Privacy Policy

1. Controller

The controller responsible for processing personal data is:

Reconnector Consulting Services LLC
750 E Cowboy Way, Suite 3
LaBelle, FL 33935, USA
Represented by: Dirk C.E. Luedtke
Privacy contact: datenschutz@tubemakers.net

The controller is established in the USA and also addresses users in the European Union. Representative in the European Union under Art. 27 GDPR: [Name und Anschrift des benannten EU-Vertreters]

2. This website

When you visit tubemakers.net, our server processes the technically necessary connection data (IP address, time, requested page, browser type). This data is used solely to deliver the page, for security and for troubleshooting, and is deleted after a short period. The website sets no cookies, embeds no external fonts, videos or analytics tools and transmits no data to advertising networks.

3. Use of YouTube API Services

TubeMakers uses YouTube API Services, in particular the YouTube Data API, the YouTube Analytics API and the YouTube Reporting API. TubeMakers is bound by the YouTube API Services Terms of Service and the YouTube Developer Policies. By using the YouTube features you also agree to the YouTube Terms of Service; the Google Privacy Policy applies in addition:

• YouTube Terms of Service
• Google Privacy Policy
• Google security settings – manage granted access

TubeMakers’ use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Which YouTube data is processed

Public data: channel and video IDs, channel name, video title, description, tags, thumbnail URL, publication time, duration and publicly visible statistics such as views, likes, comment count and subscriber count.

Authorised data after Google consent: data of your own YouTube channel, in particular traffic sources, audience retention, impressions and click-through rates, views, subscriber gains, country and time series and further performance data provided by the YouTube Analytics/Reporting APIs.

Connection data: consent status of the Google connection, encrypted access tokens, connected channel, time of connection and technical check/error data. TubeMakers never requests or stores your YouTube or Google password.

TubeMakers analyses: From API data TubeMakers calculates its own metrics, ratios, trends, categories and recommendations. In the application these are clearly labelled as TubeMakers analysis and not as metrics provided by YouTube. TubeMakers does not infer sensitive attributes of viewers or creators (such as health, age, origin, religion, political opinion or sexual orientation).

5. Purposes

We process the data to

• enable the user to research public channels and videos and manage their selected references;
• display the authorising channel owner’s own statistics and performance data;
• generate TubeMakers analyses and visible product recommendations;
• run imports, refreshes, quota management, security, troubleshooting and data deletion;
• perform write actions on YouTube (e.g. uploading a video reviewed by the user) only after a separate activation and explicit confirmation in each case.

The data is not used for any other purpose not described here. Google user data is not sold and not used for advertising.

6. Google connection and permissions

Connecting your own channel is voluntary. TubeMakers requests only the permissions required for a feature that is already visible. For the read and analytics features these are the scopes youtube.readonly (read channel and video information) and yt-analytics.readonly (read your own channel’s statistics). Write permissions are not requested in advance. Before any write action TubeMakers shows the feature, target channel, visibility and consequences and obtains the user’s explicit consent.

7. Legal basis

For users in the European Union and the European Economic Area the General Data Protection Regulation (GDPR) applies under Art. 3(2) GDPR, even though the controller is established in the USA. Processing is based on:

• Performance of a contract (Art. 6(1)(b) GDPR) for account, workspace, research, analyses, planning and support – i.e. all features you have ordered from us;
• Consent (Art. 6(1)(a) GDPR) for connecting your YouTube channel via Google; you give this consent on the Google consent screen and may withdraw it at any time with effect for the future;
• Legitimate interests (Art. 6(1)(f) GDPR) in security, abuse prevention, error logging and operational stability; our interest is to run the application reliably and securely;
• Legal obligations (Art. 6(1)(c) GDPR), such as commercial and tax retention of invoicing data.

