Privacy Policy

This Privacy Policy explains how TubeLeader (“TubeLeader”, “we”, “us” or “our”) collects, uses, discloses, retains and protects information when you visit our website at tubeleader.com, create an account, purchase a plan, contact support, or install and use the TubeLeader browser extension for Google Chrome and other Chromium-based browsers (together, the “Service”). It also describes the choices and rights you have over your information. Please read it together with our Terms of Service, Cookie Policy, Refund Policy and the dedicated Extension Privacy Policy. By using the Service, you acknowledge the practices described here.

1. Scope and who we are

TubeLeader is an independent creator-research service. We help people study public YouTube channels, videos and creator trends through rankings, search tools, calculators, saved research and an optional Chrome extension that layers research information onto supported YouTube pages. We are not affiliated with, sponsored by, endorsed by or acting on behalf of YouTube, Google LLC, or any other platform; their names and marks belong to their respective owners.

TubeLeader is the data controller for the personal information processed through the Service. This policy applies to the website, the extension, our email and support communications, and our billing and account systems. It does not apply to third-party websites, platforms or services that we link to or integrate with, each of which has its own privacy practices. Where a specific product component has additional detail — most importantly the browser extension — a dedicated notice supplements this policy.

2. Information we collect

We collect information you provide directly, information generated automatically as you use the Service, and information from a small number of third parties that help us run it.

2.1 Information you give us

Account details — your name, email address, and (optionally) phone number, country, city and postal address that you add to your profile. You may create an account on the website or connect the extension through the website.
Authentication data — a password (stored only as a secure one-way hash), email-verification codes, and, if you choose Google sign-in, the basic profile and email that Google shares with us for that purpose.
Research inputs — the public channel handles, channel IDs, video IDs, URLs, keywords and search terms you submit so we can produce the report or ranking you asked for, plus any items you save to favorites or research history.
Payment information — when you buy a plan, our payment processors collect and process your payment credentials directly. We receive transaction metadata such as an order or subscription identifier, amount, currency, status, plan and region; we do not receive or store your full card number or bank credentials.
Support communications — the contents of messages you send us through the contact form, email or other support channels, and any attachments or account context you include.

2.2 Information collected automatically

Device and connection data — IP address, general browser and device type, operating-system family, language, and referring or exit pages.
Approximate location — a coarse country and (where available) city derived from your IP address, used to localize rankings, currency and content. We do not collect precise GPS location.
Usage and log data — pages and features used, request timestamps, feature-usage counters used to enforce plan limits, error and diagnostic logs, and security events such as sign-in attempts.
Cookies and similar technologies — session and security cookies and local browser storage, described in Section 8 and in our Cookie Policy.

2.3 Information from third parties

Public platform data — publicly available YouTube data (via YouTube API Services and public pages) about the channels and videos you research. This is public information about creators and content, not private analytics.
Payment and identity signals — confirmation of payment status and basic fraud/verification signals from our payment processors.
Sign-in providers — if you use Google sign-in, the limited profile information Google returns.

We ask that you do not send us passwords, full card numbers, private API keys, government identifiers or other sensitive personal information through support channels, because those channels are not intended to store such data.

2.4 Categories of personal information (notice at collection)

For transparency, and as a notice at collection under United States state privacy laws, the categories of personal information we may collect are: identifiers (such as name, email, phone, account identifier, IP address and a random extension installation identifier); customer records and commercial information (plan, purchase and transaction metadata); internet or network activity (usage, log and diagnostic data and your interactions with the Service); coarse geolocation (country and city derived from IP); professional or research information (the public channels, videos and keywords you choose to research and save); and inferences drawn to operate features such as rankings and estimates. We collect each category for the business and operational purposes described in Section 3, retain it as described in Section 10, share it only as described in Section 5, and do not sell it.

3. How we use your information

We use the information above to:

provide, operate and maintain the website, the extension and the research features you request;
create and secure your account, authenticate you, and verify your email;
process purchases, activate and renew plans, apply free trials or credits, and enforce plan entitlements and usage limits;
localize rankings, currency and content by region;
produce reports, estimates and AI-assisted observations from public data you submit;
maintain security, prevent fraud and abuse, enforce our Terms, and protect our users, the Service and third parties;
respond to your support requests and send you service, transactional and security messages;
understand how the Service is used so we can fix problems and improve reliability and features;
comply with legal obligations and exercise or defend legal claims; and
where you have opted in or where permitted, send you product updates and, if we run advertising campaigns, measure their effectiveness (see Section 9).

We do not sell your personal information, and we do not use the content of your research inputs to build advertising profiles about you.

3.1 Automated processing and AI-assisted analysis

Some features produce results using automated calculations, heuristics and AI models — for example outlier scores, views-per-hour and revenue ranges, demographic estimates, sponsorship classifications, monetization signals and channel analyses. These outputs are directional research aids generated from public information and the inputs you provide; they are estimates and observations, not verified private facts, and they do not make legal or similarly significant decisions about you. When you request an AI-assisted analysis, the necessary public fields and prompt context are processed by the configured AI provider solely to return that analysis; we ask that you never include secrets, credentials or sensitive personal data in prompts or submitted page content. You remain responsible for reviewing and how you use these outputs.

