Privacy Policy
1. Controller
The data controller is [COMPANY NAME], [REGISTERED ADDRESS], reachable at [CONTACT EMAIL]. This policy explains what personal data Tube Operator collects, why, and what your rights are.
2. Data we collect
- Account data: email address, name if you provide it, and the identifier of the sign-in provider you use (Google, GitHub, X, or email and password). Authentication is operated by Clerk; passwords are never stored by us.
- Billing data: your Stripe customer and subscription identifiers, plan, billing period and invoice history. Card details are entered on Stripe's pages and never reach our servers.
- Library data: the YouTube videos and channels you add, their transcripts, the breakdowns and action plans generated for you, your folders, and your credit ledger.
- Keys: the API keys you create (stored as a one-way hash) and, if you use "bring your own key", your AI provider keys, stored encrypted and never displayed again in full.
- Product events: a small number of events tied to your account (signup, checkout started, checkout succeeded, first video) used to understand how the Service is used. No advertising trackers, no third-party analytics scripts.
- Technical data: IP address, browser and request logs kept by our hosting provider for security and debugging, for a short period.
3. Why we use it and on what legal basis
- To provide the Service you subscribed to, including archiving, generating breakdowns and billing (performance of the contract).
- To secure the Service, prevent abuse and fix problems (legitimate interest).
- To send you transactional emails about your account and subscription (performance of the contract). We do not send marketing emails without your consent.
- To keep invoices and accounting records (legal obligation).
4. Who processes your data for us
- Cloudflare, Inc. (USA): hosting of the application and of the database. Data is stored on Cloudflare's network, with Cloudflare's EU data processing addendum and standard contractual clauses.
- Clerk, Inc. (USA): sign-up, sign-in and account security.
- Stripe, Inc. (USA and Ireland): payments, invoices and subscription management.
- TranscriptAPI: retrieval of YouTube transcripts. We send it the URLs of the videos you add, not your identity.
- Anthropic, PBC (USA) and DeepSeek (China) [CONFIRM THE PROVIDERS ACTUALLY ENABLED]: generation of breakdowns and action plans. They receive the transcript of the video being processed, never your account data. If you use your own AI key, processing happens under your provider account instead.
- Brevo (France): sending of transactional emails.
Where a provider is located outside the European Union, transfers rely on the European Commission's standard contractual clauses or on an adequacy decision.
5. How long we keep it
- Account and library data: for as long as your account exists. When you delete your account, everything listed above is erased immediately from our database, your Clerk account is deleted and your subscription is cancelled.
- Invoices and payment records: 10 years, as required by French accounting law, kept by Stripe and in our accounting.
- Technical logs: a few days.
6. Cookies
The app uses only the cookies strictly necessary to keep you signed in (set by Clerk on our domain). The public website sets no cookies. We do not use advertising or analytics cookies, so no consent banner is required.
7. Your rights
You can access, correct, export or erase your data, object to or restrict certain processing, and withdraw consent where processing is based on it. Most of this is available directly in the app (your library, your keys, "Delete account"). For anything else, write to [CONTACT EMAIL]; we answer within one month. You can also lodge a complaint with the CNIL (cnil.fr).
8. Security
Data travels over HTTPS only. API keys are hashed, AI provider keys are encrypted with a key held outside the database, and access to production systems is restricted to the people who operate the Service.
9. Children
The Service is not intended for people under 18. We do not knowingly collect their data; if you believe a minor has created an account, contact us and we will delete it.
10. Changes
We may update this policy. Material changes are announced by email or in the app before they take effect.