Privacy Policy for TextTube.ai

Effective date: July 29, 2026

TextTube.ai generates summaries of publicly available YouTube videos. This policy describes the information the service processes, why it is processed, and the choices available to you.

Information we process

• Google account and sign-in data: When you use Google Sign-In, we receive your Google subject identifier, email address, email-verification status, display name, and profile information returned by Google. We use this data to authenticate you, create and maintain your TextTube account, associate your history and notifications with that account, and prevent account impersonation. We do not sell this data or use it for advertising.
• Summary history: For guests, we associate recently summarized YouTube video IDs with a random visitor_id cookie. For signed-in users, history is associated with a one-way hash of the account identifier so it remains available across browser sessions. This history is stored for seven days.
• Optional YouTube playlist automation: Google Sign-In requests only basic identity scopes. If you separately connect YouTube and enable playlist monitoring, TextTube requests the read-only youtube.readonly scope and accesses the playlist named texttube, including its playlist ID, title, video IDs, video titles, channel metadata, and processing status. This data is used only to provide the playlist-monitoring and notification features that you enable. An encrypted Google refresh token allows this work to continue in the background.
• Google OAuth credentials: Access tokens are used to complete the requested Google operation and are not used for advertising. The refresh token used for enabled playlist monitoring is encrypted before storage. OAuth credentials are not sent to PostHog, advertisers, data brokers, or unrelated third parties.
• Notifications: Signed-in users receive in-app summary notifications. Browser alerts are optional and require storing the browser push endpoint and encryption keys needed for delivery.
• Session data: A signed session cookie supports language selection, form security, and temporary messages. It expires after seven days.
• Waitlist and contact data: If you submit a form, we process the email address, name, and message that you provide so we can respond or manage the waitlist.
• Security and operations data: We process limited request metadata, error information, and service timings to operate and secure the service. We do not intentionally place form contents, full query strings, API credentials, or raw IP addresses in application logs. Logs are size-rotated and limited to five 10 MB files per service by default.
• Anonymous aggregate usage metrics: We count successful page visits, summary reads, and accepted summary requests after filtering known crawlers and automated clients. A random visitor identifier is used in Redis for up to 48 hours solely to avoid counting the same browser more than once per action each day. Only aggregate counts are exported to our monitoring system; visitor identifiers, IP addresses, user agents, and video IDs are not exported with these metrics.
• Optional analytics: PostHog loads only after you select “Accept analytics.” It may then process page and device information under PostHog's privacy terms. TextTube does not send waitlist details, contact messages, names, or email addresses to PostHog. You can reject analytics or reopen “Privacy choices” in the footer at any time.

YouTube transcripts and AI summaries

TextTube fetches publicly available YouTube transcript data, stores transcript text and related video metadata in its database, and sends transcript text to Google's Gemini service to generate summaries. TextTube may display generated summaries and key points publicly. It does not claim ownership of the source video or transcript.

Video owners may request removal of stored transcript data and generated summaries by contacting info@texttube.ai with the relevant YouTube URL.

Why we process information

We use this information to provide summaries and history, respond to submissions, prevent abuse, troubleshoot failures, measure performance, and understand anonymous aggregate product usage. Optional PostHog analytics are used only with your analytics consent.

Google account and YouTube data are used only to provide Google Sign-In and the optional playlist-monitoring, summary, and notification features shown in the TextTube interface. We do not sell Google or YouTube data, use it for targeted advertising, or transfer it to advertising platforms or data brokers. Where needed to provide these features, the data is processed by TextTube's internal web application, API, database, cache, and background workers. Transcript text from publicly available videos may be sent to Google's Gemini service to generate the requested summary; OAuth credentials are not sent to Gemini.

Service providers

Depending on the feature used, information may be processed by YouTube/Google, Google's Gemini API, PostHog after analytics consent, our GeoIP lookup service, our email provider, and our hosting, database, cache, and monitoring providers. These providers process information under their own terms and privacy policies.

Retention and security

Visitor summary history expires after seven days. Session cookies expire after seven days. Playlist notifications expire after 30 days, while playlist item records remain while the connected integration is enabled so TextTube can prevent duplicate processing. The encrypted refresh token and integration data are retained only while playlist monitoring is enabled or as needed to honor a deletion request. Daily visitor-metric deduplication records expire after 48 hours; aggregate monitoring data is retained according to our monitoring-system retention. Operational logs are rotated as described above. Waitlist, contact, transcript, metadata, and generated-summary records are retained while needed to provide the service, respond to requests, meet security obligations, or honor removal requests.

We use HTTPS, authenticated internal APIs, restricted service ports, input limits, and access-controlled infrastructure. No storage or transmission system can be guaranteed completely secure.

Your choices and rights

You can reject or revoke optional analytics through “Privacy choices,” disable browser notifications in browser settings, revoke YouTube access from your Google account, disable playlist monitoring in TextTube, delete cookies through your browser, and request access, correction, deletion, or information about data associated with you where applicable. To request deletion of your TextTube account or connected Google/YouTube data, email info@texttube.ai with the account email address and the relevant request. We will delete the account identity, OAuth credentials, playlist integration, history, notifications, and other personal data we control, subject to data we must retain for legal or security purposes. We may need to verify a request before acting on it.

Changes and contact

We may update this policy as the service changes. The effective date above will be revised when material changes are published. Questions or privacy requests can be sent to info@texttube.ai.