Legal

Privacy Policy

This policy explains what personal data TubeTube collects, why, who we share it with, and the rights you have over it.

Last updated: 17 June 2026

1. Data controller

TubeTube (www.tubetube.io) is an AI video-generation service published and operated by AM2H Productions (“we”, “us”, “our”), Société par actions simplifiée (SAS) with a share capital of 100 €, registered under RCS Paris 945 087 500 (SIREN/SIRET 945 087 500), whose registered office is at 5 rue de la Moselle, 75019 Paris, France. AM2H Productions is the data controller for the personal data described below.

For any privacy question or to exercise your rights, contact us at hello@tubetube.io.

2. What we collect

Account data - your email address and the username you choose for the public community gallery.
Content you create - the text, lyrics, uploaded audio, reference images, settings and prompts you submit, and the audio, images and videos generated from them.
Billing data - your subscription plan, credit balance, credit-ledger history and invoices. Card and bank details are handled entirely by Stripe; we never see or store full payment-card numbers.
Usage & technical data - pages viewed, product events (e.g. a video launched), device/browser information, IP address and server logs. We may also record anonymized session replays of the interface to debug and improve it.
Communications - messages and feedback you send us (e.g. support or the in-app feedback form).

3. How we use it & legal bases

Provide the service - generate, store and deliver your videos, run your account and credits. Basis: performance of our contract with you.
Payments & accounting - process subscriptions and top-ups, issue invoices. Basis: contract and legal obligation.
Essential emails - invitations, account, security and billing notices. Basis: contract and legitimate interest.
Improve & secure the product - analytics, abuse prevention, debugging. Basis: legitimate interest (and your consent where required for non-essential analytics).

We do not sell your personal data, and we do not use it for third-party advertising.

4. AI & infrastructure providers (subprocessors)

To run the service we share the strictly necessary data with processors acting on our behalf and under contract:

Supabase - database, authentication and file storage;
Vercel - web hosting; Railway - video-processing worker hosting;
Stripe - payment processing;
Resend - transactional email;
Vercel Analytics and Mixpanel - product analytics;
AI model providers used during generation: OpenAI, Google, Suno, ElevenLabs, Freepik / Magnific (Kling) and MiniMax (Hailuo).

The prompts and assets you submit are sent to these AI providers only to produce your video. We do not use your private content to train our own models.

5. International data transfers

Some of these providers are located outside the European Economic Area (notably the United States). When personal data is transferred outside the EEA, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Public content

Videos you choose to publish to the community gallery - together with their “recipe” (style, settings and the lyrics/text, shown under your chosen username) - become publicly visible, including to people without an account. You can unpublish a video at any time from its page.

7. Data retention

We keep your account and generated content while your account is active. You can delete a video (and all of its assets) at any time. If you ask us to delete your account, we erase your personal data except what we must keep for legal, accounting or fraud-prevention reasons (e.g. invoices, kept for the legally required period).

8. Security

We use access controls, encryption in transit, row-level security on our database and signed, time-limited URLs for your files. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data and will notify you and the competent authority of a personal-data breach where the law requires it.

9. Your rights

Under the GDPR (and similar laws), you can access, rectify, erase, port, restrict or object to the processing of your personal data, and withdraw consent at any time. You can also set guidelines for the handling of your data after your death. Email hello@tubetube.io and we will respond within the legal timeframe (one month under the GDPR). If you are in France, you may lodge a complaint with the CNIL (cnil.fr); otherwise, with your local data-protection authority.

10. Cookies

We use cookies and similar technologies that are necessary to keep you signed in and to operate the service, plus the analytics described above. Non-essential analytics are used in accordance with applicable consent requirements. We do not run third-party advertising cookies. You can control cookies through your browser settings.

11. Children

TubeTube is intended for creators aged 18 and over. It is not directed at children, and we do not knowingly collect personal data from children.

12. Changes

We may update this policy; the date above reflects the latest version. We will communicate material changes by email or in the app.

13. Contact

AM2H Productions - hello@tubetube.io - 5 rue de la Moselle, 75019 Paris, France.