Privacy Policy

This policy describes how TubePlanner collects, uses, and protects information about you when you use our service at tubeplanner.app. It applies to all users — free and paid.

We collect information in three ways:

• Account information. When you sign up via GitHub or Google OAuth, we receive your name, email address, and profile photo from that provider. If you create an email/password account, we store your email and a bcrypt hash of your password (never the plaintext).
• Content you create. Video projects, brainstorm items (notes, links, voice recordings, images), sections, drafts, and any other content you create in TubePlanner. This includes files you upload — A-roll and B-roll recordings, thumbnails, and review videos — which are stored on Cloudflare R2 in per-user buckets.
• Usage and analytics. We use PostHog to collect anonymous usage analytics (page views, feature interactions, error events). This helps us understand what’s working and what isn’t.
• Billing information. Payments are processed by Stripe. We never see or store your credit card details. We store your Stripe customer ID and subscription ID to manage your plan.
• Cookies and session data. We use a session cookie to keep you logged in (managed by NextAuth). We use PostHog cookies for analytics. We do not use third-party advertising cookies.

TubePlanner offers AI-powered features (intake conversations, outline generation, title/thumbnail suggestions, etc.) powered by Anthropic’s Claude models.

When you use an AI feature, the relevant parts of your content are sent to Anthropic’s API to generate a response. Usage is metered through the AI credits included in your plan. We do not sell this data or use it to train our own models, and Anthropic’s privacy policy applies to its processing of that traffic.

AI conversations and generated content are saved to your project in our database so you can review and edit them.

We do not sell your personal data. We share it only as follows:

• Service providers. We use Anthropic (AI), Cloudflare R2 (storage), Stripe (billing), Railway (database), Vercel (hosting), PostHog (analytics), and Loops (transactional email). Each provider processes data only as necessary to provide their service.
• Public share links. If you generate a public share link for a review session or project, the content associated with that link is visible to anyone with the URL. You control this — you create the link and can revoke access at any time.
• Legal requirements. We may disclose information if required by law or to protect the rights and safety of our users or the public.

Your project data and account information are stored in a PostgreSQL database hosted on Railway. File uploads are stored on Cloudflare R2. Both are located in the United States.

We use reasonable security measures: HTTPS everywhere, bcrypt for passwords, and access controls on our infrastructure. No system is perfectly secure, and we cannot guarantee absolute security.

We retain your data for as long as your account is active. If you close your account or request deletion, we will delete your personal data and content within 30 days, except where we’re required to retain it for legal or billing reasons (e.g. Stripe transaction records).

To request account deletion, email [email protected] with the subject line “Delete my account.”

TubePlanner is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

Depending on where you live, you may have rights to access, correct, or delete your personal data, or to restrict or object to how we process it. To exercise any of these rights, email us at [email protected].

We may update this policy from time to time. When we do, we’ll update the effective date at the top and, for material changes, notify you by email or in-app notice.

Questions? Email us at [email protected].