Privacy Policy for TubeFlow

1. Introduction Welcome to TubeFlow! This Privacy Policy outlines how we collect, use, and protect your information when you use our website, https://tubeflow.ai (the "Site"), and our browser extension for various popular browsers (the "Extension"). In order to deliver personalized AI-driven suggestions and content organization, we have implemented explicit user consent processes for sharing data with third-party AI services. 2. Description of Service TubeFlow is an intelligent YouTube organizer that helps you manage, search, and enhance your YouTube experience. In addition to traditional playlist and channel management, TubeFlow leverages advanced AI models (such as OpenAI) to provide personalized suggestions and insights based on data from your YouTube account. 3. Data Collection 3a. User Data We collect and store the following user data: - Name - Email - Profile picture - YouTube playlists - Subscribed channels - Playlist video details Users own their data stored with TubeFlow. Users can request a download link to their data stored with TubeFlow by contacting support@tubeflow.ai. 3b. Non-Personal Data We collect non-personal data such as web cookies to improve our services. 3c. Authentication Data TubeFlow uses AWS Cognito as a user authentication service to handle user login and signup operations. AWS Cognito processes and stores the following authentication-related data: - User email addresses - Authentication session tokens - Basic user profile information YouTube OAuth authorization is handled separately through the YouTube Data API for accessing your YouTube data. Both AWS Cognito session tokens and YouTube API authorization tokens are stored as secure cookies in your browser to maintain your authenticated session. AWS Cognito is provided by Amazon Web Services, and their privacy practices are governed by the AWS Privacy Policy: https://aws.amazon.com/privacy/ 3d. Google API Services User Data Policy - Reference URL: Google API Services User Data Policy - (Tubeflow Site's) and (Tubeflow Browser Extension's) use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. 3e. Tubeflow uses managed SQL database services provided by Railway for storage of user's tubeflow relational data like video ids, channel ids, playlist ids, playlists and channel groups data. Railway's privacy practices are governed by their Privacy Policy: https://railway.com/legal/privacy 4. Purpose of Data Collection The data we collect is used to support following features: - Show personal details like email, name and profile picture to user through account section of the app. - Manage Playlists: Add and delete playlist groups. Assign and remove playlists from playlist groups. - Organize Videos: Add or remove videos from playlists. - Channel Management: Create and manage subscribed channel groups. Add or remove channels from channel groups. - Delivering personalized AI-generated suggestions by analyzing your YouTube data. Note: The AI-powered suggestions are powered by third-party models (such as OpenAI) and are provided only after you have given explicit consent. 5. Data Sharing To enhance your experience with personalized recommendations and insights, TubeFlow may share specific YouTube-related data with trusted third-party AI services. 5a. Types of Data Shared - Subscribed channels - Saved playlists - Channel and playlist groups - Playlist video details 5b. Purpose of Sharing This data is used solely for fetching AI-generated suggestions and enhancing the organizational features of TubeFlow. 5c. User Consent Prior to any data sharing with third-party AI tools, TubeFlow requires your explicit consent. You will see a pop-up consent form that clearly explains which types of data will be shared and with which third-party services. You have the right to accept or decline this sharing. 5d. Data Handling The data shared with third-party AI services is limited to what is necessary for generating tailored suggestions. We ensure that such transfers adhere to our strict security and data protection guidelines, as well as to the policies of the respective third parties. 5e. Third-Party AI Service Privacy Policies TubeFlow integrates with OpenAI for AI-powered features. When you consent to use AI features, your data may be processed by OpenAI according to their privacy policy: https://openai.com/en-GB/policies/row-privacy-policy/ 6. YouTube API Services - User Data and Compliance 6a. API Client Terms of Use By using TubeFlow, you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms) and Google's Privacy Policy (https://policies.google.com/privacy). 6b. Data Access and Management TubeFlow accesses your YouTube data through the YouTube Data API. You can review and manage the data that TubeFlow has access to by visiting Google's security settings page: https://security.google.com/settings/security/permissions 6c. Data Deletion and Revocation When you revoke TubeFlow's access to your YouTube account through Google's security settings page, we will delete all YouTube data stored by TubeFlow that is associated with your account (including playlists, channels, video information, and any organizational data you created within TubeFlow). This deletion refers only to data stored by TubeFlow and will not affect your actual YouTube account, playlists, or videos on YouTube. This deletion will occur as soon as possible and will be completed within 30 calendar days of the revocation, in compliance with Google's data retention requirements (section III.E.4 of the YouTube API Services Developer Policies). 6d. Token Validation TubeFlow periodically validates that its authorization tokens for accessing your YouTube data remain valid. If we detect that you have revoked access through Google's security settings, we will immediately stop accessing your YouTube data and proceed with the deletion process described in section 6c. 6e. Limited Use Requirements TubeFlow's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This means: - We only use YouTube data to provide and improve TubeFlow's features - We do not transfer YouTube data to others except as necessary to provide TubeFlow's services, comply with applicable laws, or as part of a merger or acquisition - We do not use YouTube data for serving advertisements - We do not allow humans to read YouTube data unless we have your explicit consent, it's necessary for security purposes, or it's required for compliance with applicable laws 7. Updates to the Privacy Policy We may update this Privacy Policy from time to time. Users will be notified of any changes by email. The "Last updated" date at the top of this policy indicates when it was last modified. 8. Contact Information If you have any questions, please contact us at support@tubeflow.ai. Thank you for using TubeFlow! TubeFlow, a product by Coffee Flow Labs