Legal Document

Privacy Policy

Last updated: January 21, 2026 • Effective: January 21, 2026

Yubely ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered content creation platform, including our website, applications, and services (collectively, the "Service").

1. Information We Collect

1.1 Information You Provide

  • Account Information: When you register, we collect your name, email address, and password (encrypted). If you sign up via Google OAuth, we receive your Google profile information including your name, email, and profile picture.
  • Payment Information: When you subscribe to a paid plan, our payment processor (Stripe) collects your payment card details. We do not store full credit card numbers on our servers. We receive limited payment information such as the last four digits of your card, card type, and billing address.
  • Content and Brand Information: Information you provide about your brands, channel names, content preferences, and generated content settings.
  • YouTube Account Data (Optional): YouTube account connection is optional and is used solely for publishing content that has already been generated within the Service. When you connect your YouTube channel, we receive access to upload videos and manage your channel through the YouTube Data API. We access your channel name, channel ID, and upload capabilities. No YouTube or Google account data is used during content creation or AI processing.
  • YouTube Sync Feature (Optional): When you use the optional "Sync from YouTube" feature, we retrieve limited channel information such as channel name, profile image, and publicly available metadata for display purposes only. This data is not used for AI content generation, is not sent to OpenAI, Replicate, or any other AI service, and is not used to train or improve machine learning models.
  • TikTok Account Data (Optional): TikTok account connection is optional and is used solely for publishing short-form content that has already been generated within the Service. When you connect your TikTok account, we receive access to upload videos through the TikTok Content Posting API. We access your TikTok username, display name, profile image, and posting capabilities. No TikTok account data is used during content creation or AI processing.
  • Communications: When you contact us for support, we collect the information you provide in your messages.

1.2 Information Collected Automatically

  • Usage Data: We collect information about how you use our Service, including pages visited, features used, content generated, and actions taken.
  • Device Information: Browser type, operating system, device type, screen resolution, and unique device identifiers.
  • Log Data: IP address, access times, referring URLs, and other standard log information.
  • Cookies and Similar Technologies: We use cookies, local storage, and similar technologies to maintain your session, remember preferences, and analyze usage.

1.3 Information from Third Parties

  • Google OAuth: Basic profile information (name, email, profile picture) when you authenticate with Google.
  • Stripe: Payment status, subscription information, and limited billing details.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Process your transactions and manage your subscription
  • Generate AI-powered content (music, visuals, videos) based on your preferences
  • Upload content to your connected YouTube channel on your behalf
  • Send you technical notices, updates, security alerts, and support messages
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze trends, usage, and activities in connection with our Service
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities
  • Personalize and improve your experience
  • Send promotional communications (with your consent, where required)

Legal Basis for Processing (GDPR): We process your data based on: (a) your consent, (b) performance of our contract with you, (c) compliance with legal obligations, and (d) our legitimate interests in operating and improving the Service.

AI Content Generation Independence

AI-generated channels and videos are created independently of any Google or TikTok services. The use of Google OAuth, YouTube APIs, or TikTok APIs occurs only after content generation, and solely for the purpose of publishing user-approved content.

YouTube channel data and TikTok account data are used solely to display account information within the Service. This data is never used as input for AI processing or content generation.

3. Data Sharing and Disclosure

We may share your information in the following circumstances:

  • Service Providers: With third-party vendors who perform services on our behalf (payment processing, cloud hosting, AI services, analytics).
  • YouTube: Content you choose to publish is uploaded to your connected YouTube channel and becomes subject to YouTube's privacy policy.
  • TikTok: Short-form content you choose to publish is uploaded to your connected TikTok account and becomes subject to TikTok's privacy policy.
  • Legal Requirements: When required by law, legal process, or government request, or to protect our rights, privacy, safety, or property.
  • Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
  • With Your Consent: When you direct us to share your information or give explicit consent.

Important: We do not sell your personal information to third parties for their marketing purposes. We do not share your generated content with other users unless you explicitly publish it publicly.

Important: Platform API Data Isolation

Data obtained via Google OAuth, YouTube Data APIs, or TikTok APIs is NEVER sent to OpenAI, Replicate, or any other AI or machine learning service.

All AI processing occurs prior to any platform account connection and uses only user-selected channel types, preferences, and inputs that are independent of Google or TikTok services.

Data obtained from Google OAuth, YouTube Data APIs, and TikTok APIs is strictly isolated from AI services. This data is never transmitted to OpenAI, Replicate, or any third-party AI system, and is never used for training or inference of generalized AI models.

4. Third-Party Services

Our Service integrates with the following third-party services:

Google Services (OAuth & YouTube)

We use Google OAuth for authentication and the YouTube Data API to upload videos to your channel.

Privacy Policy: policies.google.com/privacy

YouTube API Scopes Used: We request access to upload videos and manage your YouTube channel. You can revoke this access at any time through your Google Account permissions page.

