect a YouTube channel to a brand inside TubeWizz, you grant us access through Google’s OAuth consent screen. We request the following scopes and use them only for the purposes listed:

• https://www.googleapis.com/auth/youtube, to publish AI-generated metadata (video title, description, tags), thumbnails, and video visibility (draft/public) to your ownconnected channel from the SEO Wizard result screen, only when you explicitly click the “Push to YouTube” action. We never upload, edit, delete, or modify any video or channel asset without an explicit per-action click from you.
• https://www.googleapis.com/auth/youtube.force-ssl, to upload subtitle / caption tracks (the .srt files our tool generates from your own video, including translations) to your own connected video, only when you explicitly click the “Push subtitles to YouTube” action. This scope is required by YouTube’s captions.insert API, which the standard youtubescope cannot perform. We use it solely to add the caption tracks you generated, on videos you own — never to read, edit, or delete any other content.
• https://www.googleapis.com/auth/yt-analytics.readonly, to read channel performance data so we can render your brand analytics dashboard: subscriber count over time, total view count, per-video view / like / comment counts, audience retention metrics, average view duration, and geographic distribution of viewers.
• https://www.googleapis.com/auth/yt-analytics-monetary.readonly, only used if your channel is monetized. We read daily channel-level estimated revenue (USD), ad impressions, CPM and playback-based CPM, and compute RPM. This data is shown only to you, on your own brand dashboard.

We additionally cache the following public channel metadata read via the YouTube Data API to power your dashboard: channel ID, channel title, description, profile photo, banner image, branding keywords, country, video list (titles, thumbnails, tags, durations, publish dates), and aggregate view/like/comment counts per video. All access is initiated by you and revocable at any time (see Section 8).

We use the information we collect to:

• Provide, maintain, and improve our services
• Generate AI-powered outputs (titles, thumbnails, captions, etc.) from your uploaded content
• Send transactional emails (job completion notifications, billing receipts)
• Monitor and analyze usage patterns to improve product features
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

TubeWizz uses YouTube API Services. By connecting a channel you also agree to the YouTube Terms of Service, and your data handled by Google is subject to the Google Privacy Policy. TubeWizz’s use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Limited use: we use YouTube data only to provide and improve the user-facing features described in Section 2 (analytics dashboard, AI metadata publishing, subtitle/caption upload, revenue overview). We do not use it for serving ads, transferring it to third parties, or training generalised machine-learning models.
• No human reading: a TubeWizz employee will not read, listen to, or otherwise access the raw YouTube data of any individual user’s account, except (i) with that user’s explicit written consent for support, (ii) to comply with applicable law, or (iii) to investigate and remedy a confirmed security incident.
• No sale of data: we never sell, rent, or trade YouTube data to data brokers, advertisers, or any other third party.
• Revenue confidentiality: monetary metrics returned by the YouTube Analytics monetary scope are rendered only to the brand owner who connected the channel. They are never aggregated into public statistics, leaderboards, or shared dashboards.
• Token security at rest: YouTube OAuth refresh and access tokens are encrypted with AES-256-GCM before being written to the database (key managed in the deployment platform’s secret store). Plaintext tokens are never logged or sent to third-party processors.
• API-only access: we communicate with Google APIs over HTTPS using your individual OAuth grant. We do not share, scrape, or impersonate your channel from any other identity.

Your account data is stored in our database, hosted in the EU region. Uploaded video and image files are stored in our cloud storage with a default retention of 72 hours for processing files. Generated output (thumbnails, captions, SRT files) is retained for up to 30 days after creation, or until you delete the job manually.

YouTube data retention:

• Daily channel subscriber / view / video-count snapshots are retained for up to 365 days in brand_subscriber_history so we can show year-over-year trends.
• Per-video performance snapshots are retained for the lifetime of the brand in brand_video_history (rolling 50-video catalogue, updated every 3 days).
• Daily revenue / CPM / RPM rows are retained for up to 365 days in brand_revenue_history.
• Cached channel metadata (title, description, branding keywords, country) is refreshed on every sync and kept while the channel remains connected.
• When you disconnect a YouTube channel from a brand, the corresponding OAuth refresh and access tokens are revoked via Google and deleted from our database immediately. Historical snapshots already stored under that brand remain (so your dashboards keep working) until you delete the brand itself.
• When you delete your account, all YouTube data we stored about your channels, tokens, snapshots, cached metadata, generated jobs, is purged from our database via cascade delete, and any associated R2 objects are removed within 24 hours.
• Inactive accounts: free accounts with no sign-in and no tool usage for 12 consecutive months are auto-deleted after three advance warnings (30 / 7 / 1 days before). Paid subscribers are never auto-deleted while their subscription is active.

