Privacy Policy
Last updated: September 9, 2026This page explains, without forced legalese, what data TubeGo collects when you use the app, what it’s for, who it’s shared with and what you can do about it. If anything here isn’t clear, just write to us; the email address is at the bottom of the page.
1What we collect
We only collect what’s needed to make TubeGo work and to bill for it. No data kept “just in case” and never used.
Account data
- Name and email: to identify your account and send important notices (receipt, video ready, error alert).
- Password: stored as a hash (never in plain text); if you sign in with Google, we don’t have a password of yours at all.
Product usage data
- Ideas, scripts, images and videos you generate or upload to make your videos.
- Saved preferences (language, voice, visual style, captions) so you don’t have to pick everything again for each video.
- Your own media (photos and clips) that you upload to use in your scenes.
Payment data
Payment is processed by Kiwify, not by TubeGo. We only receive the purchase confirmation from Kiwify (plan, amount, email); we never see or store card numbers.
Social account connection data
If you connect YouTube or TikTok (and Instagram, once available), we receive an access token for your account, encrypted before it goes into the database, and basic channel or profile information (name, photo, public statistics). More details in section 4.
Technical data
- IP address, browser type and operating system: only for security (detecting abuse) and error diagnosis.
- Session cookies (keep you signed in) and, on your first visit, a cookie that records which ad or link you came from, used only to know which marketing campaigns work, never sold or shared with any advertiser.
2How we use your data
- Deliver the service: make your videos, publish when authorized, show your history and credits.
- Bill for your plan: confirm payment and release credits.
- Support: answer when you write asking for help.
- Security: detect misuse, fraud attempts or account abuse.
- Improve the product: understand, in aggregate, what works and what gets stuck in the creation flow.
3Who we share it with
To make each video, some parts of your request go through specialized companies. Each one only does its own part, and none of them uses the content for anything other than processing your request:
| Company | What we use it for | What it receives |
|---|---|---|
| Anthropic (Claude) | Writing the script and the channel analysis | The topic or idea you described |
| fal.ai | Generating the visuals and, when turned on, animating the scenes | Each scene’s text (visual prompt) |
| ElevenLabs | Voiceover and music | The script text |
| Google (YouTube) | Reading your channels and publishing or scheduling videos, if you connect | The access token Google asks you to authorize |
| TikTok | Publishing the videos you choose to post, if you connect | The access token TikTok asks you to authorize, and the video you publish |
| Kiwify | Processing payment and subscription | Email and billing data, which never pass through TubeGo |
| Meta (Facebook/Instagram) | Measuring how well TubeGo’s ads work, only on the sign-up page | That a sign-up happened, without the content of your videos |
We may also share data if we’re legally required to (a court order, for example), or if the company is sold or merged, always telling you first if the law allows it.
4YouTube, Instagram and TikTok
When you connect one of these accounts, TubeGo asks only for the permissions needed to do what it promises (publish and schedule for you) and nothing beyond that without telling you first:
You can disconnect at any time inside TubeGo (this revokes access on the platform itself, not just on our side) or directly in each network’s connected-apps settings.
5Where and how long we keep it
Data is kept on our own server and in a hosted database (Supabase/Postgres), with backups. We don’t use spreadsheets or third-party services to keep customer data outside those two places.
- Account: for as long as it exists. If you ask for deletion, we delete it within 30 days (some tax records of payments may need to be kept by law, even after that).
- Generated videos: the file itself is removed from the server after a while to free up space (you’re told beforehand in the Library); the video’s record (title, date, statistics) stays in your history.
- Social account access token: kept encrypted until you disconnect the account.
6Security
- Connections always over HTTPS.
- Social account access tokens stored encrypted in the database, never in plain text.
- Session cookie marked
HttpOnly: no page script can read it, not even ours. - Passwords stored as hashes, never in plain text.
No system is 100% immune to incidents. If something serious happens to your data, you’ll be notified by email within the time the law requires.
8Your rights (LGPD)
Under Brazil’s General Data Protection Law (Law 13.709/2018), you can at any time:
- Confirm and access what data we have about you.
- Correct incomplete or outdated data.
- Ask for deletion of your data and your account.
- Ask for a copy of your data in a readable format (portability).
- Withdraw consent, for example by disconnecting YouTube, Instagram or TikTok at any time.
To exercise any of these rights, write to the email address at the bottom of this page. We reply within 15 business days.
9Minors
TubeGo isn’t directed at people under 18, and we don’t knowingly collect data from minors. If you’re responsible for a minor and believe they created an account, write to us and we’ll remove the data.
10Changes to this policy
If we change anything relevant here (a new type of data collected, a new partner that receives your information), we’ll let you know by email or inside the app before the change takes effect. The date at the top of the page always shows the latest update.