Privacy Policy
Effective July 23, 2026 · Last updated September 11, 2026 · TubeAnvil is operated by PLAYRIOT LLC.
What we collect
- Account: your Google account email address, used to sign you in. We never see or store passwords.
- YouTube connection (optional): if you connect a YouTube channel, we store the OAuth refresh token Google issues. It lives only on our server, encrypted, is never sent to your browser, and is protected as described in How we protect your data.
- Your content: scripts you submit and the videos, thumbnails, and metadata the service produces for you.
- Billing: handled by Stripe. We store your plan and a customer reference; card numbers never touch our servers.
- Usage: a ledger of video minutes produced and standard server logs.
How we use Google user data
TubeAnvil's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- The
youtube.uploadscope is used for exactly one thing: uploading videos you approved to your own channel. Uploads are always private-first; you publish from YouTube Studio. - The
youtube.force-sslscope is used only on videos we uploaded for you: to set the thumbnail, to update the title, description and tags you approved, and to post the description comment you approved. It is never used on anyone else's videos or channel. - The
youtube.readonlyscope is used to confirm which channel you connected and to show you the view counts of your own uploads. - We never share, sell, or transfer Google user data to third parties, never use it for advertising, and no humans read it except as required for security or support you request.
- Revoke access any time at myaccount.google.com/permissions — revocation takes effect on our side immediately.
What we never do
- No selling of personal data. No advertising networks. No tracking cookies — the only cookie is your session.
- No publishing to your channel without your action. Ever.
Who we share with
Only the processors that run the service: Stripe (payments), IONOS (our hosting provider, servers in the United States), and the AI vendors that render the videos you request (they receive your script content, never your identity, your email, or your Google tokens).
How we protect your data
Google user data — your email address and your YouTube tokens — is the most sensitive data we hold. These are the security procedures in place to protect its confidentiality:
- Encryption in transit. Every connection to TubeAnvil uses HTTPS (TLS), and every call we make to Google's APIs uses HTTPS. Tokens are never transmitted over an unencrypted connection.
- Encryption at rest. Your YouTube refresh token is stored only on our production server, encrypted with AES-256-GCM under a server-held key, in a file readable solely by the TubeAnvil service account (Unix file mode 0600). It is never sent to your browser, never written to application logs, and never included in what we send to Stripe or to AI vendors.
- Restricted access. The server accepts administrative logins only by SSH public key (password login is disabled) and sits behind a firewall that exposes only the web ports. Only PLAYRIOT LLC's operator has access, and it is used only for security work or support you request.
- Minimum scopes. Sign-in asks Google for your email address only (
openid email). YouTube scopes (youtube.upload,youtube.force-ssl,youtube.readonly) are requested only when you choose to connect a channel. Short-lived access tokens expire within an hour. - Protected sessions. Your sign-in session is a signed (HMAC-SHA256), HttpOnly, Secure, SameSite cookie, so page scripts and other sites cannot read it.
- Automatic clean-up. A channel import you start but do not finish is deleted automatically after 24 hours, including its token.
- No AI training. We do not use Google user data to develop, improve, or train AI or machine-learning models.
- Incident notice. If we learn of a security incident affecting your data, we will notify you by email without undue delay, and within 72 hours of confirming it.
Retention & deletion
We retain your personal information only for as long as needed to fulfill the purposes described in this policy, unless a longer retention period is required by law. When data is no longer needed, we delete or destroy it.
- While your account is active: your email, your connected channel's token, and the videos we produced for you are kept so the service can work.
- Disconnecting a channel or deleting your account: we delete the stored refresh token (it can no longer be used), your videos, and your personal data. Email us and it is done within 30 days.
- Revoking at Google: you can remove TubeAnvil's access at any time at myaccount.google.com/permissions. From that moment our stored token stops working, and we delete it.
Contact
PLAYRIOT LLC · desmond.buchanan@gmail.com