Privacy Policy

1. Who We Are

TubeCoach ("we", "us", "our") operates the TubeCoach platform. We are the data controller responsible for your personal data. If you have questions about this policy, please contact us at privacy@tubecoach.io.

2. Data We Collect

• Account data: name, email address, and optional WhatsApp number you provide during registration.
• Channel data: YouTube channel URL, subscriber count, video statistics, and audit results you request through our tools.
• Usage data: pages visited, features used, timestamps, browser type, device type, and IP address collected automatically.
• Cookies & similar technologies: session cookies for authentication and optional analytics cookies (see Section 8).

3. Google User Data

TubeCoach accesses certain Google user data to provide its core features. This section describes how we access, use, store, and share that data.

• Access: We access your Google account profile (name, email address, profile picture) via Google OAuth 2.0 for authentication. When you use our audit and analytics features, we access YouTube channel and video metadata via the YouTube Data API.
• Use: Google account data is used solely to authenticate you and populate your profile. YouTube data is used only to power the specific features you request, such as channel audits, video audits, SEO checks, and content planning.
• Storage: We store your name, email address, and profile picture from Google OAuth for account management. YouTube data is stored only as long as needed to provide the requested features.
• Sharing: Google user data is not sold or shared with third parties except as described in Section 6 (infrastructure providers for hosting and AI providers for generating audit analysis).

TubeCoach's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Legal Basis for Processing (GDPR)

• Contract performance: processing necessary to provide you with our services (Art. 6(1)(b) GDPR).
• Legitimate interests: analytics, fraud prevention, and service improvement (Art. 6(1)(f) GDPR).
• Consent: where you have given explicit consent, such as for marketing communications (Art. 6(1)(a) GDPR).
• Legal obligation: where processing is required to comply with applicable law (Art. 6(1)(c) GDPR).

5. How We Use Your Data

• To create and manage your account.
• To provide channel audits, video analysis, and content planning features.
• To personalise your experience and generate AI-powered recommendations.
• To send transactional emails (e.g., audit completion notifications).
• To improve our platform through aggregated, anonymised analytics.
• To communicate product updates and, with your consent, marketing content.

6. Data Sharing & Third Parties

We do not sell your personal data. We may share data with:

• Infrastructure providers: cloud hosting and database services that process data on our behalf under strict data-processing agreements.
• AI service providers: to generate audits and recommendations (data is not used to train third-party models).
• Email delivery services: to send transactional and notification emails.
• Law enforcement: where required by applicable law or valid legal process.

7. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Cookies

We use essential cookies required for authentication and platform functionality. We may also use analytics cookies to understand how users interact with our platform. You can manage cookie preferences through your browser settings.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete or anonymise your personal data within 30 days, unless retention is required by law.

10. Your Rights (GDPR)

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data ("right to be forgotten").
• Right to restriction: request that we limit processing of your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at privacy@tubecoach.io.

11. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security reviews.

12. Children

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting a notice on our platform or by email.