Privacy Policy
Last updated: June 2026.
1. Account information
When you sign in, Supabase Auth stores your email address and a unique user ID. We use this to authenticate your sessions and associate your data with your account.
2. Product URLs and extracted website text
When you submit a product URL, TubeToMarket fetches and stores the URL and extracted page text so your product brief can be generated and your campaign can be reopened later.
3. Generated product briefs, search angles, and comment drafts
AI-generated product briefs, search angles, relevance scores, and comment drafts are stored in your account so you can review and reuse them across sessions.
4. Public YouTube metadata
TubeToMarket retrieves publicly available YouTube video metadata through the YouTube Data API, including titles, descriptions, channel names, view counts, comment counts, and publication dates. This data is cached to reduce redundant API calls. TubeToMarket also uses SerpAPI as a fallback public-search discovery provider to retrieve public YouTube result information. We do not access private or unlisted YouTube data.
5. Tracked comment data
When you manually mark a candidate as posted, you may optionally provide a comment URL, the text you posted, and notes. If you provide a YouTube comment URL, TubeToMarket may retrieve public engagement data (like count, reply count) using the YouTube Data API. This data is stored to help you track comment performance.
6. Stripe billing data
When you subscribe, Stripe stores your payment method, billing address, and transaction history. TubeToMarket stores your Stripe customer ID, subscription ID, plan tier, and subscription status. Account deletion removes TubeToMarket's local subscription records, but Stripe may retain billing, payment, invoice, tax, chargeback, and accounting records for accounting and legal obligations under its own policies. We do not store full credit card numbers.
7. Resend transactional and digest emails
Resend processes your email address to deliver campaign digest emails. You can turn digest emails on or off from Account settings, and each digest includes an unsubscribe link. Resend may store delivery metadata (open/bounce status) per their own privacy policy.
8. OpenAI processing
Extracted website text, product briefs, search angles, and YouTube video metadata are sent to OpenAI to generate product analyses, relevance scores, and comment drafts. OpenAI processes this data per its API data usage policies. OpenAI does not use API inputs or outputs to train models by default unless we opt in, and may retain API data for service and abuse monitoring under its policy.
9. Cookies and local browser storage
TubeToMarket uses cookies managed by Supabase Auth to maintain your login session. Before or during checkout and sign-in, your browser may store a pending product URL, preview campaign ID, or short resume lock in localStorage so the app can resume campaign setup. This local browser storage is not used for advertising or third-party tracking. We do not use third-party tracking cookies or advertising pixels.
10. Logs and security data
Server logs may record IP addresses, request timestamps, and error details for security monitoring, abuse prevention, debugging, and operational reliability. Logs are retained for those purposes and are not used for marketing.
11. Data retention
Your account data, product briefs, and campaign history are retained while your account is active. YouTube metadata for active campaigns is refreshed up to twice daily. Recent search-result cache entries expire after 24 hours; broad or evergreen search caches can be retained for up to 7 days by default; shared video metadata may be reused from cache while fresh for up to 30 days. Campaign opportunities and unreferenced shared video metadata are removed after a campaign has been deactivated or inactive for 90 days, or when you delete your account. If you cancel your subscription, your data remains accessible but campaigns stop refreshing until you resubscribe.
12. Data deletion and privacy requests
You can deactivate individual campaigns in the app. Deactivation stops future refreshes but is not permanent campaign deletion. The only in-app way to permanently delete campaign records is to delete your entire account from Settings. For privacy requests, contact [email protected]. Account deletion is immediate and non-recoverable for TubeToMarket-controlled account data: product briefs, campaign data, comment drafts, tracked placements, and unreferenced YouTube API cache rows tied to your account are removed. Stripe and other processors may retain records for accounting or other legal obligations under their own policies.
13. Contact
Privacy questions or concerns? Contact [email protected].