4. Legal bases for processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on one or more of the following legal bases: performance of a contract (to provide the Service and your plan); legitimate interests (to secure and improve the Service, prevent abuse, and run our business in a proportionate way that does not override your rights); consent (for optional features such as extension presence reporting, non-essential cookies and marketing, which you can withdraw at any time); and legal obligation (to meet tax, accounting, security and other legal requirements). Where we rely on consent, withdrawing it does not affect processing already carried out.

We share personal information only as described here. We do not sell it, and we do not rent or trade it.

Service providers (processors) — companies that host our infrastructure, deliver email, process payments, provide YouTube data access and provide the configured AI model, acting on our instructions to perform a function for us. This includes, for example, our hosting provider (Hostinger), payment processors such as PayPal (and any administrator-configured card, UPI or cryptocurrency provider), our email/SMTP provider, Google/YouTube for public data and sign-in, the configured AI provider (for example, OpenAI) for AI-assisted analysis and content generation, and, where the administrator enables it, a cloud object-storage and content-delivery provider (for example, Cloudflare R2) used to store and serve AI-generated images.
Legal and safety — regulators, courts, law-enforcement or other parties when we believe in good faith that disclosure is required by law or is reasonably necessary to protect the rights, property or safety of our users, the Service or the public, or to detect, prevent or address fraud, security or technical issues.
Business transfers — in connection with a merger, acquisition, financing, reorganization or sale of assets, information may be transferred subject to this policy and applicable law.
With your direction — where you ask us to share information or make it public.

Providers may process information in countries other than your own; see Section 15. We require providers to protect information consistent with this policy and applicable law.

5.1 Processing roles and purposes (data-processing information)

For the processing described here, TubeLeader acts as the controller and determines the purposes and means of processing; our service providers act as processors that handle data only on our instructions to perform a specific function (hosting, payment, email, YouTube public data and AI-assisted analysis). We process the data categories in Section 2 for the purposes in Section 3, relying on the legal bases in Section 4, sharing only as in this Section 5, transferring internationally only with the safeguards in Section 15, and retaining data as in Section 10. You can exercise the individual rights in Sections 12–14 at any time. This subsection is the plain-language data-processing summary for the Service.

6. YouTube API Services

Parts of the Service obtain public information using YouTube API Services. By using those parts of the Service, you also agree to the YouTube Terms of Service. Google’s handling of data is described in the Google Privacy Policy. We access only public data about the channels and videos you research; we do not request access to another creator’s private YouTube Studio analytics. Where the Service temporarily stores YouTube API data, it is cached only as needed to provide the research feature and refreshed or removed in line with YouTube API Services policies. You can control Google/YouTube data associated with your Google account, and revoke third-party access, through Google’s security settings at myaccount.google.com/permissions.

7. The TubeLeader Chrome extension

The extension is designed to run on supported youtube.com pages and to communicate with tubeleader.com. It is not designed to collect general browsing activity on unrelated sites. To provide its interface, it reads public information already present on supported YouTube pages, such as channel and video identifiers, titles, view and subscriber counts, dates, descriptions, links and visible search-result fields.

When you use a server-backed feature — AI analysis, revenue modeling, sponsorship analysis or channel analytics — the public fields required for that request can be sent to our server, and AI-assisted requests can be processed by the configured AI provider. The extension stores your login token, plan settings, consent choice, a random installation identifier, interface state and local research caches in Chrome extension storage on your device. The server stores a one-way hash of the installation identifier for login security, plan enforcement and status; it is not a hardware fingerprint.

Only after you affirmatively agree on the dedicated TubeLeader Extension sign-in/connect page do we record, against your signed-in account, that the installation is active, its version and enabled state, and daily feature-key success, failure, quota-denial and entitlement-denial totals for server-backed features. This presence reporting does not include YouTube URLs, page titles, videos watched, search terms, referrers, page clicks, mouse or keyboard activity, scroll activity, battery level, ad-blocker status, screen resolution, device model or general browsing history. The extension does not read passwords or payment details, and does not sell or share your data for advertising. The full detail is in the Extension Privacy Policy.

8. Cookies and local storage

The website uses strictly necessary cookies for login sessions, security (including CSRF protection) and account continuity, and browser storage to remember preferences such as your light or dark theme. The extension uses Chrome extension storage rather than website cookies. Blocking strictly necessary cookies can prevent parts of the Service from working. For details, categories and controls — including any optional analytics or advertising technologies — see our Cookie Policy.

