Privacy Policy

0. Data controller and YouTube API Services

Vermilion Holdings LLC is the data controller for TubeToMarket. TubeToMarket uses YouTube API Services. Google's use of information collected through YouTube API Services is governed by the Google Privacy Policy.

1. Account information

When you sign in, Supabase Auth stores your email address and a unique user ID. We use this to authenticate your sessions and associate your data with your account.

2. Product URLs and extracted website text

When you submit a product URL, TubeToMarket fetches and stores the URL and extracted page text so your product brief can be generated and your campaign can be reopened later.

3. Generated product briefs, search angles, and comment drafts

AI-generated product briefs, search angles, written explanations of how a video connects to your product, suggested approaches, cautions, and comment drafts are stored in your account so you can review and reuse them across sessions. TubeToMarket does not calculate scores, ratings, or rankings for YouTube videos.

4. Public YouTube metadata

TubeToMarket retrieves publicly available YouTube video metadata through YouTube API Services, including titles, descriptions, channel names, view counts, comment counts, and publication dates. This data is cached to reduce redundant API calls. Titles, channel names, and descriptions are used to check whether a video's topic connects to your product; view, like, and comment counts are displayed unmodified and are not used to select or order suggestions. Suggestions appear in the order YouTube search returned them. TubeToMarket also uses SerpAPI as a fallback public-search discovery provider to retrieve public YouTube result information. We do not access private or unlisted YouTube data.

Third-party content and advertising

TubeToMarket does not allow third parties to serve content or advertisements through the service.

5. Comment history

When you mark a suggestion as posted or skip it, TubeToMarket stores a comment history entry with the YouTube video ID and video URL, the TubeToMarket-written connection and comment angle, the suggested comment draft, and anything you choose to add: the comment URL, the text you posted, and notes.

When you open Comment history or click Refresh from YouTube, TubeToMarket retrieves the video title, channel name, and your comment's like and reply counts through YouTube API Services. These are displayed as returned by YouTube and are not stored. If you provided a comment URL, TubeToMarket looks up that comment directly. If you provided only the posted text, TubeToMarket searches the video's public comment threads for matching text. When a comment is found, its YouTube comment ID and thread ID are stored so it can be looked up directly next time.

6. Stripe billing data

When you subscribe, Stripe stores your payment method, billing address, and transaction history. TubeToMarket stores your Stripe customer ID, subscription ID, plan tier, and subscription status. Account deletion removes TubeToMarket's local subscription records, but Stripe may retain billing, payment, invoice, tax, chargeback, and accounting records for accounting and legal obligations under its own policies. We do not store full credit card numbers.

7. Resend transactional and digest emails

Resend processes your email address to deliver campaign digest emails. You can turn digest emails on or off from Account settings, and each digest includes an unsubscribe link. Resend may store delivery metadata (open/bounce status) per their own privacy policy.

8. OpenAI processing

Extracted website text, product briefs, search angles, and YouTube video titles, channel names, and descriptions are sent to OpenAI to generate product analyses, connection explanations, and comment drafts. YouTube view, like, and comment counts are not sent to OpenAI. OpenAI processes this data per its API data usage policies. OpenAI does not use API inputs or outputs to train models by default unless we opt in, and may retain API data for service and abuse monitoring under its policy.

9. Cookies and local browser storage

TubeToMarket uses cookies managed by Supabase Auth to maintain your login session. Before or during checkout and sign-in, your browser may store a pending product URL, preview campaign ID, or short resume lock in localStorage so the app can resume campaign setup. This local browser storage is not used for advertising or third-party tracking. We do not use third-party tracking cookies or advertising pixels.

10. Logs and security data

Server logs may record IP addresses, request timestamps, and error details for security monitoring, abuse prevention, debugging, and operational reliability. Logs are retained for those purposes and are not used for marketing.

11. Data retention

Your account data, product briefs, and campaign history are retained while your account is active. YouTube API data is subject to the following retention limits:

• Inactive campaigns: campaign opportunities and associated YouTube metadata are purged after 30 days without refresh.
• Video metadata cache: shared video metadata is retained for a maximum of 29 days, then deleted or refreshed.
• Search cache: recent search results expire after 24 hours; broad or evergreen search caches are retained for up to 7 days.
• Video statistics: view and comment counts are refreshed at most every 12 hours; cached statistics expire within 12 hours.
• Comment history: entries keep the fields described in section 5 (including video ID, video URL, and, once found, the YouTube comment and thread IDs) while your account is active. Video titles, channel names, and like and reply counts are fetched live from YouTube API Services at display time and are not stored.
• Account deletion: all TubeToMarket-controlled account data, including product briefs, campaigns, comment drafts, tracked placements, and YouTube API cache rows tied to your account, is purged immediately and is non-recoverable.

If you cancel your subscription, your data remains accessible but campaigns stop refreshing until you resubscribe.

12. Data deletion and privacy requests

You can deactivate individual campaigns in the app. Deactivation stops future refreshes but is not permanent campaign deletion. The only in-app way to permanently delete campaign records is to delete your entire account from Settings. For privacy requests, contact [email protected]. Account deletion is immediate and non-recoverable for TubeToMarket-controlled account data: product briefs, campaign data, comment drafts, tracked placements, and unreferenced YouTube API cache rows tied to your account are removed. Stripe and other processors may retain records for accounting or other legal obligations under their own policies.

13. Contact

Privacy questions or concerns? Contact [email protected].