Transfers to third countries: The application runs on servers in Germany. Where data is transferred to the USA – through access by the controller itself or through the US service providers listed in section 8 – we rely on the EU-US Data Privacy Framework where the recipient is certified, and otherwise on the Standard Contractual Clauses of the European Commission (Art. 46(2)(c) GDPR). For users outside the EU the data protection laws of their country apply as applicable.

8. Recipients and processors

Data is transferred only to service providers required to operate the described features. They process data on our behalf and according to our instructions; data processing agreements or the providers’ API data protection terms apply.

What is not sent to AI providers: account data, access tokens and the Google-authorised analytics of your own channel are not transferred to providers of text, image or speech models. Public video information and your drafts are transferred solely for the visible features you use in TubeMakers; under their terms, the named providers do not use API data to train their general models.

Authorised YouTube data is shared only for the visible TubeMakers feature requested by the user and within the scope of their consent. Google or YouTube user data is never sold. TubeMakers does not allow third parties to serve content or advertising in the application. Authorities receive data only where we are legally obliged.

9. Tenant isolation

Authorised data is stored separately per channel owner and workspace. Access is granted only to the authorising user and team members they explicitly approve. Data of different channel owners is not combined into a shared private analysis.

10. Retention and refresh

Public and other non-authorised YouTube API data is refreshed or deleted no later than 30 calendar days after retrieval. Other authorised metadata is likewise refreshed or deleted within 30 days. Authorised statistics and performance data is stored only as long as required for the consent granted and the product feature; authorisation and the continued existence of the content are re-verified at least every 30 days.

Where YouTube expressly approves TubeMakers under the additional policies for derived metrics and extended statistics retention, approved statistics and TubeMakers analyses are retained for no more than 36 calendar months. Titles, channel names, descriptions and comment text are excluded from this extension and remain subject to the 30-day rule.

Operational periods:

• Account data (name, e-mail, workspaces, settings): for the duration of the usage relationship and up to 30 days after account deletion or end of contract.
• Invoicing and contract data: for the statutory retention periods (generally up to ten years).
• Web server access logs (IP address, time, requested address): at most 35 days.
• Application and security logs: rolling, generally a few weeks, at most 90 days.
• Backups: rolling (7 daily, 4 weekly, 6 monthly), hence overwritten no later than six months. Backups are used only for recovery after an outage; after a recovery, deletions performed in the meantime are re-applied.
• Support requests by e-mail: up to twelve months after the case is closed.

11. Revocation, disconnection and deletion

You can disconnect the YouTube connection in TubeMakers at any time and request deletion of your stored data. TubeMakers then revokes the access token with Google and deletes the authorised data stored on the basis of this consent as soon as possible and within seven calendar days. The same applies when your TubeMakers account is deleted.

You can additionally revoke access in your Google security settings. TubeMakers regularly verifies granted permissions and deletes data when authorisation can no longer be confirmed.

Deletion in TubeMakers does not delete or modify any data on YouTube. YouTube content must be deleted on YouTube itself.

Deletion requests: via the page Delete your data or by e-mail to datenschutz@tubemakers.net.

12. Security

TubeMakers applies appropriate technical and organisational measures, including encrypted transport (HTTPS), encrypted storage of access tokens, server-side-only token handling, tenant and role checks, access restrictions, logging of security-relevant events, regular backups and restore and deletion tests.

13. Cookies and local storage

The website tubemakers.net sets no cookies and stores nothing on your device. The application at https://app.tubemakers.net uses strictly necessary session cookies for sign-in only; these do not require consent. No analytics, tracking or advertising cookies are used.

14. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time with effect for the future. You may also lodge a complaint with the data protection supervisory authority of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR). The members of the European Data Protection Board are listed at edpb.europa.eu.

For all requests contact datenschutz@tubemakers.net.

15. Changes

This Privacy Policy is updated when features, data processing, recipients or legal requirements change. Before any new use of YouTube or Google data not covered by the existing consent, we inform you in advance and obtain new consent where required.