Stripe (Payment Processing)

We use Stripe to process payments. Stripe collects and processes your payment information securely.

Privacy Policy: stripe.com/privacy

TikTok

We use the TikTok Content Posting API to upload short-form videos to your TikTok account.

Privacy Policy: tiktok.com/legal/privacy-policy

TikTok API Scopes Used: We request access to post videos to your TikTok account. You can revoke this access at any time through your TikTok account settings.

AI Services (OpenAI, Replicate)

We use AI services to generate channels and videos based on channel types and user-defined creative preferences.

✓ AI content generation occurs before any Google, YouTube, or TikTok account is connected.

✓ These AI services never receive Google user data, YouTube API data, TikTok API data, or OAuth credentials.

OpenAI: openai.com/privacy | Replicate: replicate.com/privacy

🔒 Data Segregation Guarantee

Important: We maintain complete data isolation between platform services (Google/YouTube, TikTok) and AI services (OpenAI):

  • YouTube API data (channel info, statistics, account data) is NEVER sent to OpenAI or any other AI service
  • TikTok API data (account info, profile data) is NEVER sent to OpenAI or any other AI service
  • AI generation uses only user-provided information (brand name, preferences, style settings)
  • YouTube integration is used solely for video uploading and channel management
  • TikTok integration is used solely for short-form video uploading
  • • These data flows are architecturally separated and audited

This segregation ensures compliance with Google API Services User Data Policy's Limited Use requirements and TikTok Developer Terms.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Secure password hashing (bcrypt)
  • Regular security assessments and updates
  • Access controls and authentication requirements
  • Secure cloud infrastructure with industry-standard certifications

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information as follows:

  • Account Data: Retained while your account is active and for up to 30 days after deletion to allow for account recovery.
  • Generated Content: Stored for as long as your account is active. You can delete individual content items at any time.
  • Payment Records: Retained for 7 years as required by tax and financial regulations.
  • Usage Logs: Retained for up to 12 months for analytics and security purposes.

7. Your Rights

7.1 For All Users

  • Access and review your personal information
  • Update or correct your information through your account settings
  • Delete your account and associated data
  • Disconnect third-party services (Google, YouTube, TikTok)
  • Export your data in a portable format
  • Opt out of marketing communications

7.2 European Users (GDPR)

If you are in the European Economic Area, you have additional rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restriction: Request restriction of processing
  • Right to Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time
  • Right to Lodge a Complaint: File a complaint with your local data protection authority

7.3 California Users (CCPA)

California residents have the following rights:

  • Right to Know: Request disclosure of the categories and specific pieces of personal information collected
  • Right to Delete: Request deletion of personal information
  • Right to Opt-Out: We do not sell personal information, but you may opt out of any future sales
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise any of these rights, please contact us at privacy@yubely.com. We will respond to your request within 30 days.

8. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission and compliance with applicable data protection laws.

9. Children's Privacy

Our Service is not directed to children under 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete such information promptly. If you believe a child has provided us with personal information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may provide additional notice via email or through the Service. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Yubely

Email: privacy@yubely.com

Support: support@yubely.com

For GDPR-related inquiries, you may also contact our Data Protection Officer at dpo@yubely.com

Google API Services User Data Policy

Yubely's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How We Use YouTube API Data

  • Authentication: Verify your YouTube channel ownership
  • Video Upload: Upload content you create to your channel
  • Channel Management: Display channel info in your dashboard

Data Segregation from AI Services

To comply with Google's Limited Use requirements, we maintain complete architectural separation between YouTube API data and AI services:

  • • YouTube API data is stored separately and is NEVER transmitted to OpenAI or any other AI provider
  • • AI content generation uses only user-provided input (brand settings, content preferences)
  • • Our system includes audit logging to verify this data isolation
  • • These data flows are maintained in separate code paths and database tables

Revoking Access: You can revoke Yubely's access to your YouTube account at any time through your Google Account permissions page. Upon revocation, we will delete your YouTube access tokens within 24 hours.

TikTok Developer Terms Compliance

Yubely's use of TikTok APIs adheres to the TikTok Developer Terms of Service and TikTok Privacy Policy.

How We Use TikTok API Data

  • Authentication: Verify your TikTok account access
  • Video Upload: Post short-form content you create to your TikTok account
  • Account Display: Display your TikTok username and profile in your dashboard

Data Segregation from AI Services

We maintain complete architectural separation between TikTok API data and AI services:

  • • TikTok API data is stored separately and is NEVER transmitted to OpenAI or any other AI provider
  • • AI content generation uses only user-provided input (brand settings, content preferences)
  • • Our system includes audit logging to verify this data isolation
  • • TikTok connection is used solely for posting user-approved content

Revoking Access: You can revoke Yubely's access to your TikTok account at any time through your TikTok account settings. Upon revocation, we will delete your TikTok access tokens within 24 hours.