Privacy Policy

FinStory GmbH ("Company", "we", "us", or "our") operates TubeReads. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our service.

This policy is designed to comply with the Swiss Federal Act on Data Protection (FADP/DSG), the EU General Data Protection Regulation (GDPR), and other applicable data protection laws.

1. Controller & Contact

The data controller responsible for processing your personal data is:

2. Information We Collect

2.1 Account Information

• Email address
• First and last name (optional)
• Company name (optional)
• Country (optional)
• Language preferences (UI language, report language)
• OAuth provider data (e.g. Google profile name, avatar URL)

2.2 Billing Information

Payment details are processed by our payment provider Stripe (Stripe, Inc.). We do not store credit card numbers or payment credentials on our servers. We receive from Stripe:

• Stripe customer ID and subscription ID
• Subscription status and billing period
• Transaction history (amounts and dates)

2.3 Usage Data

• Channel subscriptions and preferences
• Reports generated and viewed
• Favourite/bookmark activity
• Email delivery status (sent, opened)
• Summary language and depth preferences

2.4 Technical Data

• IP address
• Browser type and version
• Device information
• Pages visited and timestamps

2.5 Content Data

When you submit a YouTube URL for summarisation, we process:

• The YouTube video URL and metadata (title, channel, duration)
• The video transcript (fetched from third-party provider)
• The AI-generated summary report

We do not collect or process the video files themselves.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the TubeReads service
• Generate and deliver AI summary reports
• Send email notifications when subscribed channels publish new content
• Manage your account, preferences, and subscription
• Process payments (via Stripe)
• Improve the quality of our summaries and service
• Respond to support requests
• Comply with legal obligations
• Detect and prevent fraud or abuse

We do NOT:

• Sell your personal data to third parties
• Share your data with advertisers
• Use your data for profiling or automated decision-making that produces legal effects
• Send unsolicited marketing emails (service emails only)

4. Legal Basis for Processing

Under GDPR and the Swiss FADP, we process your data based on the following legal grounds:

5. Data Processors & Third Parties

We use the following third-party services to operate TubeReads:

6. Data Retention

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• TLS/SSL encryption for all data in transit
• Encrypted storage for sensitive data
• Row-level security (RLS) in our database ensuring users can only access their own data
• OAuth-based authentication (no passwords stored by us)
• Access controls limiting who can access production systems
• Regular security updates and monitoring

Despite these measures, no system is 100% secure. If we become aware of a data breach affecting your personal data, we will notify you and the relevant authorities as required by law.

8. Account Deletion

8.1 How to Delete Your Account

You can request account deletion at any time through your Account Settings or by emailing support@tubereads.com.

8.2 What Happens When You Delete

• Your account is immediately deactivated
• Active subscriptions are cancelled (no refunds for prepaid periods)
• Your personal profile data is removed from the active database
• Your channel subscriptions and preferences are deleted
• You are signed out and cannot log back in

8.3 Data Retained After Deletion

• 24 months: Basic account information (email, name) for fraud prevention and legal compliance
• 10 years: Billing records and transaction history (Swiss tax law)
• Indefinite: Public reports you triggered remain in the public library in anonymised form (not linked to your account)

8.4 Right to Earlier Erasure

If you require immediate and complete data erasure before the retention periods above, contact support@tubereads.com. We will process valid erasure requests within 30 days, subject to mandatory legal retention requirements.

9. Your Rights

Under the Swiss FADP and the GDPR (for EU/EEA residents), you have the following rights:

To exercise any of these rights, contact us at support@tubereads.com. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. In Switzerland, the relevant authority is the Federal Data Protection and Information Commissioner (FDPIC). In the EU, you may contact the supervisory authority in your country of residence.

10. International Data Transfers

Several of our data processors are based in the United States (see Section 5). When personal data is transferred outside Switzerland or the EU/EEA, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Providers participating in recognised data protection frameworks
• Swiss-specific adequacy assessments where applicable

By using TubeReads, you acknowledge that your data may be processed in countries with different data protection standards than your country of residence.

11. Cookies

11.1 Essential Cookies Only

TubeReads uses only strictly necessary cookies for:

• Authentication and session management (Supabase auth tokens)
• Security (CSRF protection)
• Language/locale preferences

11.2 No Tracking Cookies

We do not use advertising cookies, third-party tracking cookies, or social media tracking pixels. Our analytics provider (Beam Analytics) is cookie-free and GDPR-compliant.

Because we only use essential cookies, no cookie consent banner is required under EU ePrivacy Directive or Swiss law.

12. Children's Privacy

TubeReads is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at support@tubereads.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. The "Last updated" date at the top of this page indicates when the policy was last revised.

Continued use of TubeReads after changes constitutes acceptance of the updated policy.

14. Contact

For privacy-related questions or requests: