Legal and policy documentation

TubeAnalytics collects the minimum data required to provide the analytics service. When a user connects a YouTube channel, the platform stores the OAuth access token (encrypted with AES-256-GCM), the YouTube channel ID, and channel display name. Analytics data — views, RPM, CPM, watch time, audience demographics — is fetched from YouTube's API and stored to power the dashboard. No video content, comments, or Google account passwords are ever accessed or retained.

Account-level data includes the user's email address, subscription tier, and usage activity for billing and feature-gating purposes. This data is stored in a PostgreSQL database hosted on Prisma Postgres and is subject to deletion on account closure.

Users in the European Economic Area and United Kingdom have rights under GDPR to access, rectify, erase, or port their personal data. The GDPR page documents these rights, the lawful basis for each processing activity, and the procedure for submitting a data subject access request. The team responds to verified requests within 30 days.

Analytics data connected to a user account is deleted within 30 days of account closure. OAuth tokens are revoked and purged immediately upon channel disconnection. Users can disconnect channels at any time from the settings panel without contacting support.

The terms and conditions page covers service eligibility, acceptable use, intellectual property, liability limitations, and the process for account suspension or termination. All subscription agreements are governed by these terms, which are version-controlled and dated so users can verify when material changes were made.

The refund policy describes eligibility windows by plan tier and the process for requesting a refund after a charge. Subscription charges are processed by Creem. Refund requests submitted within the eligibility window are processed within five to ten business days.