Privacy Policy - How TubeBoosts Protects Your Data | TubeBoosts

At TubeBoosts, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered YouTube thumbnail generator service. Please read this policy carefully.

1. Information We Collect

Personal Information

Email address (when you subscribe or create an account)
Name (if provided)
Profile information from authentication providers (Google, etc.)
Marketing preferences and consent status (CASL/opt-in)
Account security and consent audit data (IP address, user-agent, timestamps)

Usage Information

Thumbnails you create and generate, including prompts and optional references
Feature usage and interaction data
Device information and browser type
IP address and approximate location
Cookie identifiers and analytics events (see Cookies & Tracking)
Error, performance, and replay telemetry used for debugging and abuse prevention

Billing & Credit Information

Subscription plan, billing period, and payment status
Credit balances, usage ledger entries, and idempotency/request identifiers
Purchase metadata and invoice references from our payment processor

Sensitive Information

We do not intentionally collect “sensitive” personal information (such as government ID numbers, financial account numbers, precise geolocation, or health-related data). Payment processing is handled by trusted providers (e.g., Stripe) and not stored by TubeBoosts.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process your thumbnail generation requests
Apply credit accounting, billing reconciliation, and fraud prevention controls
Send you updates about our service (if subscribed and consented)
Respond to your feedback and support requests
Analyze usage patterns to enhance user experience
Protect against fraudulent or unauthorized activity

Legal bases: We process personal information with your consent (e.g., marketing), to perform a contract (provide the service), to comply with legal obligations, and for our legitimate interests (security, analytics) balanced against your rights.

3. Third-Party Services & Data Sharing

TubeBoosts uses specialized providers to deliver core functionality. Depending on what you use, data may be processed by:

Clerk (authentication and account identity)
Stripe (subscriptions, invoicing, and payment processing)
BFL / FLUX API (thumbnail image generation)
PixelGuard image compliance provider (thumbnail policy signal scanning)
Cloudflare R2 (image/object storage, where enabled)
MongoDB (application data storage)
Upstash Redis (rate limiting and abuse protection)
Sentry (error monitoring, traces, and session replay diagnostics)
Resend and/or Gmail SMTP (transactional and operational email delivery)

When you generate images, prompts and generated outputs are processed by our AI provider(s):

AI Provider Data Sharing

Your text prompts and generated images are processed by our third-party AI provider's servers
Our AI providers may use submitted prompts and outputs to improve their models per their terms of service
Generated images may be stored temporarily by our AI providers for service delivery and quality monitoring

What data is shared with AI providers:

Text prompts you enter for thumbnail generation
Image generation parameters (size, style settings)
Generated output images

What data may be shared for compliance scanning:

Thumbnail image or image URL submitted for policy/compliance analysis
Extracted OCR text used to detect policy risk language in on-image text
Scanner response signals (e.g., sensitive-content confidence, logo cues)

Compliance scanner outputs are used to provide policy risk guidance and are not a legal determination. We minimize retained diagnostic data and keep it only as needed for security, reliability, and support.

What is NOT shared with AI providers:

Your email address or account information
Your payment information
Most analytics, billing, and authentication records

By using TubeBoosts, you consent to this data sharing with our AI partners. We recommend not including sensitive personal information, real names, or confidential data in your prompts.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

Encryption of data in transit (HTTPS/TLS)
Secure authentication through trusted providers (Clerk)
Regular security assessments and updates
Limited access to personal data by authorized personnel only
Rate limiting and abuse prevention controls

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

Cross-border transfers: Your information may be processed in the United States and other jurisdictions where our service providers operate. We use appropriate safeguards and contractual protections.

5. Cookies & Tracking

We use cookies and similar technologies to:

Keep you signed in to your account
Remember your preferences
Analyze site traffic and usage

You can control cookies through your browser settings. Disabling cookies may affect some features of our service.

We also provide an in-product cookie banner and consent controls. For signed-in users, consent selections may be stored with an auditable timestamp and policy version.

Marketing communications: We comply with Canada’s CASL (anti-spam law). We send promotional emails only with prior consent and always include an easy unsubscribe option. You can manage preferences at any time.

6. Your Rights

Depending on your location, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Unsubscribe from marketing emails at any time
Export your data in a portable format
For California residents (CCPA/CPRA): right to know, delete, correct, and to opt-out of “sale” or “sharing” of personal information and targeted advertising. TubeBoosts does not sell personal information.

To exercise any of these rights, please contact us at the email below.

Where available, we provide self-service endpoints for data export and consent updates/withdrawal in addition to support-assisted requests.

Do Not Sell or Share My Personal Information

While we do not sell personal information, you may opt-out of targeted advertising and certain analytics by adjusting cookie preferences and contacting us. We honor recognized universal opt-out mechanisms where applicable.

7. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

TubeBoosts Support

support@tubeboosts.com

Canada: If unresolved, you may contact the Office of the Privacy Commissioner of Canada (OPC) to file a complaint.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

Retention: We retain personal information only as long as necessary to fulfill the purposes described above, comply with legal obligations, resolve disputes, and enforce agreements.

Account deletion and recovery: where enabled, we may keep a short-lived recovery record for up to 7 days after deletion before hard deletion.

8. Changes to This Policy

Retention: We retain personal information only as long as necessary to fulfill the purposes described above, comply with legal obligations, resolve disputes, and enforce agreements.

Account deletion and recovery: where enabled, we may keep a short-lived recovery record for up to 7 days after deletion before hard deletion.