9. Advertising, marketing and measurement

We may promote TubeLeader through advertising and marketing on third-party platforms, including Google Ads, Meta (Facebook and Instagram), Microsoft/Bing Ads, X (Twitter) and Telegram. If and when these are enabled, those platforms may set cookies or use pixels, tags or SDKs on our website to measure conversions, understand campaign performance and, where permitted, show you or similar audiences relevant ads (including retargeting). Each platform processes data under its own privacy policy and controls, for example: the Google Privacy Policy, the Meta Privacy Policy, the Microsoft Privacy Statement, the X Privacy Policy and the Telegram Privacy Policy. Where required by law, we enable these technologies only after appropriate disclosure and consent, and you can adjust cookie and ad-personalization settings through your browser and through each platform’s ad controls. Sending you marketing email, if any, is done only where permitted, and every marketing message includes a way to unsubscribe. We never use the substance of your research inputs to target advertising to you.

10. Data retention

We keep personal information only as long as needed for the purposes described in this policy, and then delete or anonymize it, unless a longer period is required for legal, tax, accounting, security or dispute-resolution reasons. In practice: account and profile data are kept while your account is active; transaction records are kept for the period required by tax and accounting law; security and log data are kept for a limited period appropriate to their purpose; cached public research data is kept only as needed to provide the feature and is refreshed or expired; AI-generated content you create (such as titles and thumbnails saved to your history and favorites, including any generated images held with our cloud-storage provider) is retained only for a limited, administrator-configured window and is then deleted automatically — you can export this content at any time before it expires; and extension consent history and daily aggregate feature outcomes are retained for up to 12 months for operational, security, plan-enforcement and product-reliability purposes, unless a longer period is legally required. When you delete your account, we delete or anonymize associated personal data except records we must retain by law or to resolve disputes and enforce agreements.

11. How we protect information

We use reasonable administrative, technical and organizational safeguards designed to protect information against unauthorized access, loss, misuse or alteration — including encryption in transit, hashed passwords, access controls, rate limiting and monitoring. No website, extension or internet transmission can be guaranteed to be perfectly secure, so we cannot promise absolute security. Protect your account by using a strong, unique password, enabling any available additional verification, keeping your browser profile secure, and telling us promptly if you suspect unauthorized access.

12. Your privacy rights and choices

Depending on where you live, you may have some or all of the following rights: to access the personal information we hold about you; to correct inaccurate information; to delete your information; to port a copy in a portable format; to restrict or object to certain processing; and to withdraw consent where processing is based on consent. You can exercise many of these directly — updating your profile, managing extension consent and login from the extension and account pages, unsubscribing from any marketing, or deleting your account from your profile settings. For other requests, contact us at support@tubeleader.com. We may need to verify your identity and the account relationship before acting, and we will respond within the time required by applicable law. You will not be discriminated against for exercising a privacy right. If you believe we have not handled your data properly, you may lodge a complaint with your local data-protection authority.

13. Do Not Track

Some browsers offer a “Do Not Track” signal. There is no common industry standard for how services must respond, so we do not currently respond to Do Not Track signals differently. You can still control cookies and tracking as described in Sections 8 and 9 and in our Cookie Policy.

14. United States state privacy rights

If you are a resident of California, Virginia, Colorado, Connecticut, Utah or another US state with a comprehensive privacy law, you may have specific rights, including the right to know or access the categories and specific pieces of personal information collected, the right to correct or delete it, the right to portability, and the right to opt out of “sale” or “sharing” of personal information or of targeted advertising and certain profiling. We do not sell personal information and do not share it for cross-context behavioral advertising in exchange for money. California residents also have the right not to receive discriminatory treatment for exercising these rights, and may use an authorized agent. To exercise any of these rights, contact us at support@tubeleader.com; we will verify your request as required and respond within the statutory timeframe. If we ever deny a request, you may appeal by replying to our decision.

15. International users and data transfers

TubeLeader can be used from many countries, and our providers may process information in countries other than yours, including countries whose data-protection laws differ from those where you live. Where required, we rely on an appropriate legal transfer mechanism (such as the European Commission’s Standard Contractual Clauses or an equivalent safeguard) and appropriate contractual protections. By using the Service, you understand that your information may be transferred to and processed in those countries for the purposes described in this policy.

16. Children

The Service is intended for a general, professional creator-research audience and is not directed to children under 13 (or the minimum age of digital consent in your country, which may be higher). We do not knowingly collect personal information from children below that age. If you believe a child has provided us personal information, contact us and we will take reasonable steps to delete it.

17. Third-party links and services

The Service can contain links to third-party websites, platforms and services, and can rely on third-party providers. We are not responsible for the privacy practices or content of those third parties. Review their policies before providing information to them.

18. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the Service, our practices, or legal requirements. When we make a material change, we will update the “Last updated” date above and, where required, provide additional notice. Your continued use of the Service after an update takes effect means you accept the revised policy.

19. How to contact us

For any privacy question or request, or to exercise a right described above, contact us at support@tubeleader.com or through our Contact page. Please include enough non-sensitive account context (such as the email on your account and, for a billing question, the transaction reference) so we can locate your record — but never send your password or full payment-card details. TubeLeader is the data controller responsible for the processing described here.