This Privacy Policy explains how TubeLITE (“we”, “us”, “our”) collects, uses, discloses, and safeguards information when you use our websites, web apps, browser extensions, and related services (collectively, the “Services”).

If you do not agree with this Policy, please do not use the Services.

• Controller: TubeLite

• Contact: Support@tubelite.io

TubeLITE helps creators draft titles, descriptions, tags, email copy, and other assets around YouTube uploads. Some features may connect to YouTube, email providers, and payment services you authorize.

a) You provide

• Account data: name, email, password (hashed), profile settings.

• Creator inputs: prompts, text, uploaded assets.

• Payment data: handled by our processors (e.g., PayPal/Paystack). We receive limited billing metadata (status, amount, timestamps); we do not store full card details.

• Support messages: emails, chat transcripts, bug reports.

b) Collected automatically

• Usage & device data: IP address, browser/OS, pages viewed, referring URLs, timestamps, crash logs.

• Cookies/SDKs: session/auth cookies and analytics (see §8).

c) From third parties (when you connect)

• YouTube/Google: channel ID, video metadata, thumbnails, publish dates, and other info you consent to via OAuth/YouTube API scopes.

• Email providers (e.g., Resend/SendGrid): delivery/open/click events.

• Payment processors: payment status and subscription events.

We process data on the following bases:

• Contract: to provide and maintain the Services you requested.

• Legitimate interests: to secure, improve, and market our Services (balanced against your rights).

• Consent: for optional cookies, marketing emails, or API connections.

• Legal obligation: to comply with laws, tax, accounting, and regulatory requests.

• Provide and operate the Services, authenticate you, and personalize features.

• Draft/generate content you request and store your settings/templates.

• Detect new uploads (if enabled) and prepare/send emails you authorize.

• Process payments, manage subscriptions, and provide support.

• Monitor performance, troubleshoot, secure our infrastructure, and prevent abuse.

• Send service communications (transactional emails, policy updates).

• With your consent, send product updates and marketing (you can opt out anytime).

We do not sell your personal information. We share it only with:

• Service providers / processors:

  • Hosting & runtime: Vercel (app hosting), Supabase (database/auth/functions).

  • Email: Resend and/or SendGrid (transactional email).

  • Payments: PayPal and/or Paystack (checkout, billing).

  • Analytics/monitoring/logging: [e.g., PostHog/Umami/Sentry—list the ones you use].

• Integrations you connect: e.g., Google/YouTube.

• Legal/compliance: if required by law, to protect rights, or investigate abuse.

• Business transfers: merger, acquisition, or asset sale (we will notify you)
  
  

  Each processor is bound by confidentiality and data-processing terms appropriate to its role.

We may process and store data in countries outside your own. Where required, we use appropriate safeguards (e.g., SCCs/IDTA, DPAs, and security controls). Details are available on request.

We use essential cookies for sign-in and security. With consent, we may use analytics cookies/SDKs to understand usage and improve the Services. You can manage preferences in your browser and (where implemented) our cookie banner.

We retain personal data only as long as needed for the purposes above, including legal, accounting, or reporting requirements. You can request deletion (see §12). Backups are purged on a rolling schedule.

We employ industry-standard security measures: encryption in transit, restricted secrets (server-side), least-privilege access, audit logging, and regular reviews. No system is 100% secure; please report any concerns to [security contact/email].

• Email preferences: unsubscribe via link or in settings.

• YouTube/Google permissions: revoke access in your Google Account security settings.

• Do not track: we honor applicable consent controls where required.

Depending on your location (e.g., EU/UK, California, South Africa), you may have rights to access, correct, delete, port, or object/restrict processing of your personal data, and to withdraw consent.
Submit requests to [your email]. We may verify your identity before responding. You also have the right to lodge a complaint with your local supervisory authority.

The Services are not directed to children under 16 (or the minimum age required by your local law). We do not knowingly collect data from children. If you believe a child has provided personal data, contact us to delete it

If you connect your Google/YouTube account, our use of that information adheres to the YouTube API Services Terms of Service and the Google Privacy Policy. We access only the scopes you grant and you may revoke access at any time via Google Account settings. We do not claim ownership of your YouTube content.

The Services may contain links to third-party sites or integrations. We are not responsible for their privacy practices. Review their policies before providing information.

We may update this Policy from time to time. Material changes will be notified via email or in-app notice. Continued use of the Services after the effective date constitutes acceptance.