Privacy Policy

TubeWizz (“we”, “our”, or “us”) operates the website tubewizz.com and the TubeWizz application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the service.

Account information: When you register, we collect your email address and, optionally, your name and profile details you provide during onboarding.

Content you upload: Videos, images, and other files you upload to use our tools. These are processed to generate AI output and stored temporarily in Cloudflare R2 storage (72-hour TTL by default).

Usage data: We collect information about how you interact with our services — pages visited, tools used, features clicked — via PostHog analytics.

YouTube data (via the YouTube API Services and YouTube Analytics API):When you choose to connect a YouTube channel to a brand inside TubeWizz, you grant us access through Google’s OAuth consent screen. We request the following scopes and use them only for the purposes listed:

• https://www.googleapis.com/auth/youtube — to publish AI-generated metadata (video title, description, tags) and thumbnails to your ownconnected channel from the SEO Wizard result screen, only when you explicitly click the “Push to YouTube” action. We never upload, edit, delete, or modify any video or channel asset without an explicit per-action click from you.
• https://www.googleapis.com/auth/yt-analytics.readonly — to read channel performance data so we can render your brand analytics dashboard: subscriber count over time, total view count, per-video view / like / comment counts, audience retention metrics, average view duration, and geographic distribution of viewers.
• https://www.googleapis.com/auth/yt-analytics-monetary.readonly — only used if your channel is monetized. We read daily channel-level estimated revenue (USD), ad impressions, CPM and playback-based CPM, and compute RPM. This data is shown only to you, on your own brand dashboard.

We additionally cache the following public channel metadata read via the YouTube Data API v3 to power your dashboard: channel ID, channel title, description, profile photo, banner image, branding keywords, country, video list (titles, thumbnails, tags, durations, publish dates), and aggregate view/like/comment counts per video. All access is initiated by you and revocable at any time (see Section 8).

We use the information we collect to:

• Provide, maintain, and improve our services
• Generate AI-powered outputs (titles, thumbnails, captions, etc.) from your uploaded content
• Send transactional emails (job completion notifications, billing receipts)
• Monitor and analyze usage patterns to improve product features
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

TubeWizz’s use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Limited use: we use YouTube data only to provide and improve the user-facing features described in Section 2 (analytics dashboard, AI metadata publishing, revenue overview). We do not use it for serving ads, transferring it to third parties, or training generalised machine-learning models.
• No human reading: a TubeWizz employee will not read, listen to, or otherwise access the raw YouTube data of any individual user’s account, except (i) with that user’s explicit written consent for support, (ii) to comply with applicable law, or (iii) to investigate and remedy a confirmed security incident.
• No sale of data: we never sell, rent, or trade YouTube data to data brokers, advertisers, or any other third party.
• Revenue confidentiality: monetary metrics returned by the YouTube Analytics monetary scope are rendered only to the brand owner who connected the channel. They are never aggregated into public statistics, leaderboards, or shared dashboards.
• Token security at rest: YouTube OAuth refresh and access tokens are encrypted with AES-256-GCM before being written to the database (key managed in the deployment platform’s secret store). Plaintext tokens are never logged or sent to third-party processors.
• API-only access: we communicate with Google APIs over HTTPS using your individual OAuth grant. We do not share, scrape, or impersonate your channel from any other identity.

Your account data is stored in Supabase (PostgreSQL), hosted in the EU region. Uploaded video and image files are stored in Cloudflare R2 with a default retention of 72 hours for processing files. Generated output (thumbnails, captions, SRT files) is retained for up to 30 days after creation, or until you delete the job manually.

YouTube data retention:

• Daily channel subscriber / view / video-count snapshots are retained for up to 365 days in brand_subscriber_history so we can show year-over-year trends.
• Per-video performance snapshots are retained for the lifetime of the brand in brand_video_history (rolling 50-video catalogue, updated every 3 days).
• Daily revenue / CPM / RPM rows are retained for up to 365 days in brand_revenue_history.
• Cached channel metadata (title, description, branding keywords, country) is refreshed on every sync and kept while the channel remains connected.
• When you disconnect a YouTube channel from a brand, the corresponding OAuth refresh and access tokens are revoked via Google and deleted from our database immediately. Historical snapshots already stored under that brand remain (so your dashboards keep working) until you delete the brand itself.
• When you delete your account, all YouTube data we stored about your channels — tokens, snapshots, cached metadata, generated jobs — is purged from our database via cascade delete, and any associated R2 objects are removed within 24 hours.
• Inactive accounts: free accounts with no sign-in and no tool usage for 12 consecutive months are auto-deleted after three advance warnings (30 / 7 / 1 days before). Paid subscribers are never auto-deleted while their subscription is active.

You may request deletion of all your data at any time by contacting us at info@tubewizz.com.

We use the following third-party processors:

• Supabase — database and authentication
• Cloudflare R2 — file storage
• OpenAI — AI text and image generation
• Deepgram — speech-to-text transcription
• kie.ai — AI image generation (thumbnails)
• Resend — transactional email delivery
• PostHog — product analytics
• Sentry — error monitoring

Each third-party processor is bound by their own privacy policy and data processing agreements.

We use essential cookies for authentication (session management) and functional cookies to remember your preferences. We do not use third-party advertising cookies. You can manage cookie preferences in your browser settings. For full details, see our Cookie Policy.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability
• Lodge a complaint with a supervisory authority

Revoking YouTube access at any time:

1. From TubeWizz: open the brand profile that has the channel connected and click Disconnect. This revokes our refresh token via Google immediately and deletes the stored tokens from our database.
2. From your Google account: visit myaccount.google.com/permissions, find “TubeWizz” in the list, and click “Remove access”. Doing so invalidates all tokens we hold; the next sync will fail and the brand will show as disconnected.

To exercise any of the rights above, email info@tubewizz.com.

Our service is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the “Last updated” date. Continued use of the service after changes constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy, contact us at:

TubeWizz
Email: info@tubewizz.com