You may request deletion of all your data at any time by contacting us at info@tubewizz.com.

We use the following third-party processors:

• Cloud database & authentication provider, account data and sign-in
• Cloud file storage provider, uploaded and generated files
• AI text & image generation providers, titles, descriptions, thumbnails
• AI speech-to-text provider, video transcription
• Transactional email provider, email delivery
• Product analytics provider, usage insights
• Error monitoring provider, reliability and debugging
• Payment provider (Stripe), billing and subscriptions

Each third-party processor is bound by their own privacy policy and data processing agreements.

We use essential cookies for authentication (session management) and functional cookies to remember your preferences. We do not use third-party advertising cookies. You can manage cookie preferences in your browser settings. For full details, see our Cookie Policy.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability
• Lodge a complaint with a supervisory authority

Revoking YouTube access at any time:

1. From TubeWizz: open the brand profile that has the channel connected and click Disconnect. This revokes our refresh token via Google immediately and deletes the stored tokens from our database.
2. From your Google account: visit myaccount.google.com/permissions, find “TubeWizz” in the list, and click “Remove access”. Doing so invalidates all tokens we hold; the next sync will fail and the brand will show as disconnected.

To exercise any of the rights above, email info@tubewizz.com.

Our service is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the “Last updated” date. Continued use of the service after changes constitutes acceptance of the revised policy.

TubeWizz publishes a free browser extension (“TubeWizz — YouTube SEO”) for Chrome and Microsoft Edge. This section covers data handling specific to the extension. If you do not install the extension, none of this section applies to you.

What the extension reads. When you open a youtube.com/watch page, the extension’s content script reads the video’s public metadata — title, description, tags, view count, like count, published date, and channel name — from YouTube’s in-page ytInitialPlayerResponse object. This is the same public data anyone can see on the page. The extension does not read your YouTube account, watch history, subscriptions, playlists, comments, or any signed-in state on YouTube.

What the extension sends to TubeWizz. The extension calls app.tubewizz.com only in the following cases:

• Authentication check (/api/auth/whoami): to know if you are already signed in to TubeWizz in the same browser. Uses your existing TubeWizz session cookie — the extension does not store or transmit any password or token of its own.
• Brand list (/api/brands): after sign-in, to populate the brand picker in the popup so you can attach the current video to the right brand.
• “Send to SEO Wizard”: opens a new tab at app.tubewizz.com/tools/seo/new with the video URL and selected brandId as query parameters. No background upload — you finish the flow inside the app.
• “AI Improve” (optional, 1 credit per call): sends the current video’s title / hook / tag context to /api/extension/improve for AI-generated suggestions. Consumes credits from your TubeWizz balance the same way other tools do.
• “Vs your channel” (optional): reads averages from your own connected YouTube brand via /api/extension/compare. Requires you to have already connected a channel inside TubeWizz.
• “Save idea to Content Planning” (optional): posts the current video URL to /api/content-planning/save as a planning row (source=‘extension’).

What the extension does not do. No third-party analytics, no advertising SDKs, no tracking pixels, no remote code execution. All JavaScript ships inside the extension bundle. The extension never accesses tabs other than youtube.com and never reads your bookmarks, history, downloads, cookies, or other extensions.

Local storage. The extension stores a small set of preferences in chrome.storage.local: the currently selected brandId, the overlay collapsed / dismissed state, and a short-lived (60 second) in-memory cache of your channel averages. This data lives only in your browser profile and is removed when you uninstall the extension.

Permissions. The extension declares four permissions: activeTab and scripting (read the current YouTube video’s public metadata), storage (persist preferences above), and host permissions for youtube.com (content-script surface) and app.tubewizz.com (authenticated calls listed above). No cookies, webRequest, tabs, or <all_urls> permission is requested.

Uninstall. Removing the extension from Chrome or Edge clears all extension local storage. Signed-out browser sessions leave no server-side state to clean up. If you also want to remove server-side data associated with your TubeWizz account, follow Section 8 to delete your account.

If you have questions about this Privacy Policy, contact us at:

TubeWizz
Email: info@tubewizz.com