1. Who we are & scope

This Privacy Policy explains how TubeForge (“TubeForge”, “we”, “us”), the operator of tubefrogeai.app and TubeForge AI Studio, processes personal data. It is the data controller for the website, your account, and payment records. It applies to: (a) this marketing website, (b) the optional web account and dashboard, (c) purchases and billing, and (d) the TubeForge desktop application. The desktop app is local-first — most of what you create never reaches us at all (see §6).

For privacy questions or to exercise your rights, contact privacy@tubefrogeai.app.

2. Personal data we collect

On the website

Anonymous analytics (via PostHog and Google Analytics 4): page views, referrer, coarse country, device/browser type, and download events. No accounts, no email capture, no third-party advertising pixels, no cross-site fingerprinting. Analytics cookies are off by default and are only set after you accept the on-site analytics notice — Google Analytics runs under Google Consent Mode, so until you accept it stores no identifiers.
Crash & error reports (via Sentry): stack traces and browser context if a page errors. IP is truncated at the edge.
Download counts: a click on Download is logged and you are redirected to a signed GitHub release URL. We never see the installer payload.
Support requests: if you contact us or submit a support ticket, we store the email address and message content you provide.

When you create an account or buy

Account data (via Supabase): your email address, authentication identifiers (including, if you choose Google/GitHub sign-in, the identifier those providers return), and your license/entitlement status.
Purchase records: the products you bought, amount, currency, date, and the payment/transaction identifiers needed to issue your receipt and invoice. We do not store full card numbers — card data is handled by our payment processor (see §4).

In the desktop app

Your scripts, scenes, brand bibles, assets, and rendered videos are stored on your own device, not uploaded to us.
Your AI provider API keys (e.g. OpenRouter) and YouTube OAuth tokens are stored in your operating system’s encrypted keychain and/or a local database on your machine.
The desktop app sends no usage telemetry about what you create.

3. Why we use it & legal bases (GDPR Art. 6)

To provide the product and your purchase — create your account, deliver your license, send receipts/invoices, and provide support. Legal basis: performance of a contract.
Security, fraud-prevention, and reliability — crash diagnostics and abuse prevention. Legal basis: legitimate interests.
Product analytics — anonymous, aggregate understanding of how the site is used. Legal basis: legitimate interests (and consent where required by local law).
Legal & accounting obligations — retaining invoices and transaction records. Legal basis: compliance with a legal obligation.
Optional communications — only where you opt in. Legal basis: consent (withdrawable at any time).

4. Payments & billing

Payments are processed by Stripe, a PCI-DSS Level 1 certified payment provider. When you pay, your card details are submitted directly to Stripe — they are never sent to or stored on our servers. We receive a confirmation and the transaction metadata (amount, currency, timestamp, and Stripe identifiers) needed to grant your license, issue an invoice/receipt by email, and keep tax records. Stripe acts as an independent controller/processor for the card data it handles; see Stripe’s Privacy Policy. Refund and cancellation terms are set out in our Terms.

5. Who we share data with (processors)

We do not sell your personal data and do not shareit for cross-context behavioural advertising. We disclose data only to the service providers (“processors”) that operate the product on our behalf, under data-processing agreements:

Supabase — account authentication and database.
Stripe — payment processing and billing.
Resend — transactional email (receipts, welcome, support replies).
PostHog — anonymous website analytics.
Google Analytics (Google LLC) — aggregate website analytics, consent-gated and run in Consent Mode (no advertising cookies).
Sentry — crash and error reporting.
Vercel — website hosting and delivery.
GitHub — distribution of the installer/release files.

We may also disclose data where required by law, to enforce our Terms, or to protect the rights and safety of our users or the public.

6. Desktop app & local-first data

The desktop app runs on your machine. Source video, voice, music, scripts, and rendered outputs all stay on your local disk. The only outbound traffic is the traffic you choose:

Calls to the AI provider you configured (using your API key) for AI script, image, voice and video features — those requests go to that provider under your own account.
YouTube/Google OAuth calls when you connect and publish to your own channel.
Optional auto-update checks against our GitHub releases.
If you opt in to cloud sync, your project content is stored in your own account so you can work across devices; your OAuth tokens and fetched YouTube data are not included in sync by default.

7. How TubeForge AI Studio uses Google user data

TubeForge AI Studio connects to your own YouTube channel through Google OAuth so you can publish the videos you make and see your own performance — nothing else.

Data accessed

When you choose to connect a channel, the app requests these scopes (shown on the consent screen before you approve):

openid and .../auth/userinfo.email — identify which Google account you signed in with.
.../auth/youtube.upload — upload the videos you create to your own channel.
.../auth/youtube.readonly — list your own channel(s) and read your own video metadata.
.../auth/yt-analytics.readonly — read your own channel’s analytics for the in-app dashboards.
.../auth/youtube.force-ssl — required by YouTube’s captions endpoint to upload captions for your own videos.

Data usage & sharing

Google user data is used only to provide features you explicitly invoke on your own channel (upload your videos/captions/thumbnails, read your own metadata, and show your own analytics). It is never sold and never shared with third parties, is not used for advertising, and is not used to train, fine-tune, or develop any AI/ML models. The app performs no action on your channel that you did not initiate.

Storage, retention & revocation

Tokens stay on your device in your OS keychain / local database — not on any TubeForge server.
Disconnecting a channel in-app removes its stored tokens; an in-app data reset or uninstall clears local data.
You can revoke access at any time at myaccount.google.com/permissions.

TubeForge AI Studio’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. International data transfers

Some of our processors are based in the United States. Where personal data is transferred outside your country (for example, from the EEA/UK), that transfer is covered by appropriate safeguards — such as the European Commission’s Standard Contractual Clauses and, where applicable, the EU-U.S. / UK / Swiss Data Privacy Framework — as offered by those providers.

9. Data retention

We keep personal data only as long as needed for the purposes above. Account and license data is retained while your account is active. Purchase and invoice records are retained for as long as required by applicable tax and accounting law. Analytics and crash data are retained on a rolling, time-limited basis by the relevant processor. When data is no longer needed, it is deleted or anonymised. You can ask us to delete your account at any time (see §10).

10. Your rights

Depending on where you live, you have rights over your personal data. We honour these for all users regardless of location where we reasonably can.

EEA / UK (GDPR)

Access, rectification, and erasure of your data.
Restriction of, or objection to, processing.
Data portability.
Withdraw consent at any time (without affecting prior processing).
Lodge a complaint with your local data-protection supervisory authority.

California (CCPA/CPRA)

Know what personal information we collect and why; access a copy.
Delete or correct your personal information.
Opt out of “sale” or “sharing” — we do neither.
Non-discrimination for exercising your rights.

To exercise any right, email privacy@tubefrogeai.app from the address associated with your account. You may also delete your account directly from your account page, which removes your account record from our database. We respond within the timeframe required by law (generally within 30 days).

11. Cookies & opting out

We use a small number of essential cookies (for sign-in/session) and, with the analytics described above, anonymous measurement. Analytics cookies (PostHog and Google Analytics) are not set until you accept the analytics notice; Google Analytics additionally runs under Google Consent Mode v2, which keeps advertising signals denied and stores no analytics identifiers before consent. We do not use advertising cookies. To opt out of website analytics, decline the notice, append ?disable-analytics to any URL, or use a privacy-mode browser. For the desktop app, see Settings → Privacy.

12. Security

We protect data with HTTPS/TLS in transit, encrypted OS keychains for secrets on your device, database row-level security for account data, and access controls on our processors. No system is perfectly secure, but we work to keep your data safe and to disclose incidents where the law requires it.

13. Children

TubeForge AI Studio is not directed to children. We do not knowingly collect personal data from anyone under 16 (or the minimum age in your jurisdiction). If you believe a child has provided us data, contact us and we will delete it.

14. Changes to this policy

We may update this policy as the product evolves or the law changes. Material changes will be reflected by a new effective date at the top of this page, and where appropriate we will notify you. Continued use after an update constitutes acceptance of the revised policy.

15. Contact

Privacy questions or requests: privacy@tubefrogeai.app. General support: support@tubefrogeai.app or the support page. Development and releases are public on GitHub.