UpTube Logo
Data Protection

Privacy Policy

Last Updated: June 3, 2026

1. Introduction

UpTube LLC ("UpTube," "we," "our," or "us") is dedicated to protecting your privacy. This Privacy Policy details how we collect, process, share, and protect your personal information when you access our multi-agent AI channel intelligence platform.

Data Controller: UpTube LLC. Contact email: privacy@uptube.io.

2. Information We Collect

2.1 Information You Directly Provide

  • Account Credentials: Email address and profile information provided during authentication (via Google Login or Supabase Auth).
  • Workspace Inputs: Prompts, script outlines, video description inputs, and transcripts provided to run AI pipelines.
  • Billing Information: Payment card numbers, addresses, and transaction histories are processed securely by our payment processor (Stripe) and are never stored on our servers.

2.2 YouTube Channel Data (Optional via OAuth)

If you connect your YouTube account to UpTube, we obtain specific channel data via Google API Services:

  • Channel Metrics: Subscriber counts, channel names, niches, handles, avatar URLs, and aggregate view counts.
  • Video Metrics: Video titles, tags, descriptions, transcripts, comment threads, and views to model tone profiles.

2.3 Technical & Telemetry Information

  • Logs: IP addresses, browser types, device models, active session lengths, and click paths.
  • Telemetry: Processing speeds, usage frequency of specific AI agents, and total token count.

3. Google API Services Disclosure

UpTube's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We strictly limit the use of YouTube channel data to providing analysis, benchmarking, and tone-matching features for your workspace. We **never** share, rent, or sell YouTube data to third-party data brokers, advertising agencies, or marketing companies.

4. Legal Basis for Processing (GDPR/UK GDPR)

Legal BasisProcessing Purpose
Contractual Necessity (Art. 6(1)(b))Creating accounts, authenticating sessions, processing payments, and executing agent generation pipelines.
User Consent (Art. 6(1)(a))Accessing YouTube channel databases via Google OAuth, setting analytics cookies, and sending marketing newsletters.
Legitimate Interests (Art. 6(1)(f))Preventing credit exploitation, securing database structures, evaluating model routing efficiency, and server log maintenance.
Legal Compliance (Art. 6(1)(c))Maintaining billing archives, tax compliance, and corporate bookkeeping requirements.

5. Information Sharing & Processors

We do not sell your personal data. To provide the Service, we share relevant information only with contractually bound third-party processors who adhere to GDPR and CCPA security requirements:

  • AI API Providers: Anthropic (Claude models), OpenAI (GPT models), and Google (Gemini models) process user prompts. They are contractually forbidden from utilizing user inputs to train public models.
  • Infrastructure & DB: Supabase (PostgreSQL hosting, login systems, token management) and Vercel (application hosting).
  • Payments: Stripe (payment processing, checkout interfaces, credit card validation).
  • Analytics: Google Analytics (optional, anonymous page interactions).

6. International Data Transfers

UpTube LLC is based in the United States, and we process your data on secure cloud servers located primarily in the US and the EU. When transferring information from the EEA, United Kingdom, or Switzerland to countries that do not have an adequacy decision, we utilize Standard Contractual Clauses (SCCs) to ensure equivalent data protections.

7. Data Retention & Deletion

  • Connected YouTube Data: Fully purged from active cache and internal databases immediately upon User disconnect.
  • Workspace Data: Generated scripts, title outputs, and user prompts are retained for the duration of the account lifespan. They are fully deleted 30 days after account termination.
  • Stripe Transactions: Transaction metadata is retained for 7 years to meet tax obligations.

8. Your Rights (GDPR & CCPA)

Depending on your jurisdiction (such as the EEA, UK, or California), you hold the following statutory rights:

  • The right to access and export your account data.
  • The right to correct inaccurate records.
  • The right to request the complete deletion of your personal data ("Right to be Forgotten").
  • The right to restrict or object to the processing of your details.
  • The right to withdraw consent (e.g. cookies or Google API access) at any time.

To exercise these rights, please email us at privacy@uptube.io. We will reply to verified requests within 30 days.

9. Data Security

We implement rigorous administrative, technical, and physical security measures to safeguard your information. This includes SSL/TLS encryption for all data in transit, AES-256 encryption at rest, secure Google OAuth tokens, and limited database access permissions. However, no internet transmission is 100% secure, and we cannot guarantee absolute protection.

10. Contact Privacy Officer

For questions or concerns regarding our privacy practices, contact our Data Protection Officer:

Email: privacy@uptube.io