Privacy Policy

1. Introduction

Tubeai Ltd ("TubeAI", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our AI-powered YouTube creator tools platform.

Data Controller: Tubeai Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom

2. Information We Collect

3. Legal Basis for Processing

We process your personal data under the following legal bases as defined by GDPR:

• Contract (Article 6(1)(b)): Processing necessary to provide our services to you, including account creation, authentication, content generation, and payment processing
• Consent (Article 6(1)(a)): Analytics cookies, YouTube data access, and marketing communications (you can withdraw consent at any time)
• Legitimate Interest (Article 6(1)(f)): Platform security, fraud prevention, service improvement, and system maintenance
• Legal Obligation (Article 6(1)(c)): Compliance with tax, accounting, and other legal requirements

4. How We Use Your Information

• Service Provision: To provide and improve our AI-powered creator tools
• Personalization: To tailor content suggestions and optimize results for your channel
• Communication: To send service updates, feature announcements, and support responses
• Analytics: To understand usage patterns and improve our platform (anonymized data only)
• Security: To detect and prevent fraud, abuse, and security incidents
• Legal Compliance: To comply with applicable laws and protect our rights

5. Information Sharing and Third Parties

We do not sell, rent, or share your personal information. We share data only with:

6. International Data Transfers

Your data is primarily processed in the United Kingdom and European Union. When we transfer data outside the UK/EU to countries that do not provide an adequate level of data protection, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs): We use EU-approved standard contractual clauses with our service providers
• Adequacy Decisions: We transfer data to countries deemed adequate by the UK/EU where applicable
• Additional Safeguards: We implement supplementary technical and organizational measures to protect your data

7. Automated Decision-Making and AI Processing

We use artificial intelligence (AI) and machine learning to provide our services. Here's how:

• Content Generation: AI models process your inputs (prompts, channel data) to generate thumbnails, scripts, and ideas. You have full control over what content you use.
• Personalization: AI analyzes your usage patterns to provide better suggestions (anonymized). This does not involve decisions that significantly affect you.
• No Automated Decisions: We do not use automated decision-making that produces legal effects or similarly significantly affects you without human involvement.

8. Data Security

We implement industry-standard security measures to protect your personal data:

• Encryption in transit (TLS/SSL) and at rest (AES-256)
• Secure cloud infrastructure with regular security audits
• Access controls and authentication for all systems
• Regular security training for our team
• Incident response procedures
• Regular backups with encryption

9. Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms:

• We will notify the relevant supervisory authority within 72 hours of becoming aware
• We will notify affected users without undue delay if the breach poses a high risk
• Notifications will include the nature of the breach, likely consequences, and measures taken
• We maintain detailed records of all data breaches

10. Your Rights (GDPR & UK GDPR)

Under data protection law, you have the following rights:

11. Data Retention

We retain your personal data only as long as necessary:

• Account Data: Retained while your account is active and for 30 days after deletion (for recovery)
• YouTube Data: Immediately deleted when you disconnect your YouTube account
• Generated Content: Retained while your account is active, deleted 30 days after account deletion
• Usage Logs: Anonymized and retained for up to 12 months for service improvement
• Payment Records: Retained for 7 years to comply with tax and accounting regulations
• Consent Records: Retained for 5 years to demonstrate GDPR compliance

12. Children's Privacy

Our Service is not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children under these ages. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.

13. Cookies and Tracking Technologies

We use cookies and similar tracking technologies. For detailed information, please see our Cookie Policy.

You can manage your cookie preferences through our cookie consent banner or by clicking "Cookie Settings" in the footer.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes via:

• Email to your registered email address
• Prominent notice on our platform
• Updated "Last updated" date at the top of this policy

15. Contact Us

For privacy-related questions or to exercise your rights:

Quick Summary