Privacy Policy

What we store

Your account details (name, email, hashed password), your campaigns and leads, emails you send through the service, and — if you connect a mailbox — your SMTP credentials, which are encrypted at rest with AES-256 and used only to send emails you initiate.

Cookies and storage on your device

TubeLeads stores information on your device, and this is what it is. A session cookie is set when you sign in, so that the service knows it is you on each request; it is strictly necessary, and without it you cannot stay signed in. Your light or dark theme choice is kept in your browser's local storage so the page does not flash the wrong colours on load. If you start a checkout, Stripe sets its own cookies on Stripe's pages for fraud prevention, governed by Stripe's privacy policy.

We do not run advertising, analytics, tracking pixels or third-party marketing tags, and no third party serves content or advertisements inside TubeLeads. Nothing we place on your device is used to profile you or to follow you across other sites. Clearing your browser storage signs you out and resets the theme; nothing else is affected.

Lead data

Lead records are built from information creators have made publicly available on their YouTube channels (channel name, the statistics YouTube publishes, and the public business email). If you are a creator and want your details removed, use our removal form — it runs immediately.

YouTube API Services

TubeLeads uses YouTube API Services to find creator channels. By using this part of the service you are also agreeing to the YouTube Terms of Service, and the Google Privacy Policy applies to the data Google handles.

What we collect from YouTube. Only public channel information: the channel ID, title, description, the subscriber count, lifetime view count and number of uploads as YouTube reports them, the country a creator has declared, and the business enquiry email a creator has chosen to publish on their own channel. We never request private or unlisted data, we never ask a viewer or creator to sign in with their Google Account for this, and we never access anything a signed-out visitor could not see on youtube.com. Because of that, everything we hold from YouTube is Non-Authorized Data: we hold no YouTube authorisation tokens for anyone.

We do not invent figures. Every YouTube number shown in TubeLeadsis one the API returned, displayed as it was returned. We do not calculate scores, ratings, averages or estimates from it, and we do not substitute our own figures for YouTube's.

How we use and share it.It is used to match channels against a customer's campaign brief and to show that customer who they might approach about a sponsorship. We do not sell it, and we do not publish it. Channel information is stored once and served to customers from our own database rather than being re-fetched, which keeps our use of the API to a minimum. Our AI drafting provider is sent the channel name, the niche and your campaign brief in order to write an email; it is not sent YouTube statistics, and it is never sent your credentials.

How long we keep it.Stored YouTube data is re-read from the YouTube API at least every 30 days. Anything that cannot be refreshed within 30 days — because the channel has been deleted, made private, or is no longer returned by the API — is deleted instead. That applies to the shared channel database, to cached search results, and to the copy attached to each customer's leads, each of which carries its own clock. Data you export to CSV leaves our control, so the same 30-day obligation passes to you; this is set out in the Terms of Service.

Creators: how to be removed. Use the channel removal form. It deletes everything we hold about your channel, removes every copy held by our customers, and puts you on a permanent do-not-contact list, in the same request. There is no queue and you do not need an account. Deleting the data we hold has no effect on anything stored by YouTube — your channel, your statistics and your published contact details are unchanged, and only YouTube can change those.

Revoking access. TubeLeads does not use Google account authorisation to read YouTube data, so there is nothing to revoke for that. If you have connected a Google mailbox to send email, you can revoke that at any time from your Google security settings, or by disconnecting the mailbox in your TubeLeads settings.

Payments

Card details never touch our servers — payments are processed by Stripe. We store only your Stripe customer reference and subscription status.

Third parties

We use Stripe (billing), our hosting provider (infrastructure), an email delivery provider, and an AI provider for email drafting. We do not sell your data, and no third party serves advertising or content through TubeLeads.

Your rights

You can export your leads at any time, disconnect your mailbox at any time, and delete your account and everything under it yourself from Settings → Account. Deletion is immediate and cannot be undone; it cancels any active subscription and removes your campaigns, leads, email history and stored credentials. It has no effect on anything held by YouTube. If you would rather we did it for you, email [email protected] and it will be actioned within 7 days.

Questions and complaints

Anything about how TubeLeads handles data, including questions or complaints about these practices, goes to [email protected].