Privacy Policy

Last updated: October 20, 2026

1. Introduction

Welcome to TubePilot AI ("we", "our", or "us"), available at https://www.tubepilotpro.com. We are committed to protecting your personal information and your right to privacy. This policy explains how we collect, process, and protect your information when you connect your YouTube channel.

2. Google API Services & YouTube Data

TubePilot AI uses YouTube API Services to provide YouTube channel analytics, subscriber growth metrics, video performance evaluation, and AI-powered comment moderation.

By using our service to pair your YouTube channel, you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.

3. What Information We Access and Collect

Google Account Information: Your public name, email address, and avatar picture.
YouTube Channel Data: Channel ID, title, custom URL, subscriber count, total video views, and public video metadata.
Token Credentials: Encrypted OAuth 2.0 access tokens required to perform read-only channel statistics updates on your behalf.

4. How We Use and Protect Google User Data

TubePilot AI complies with the Google API Services User Data Policy, including the Limited Use requirements.

Specific Data Usage: Google user data (channel statistics, video metadata, and comment threads) is accessed solely to calculate growth metrics (CTR, VPH, estimated earnings) and draft creator-approved replies in the TubePilot AI dashboard.

No Data Transfers or Sales: We strictly do NOT sell, lease, or trade your personal or YouTube channel data to third parties, advertising networks, or data brokers.

No AI Model Training on User Data: TubePilot AI does NOT use Google user data to train, fine-tune, or improve generalized artificial intelligence or machine learning models. User data processed via Google Gemini API is ephemeral and adheres to strict enterprise privacy standards.

5. Data Protection and Security Mechanisms

We implement comprehensive technical and organizational measures to safeguard confidential user data:

AES-256 Encryption at Rest: All OAuth tokens (access tokens and refresh tokens) are encrypted at rest using industry-standard AES-256-CBC encryption with unique cryptographic initialization vectors before storage.
TLS/HTTPS Encryption in Transit: All communications between users, TubePilot AI, Google APIs, and Telegram bots are strictly encrypted in transit using TLS 1.3 / HTTPS.
Strict Access Controls: Database and server infrastructure access is restricted via multi-factor authentication (MFA) and least-privilege role-based access controls (RBAC).
Vulnerability Management: Continuous automated security patch auditing and dependency vulnerability scanning.

6. Data Retention, Deletion, and Revoking Access

You have complete control over your data and authorization:

Google Account Permissions: You can revoke TubePilot AI's access at any moment via Google Security Settings: https://myaccount.google.com/permissions.
Instant Channel Disconnect & Purge: Clicking "Disconnect Channel" in the TubePilot AI workspace instantly purges all stored tokens, credentials, and cached channel records from our database.
Right to Erasure: Users can request full permanent deletion of their account and associated data by emailing our support team.

7. Contact Information

For privacy inquiries, data deletion requests, or security verification questions:

Primary Developer & Data Protection Contact: hasanxontoxtayev@gmail.com

TubePilot AI (Project ID: tubepilot-512119 / 427558992320) — https://www.tubepilotpro.com