Privacy Policy

This policy explains what DR TUBES (drtubes.com), operated by Pajarosis, collects, why, and the choices you have. DR TUBES is in a private, invitation-only beta.

What we collect

• Account data: your email address, display name, membership status and a log of sign-ins and admin actions.
• YouTube data you authorize: when you connect a channel, we use Google OAuth with read-only access (youtube.readonly and yt-analytics.readonly). We read your channel profile, your videos and their public counts, and YouTube Analytics reports such as views, watch time, traffic sources and audience retention.
• Public research data: public information about channels and search results you look up on the Competitors and Keywords pages.
• What you type into the Optimizer: titles, descriptions and notes you provide.

We use only essential cookies to keep you signed in. We do not use advertising or tracking cookies.

How we use it

• To show your channel's numbers, compare your videos, run Channel Doctor checkups and draft suggestions.
• To run the private beta: invitations, approvals and security.

We never post, upload, edit or delete anything on YouTube. We do not sell your data and do not use it for advertising.

Google API Services

DR TUBES's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. DR TUBES uses YouTube API Services; see the Google Privacy Policy. You can revoke DR TUBES's access at any time on your Google Account permissions page or with Settings → Disconnect in DR TUBES.

AI processing

Some features use an AI service (OpenAI) to word findings and draft suggestions. We send it the computed findings, and for the Optimizer the text you entered. We never send your Google credentials, and any AI output that adds numbers not present in your data is discarded.

Who processes data for us

• Supabase (database and sign-in)
• Vercel (hosting)
• Google (YouTube APIs and sign-in for channel access)
• OpenAI (wording of findings and suggestions)
• Our email provider (sign-in and invitation emails)

Security

Google refresh tokens are encrypted at rest and only used on our servers. Each member can only see their own channel data; this is enforced in the database, not just the interface.

How long we keep it

• Your channel data: while your channel is connected. Disconnecting deletes it.
• Public research data: up to 30 days, then it is deleted or refreshed.
• Your account: until you delete it in Settings, which removes your account and everything stored for it.

Your choices

You can disconnect YouTube, delete your account, or ask us a question at any time by emailing karakans@gmail.com.

Changes

If we change this policy, we will update the date above and tell members about important changes.