Legal

Privacy Policy

Last updated: June 8, 2026

1. Who we are

Tubelify is operated by Creagent Studio, the commercial name of Brice Mourlon, registered in France (SIRET 890 744 212 00014). If you have any questions about this policy, contact us at contact@tubelify.com.

The service is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States.

2. What data we collect

We collect only the data necessary to provide the service:

  • Account data: your email address and password (hashed) when you register, or your Google profile (name, email address, profile picture) if you sign in with Google.
  • Content data: YouTube URLs and video metadata (title, channel, duration, thumbnail) that you submit.
  • Usage data: summaries generated, time saved, subscription status, and feature usage.
  • Billing data: payment is handled entirely by Stripe. We never see or store your card details.
  • Technical data: IP address (stored as a cryptographic hash, never in plain text), browser type, and session cookies required to keep you signed in.

3. Google Sign-In

When you sign in with Google, Tubelify may receive basic account information such as your name, email address, and profile picture. This information is used only to create and manage your Tubelify account, authenticate you securely, and allow you to access your saved summaries.

Tubelify does not sell Google user data, does not use Google user data for advertising, and does not share Google user data with any third party except service providers strictly necessary to operate the service (listed in section 5 below).

4. How we use your data

  • To provide, operate, and improve Tubelify.
  • To generate AI summaries via third-party AI APIs.
  • To process payments and manage your subscription via Stripe.
  • To enforce rate limits and prevent abuse.
  • To send transactional emails (account confirmation, password reset, support replies). We do not send marketing emails without your explicit consent.

5. Third-party service providers

To operate Tubelify, we work with a limited set of third-party providers. Each receives only the data strictly necessary for its function and is contractually bound to process it in accordance with applicable privacy laws.

  • Google — Google Sign-In authentication. Governed by Google's privacy policy.
  • Stripe — payment processing and subscription management. Governed by Stripe's privacy policy.
  • Infrastructure providers — hosting, database, and account management services. Data is stored and processed in accordance with their respective privacy commitments.
  • AI processing providers — video transcripts are processed by AI services to generate summaries. Transcripts are not linked to your account during processing.
  • Transactional email providers — used solely to deliver password resets and support replies. No marketing emails are sent without your explicit consent.
  • Security providers — bot protection on public forms. No personal data is retained by these services.

Tubelify does not use any advertising network or third-party analytics platform.

6. Data retention

Your account data is kept for as long as your account is active. If you delete your account, all associated data (videos, summaries, profile) is permanently deleted within 30 days.

Guest trial summaries are cached for 7 days then automatically purged. Claim tokens expire after 24 hours.

7. Your rights (GDPR)

If you are located in the European Economic Area, you have the right to access, rectify, port, or erase your personal data, and to object to or restrict its processing. To exercise any of these rights, email us at contact@tubelify.com. We will respond within 30 days.

You may also lodge a complaint with the French data protection authority, the CNIL.

8. Cookies

We use only strictly necessary cookies: an authentication session cookie to keep you signed in, and a temporary cookie to carry your guest trial summary through the registration flow. We do not use tracking or advertising cookies. See our Cookie Policy for full details.

9. Security

Passwords are hashed using bcrypt. IP addresses are stored as HMAC-SHA256 hashes and are never recoverable in plain text. All data is transmitted over HTTPS. Database access is protected by Row-Level Security policies ensuring each user can only access their own data.

10. Children

Tubelify is not directed at children under 13 (or 16 in the EU). We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us at contact@tubelify.com and we will delete the account promptly.

11. Changes to this policy

We may update this policy as the service evolves. Material changes will be communicated by email or by a notice on the site at least 14 days before taking effect. Continued use after the effective date constitutes acceptance of the revised policy.