Privacy Policy

Last updated: October 2026

1. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the RankTube platform, when you express an interest in obtaining information about us or our products and services, when you participate in activities on the website such as subscribing to a plan, connecting your YouTube channel, submitting support requests, or otherwise when you contact us through any channel. The personal information that we collect depends on the context of your interactions with us and the website, the choices you make, and the products and features you use, and it may include the following categories in detail: your full name and display name; email address and phone number where provided; username and encrypted password credentials; billing address and payment-related details processed securely through our payment processors; records of your subscription plans, invoices, credit usage, and transaction history; the content of your communications with our support team; and other similar information that you choose to share. All personal information that you provide to us must be true, complete, and accurate, and you must notify us promptly of any changes to such personal information so that our records, billing, and communications remain correct. We do not knowingly collect information directly from children, and if we learn that we have done so inadvertently, we will delete it without delay.

2. YouTube and Google Data

RankTube utilizes the YouTube Data API and, where you have granted the necessary scopes, the YouTube Analytics API to fetch and analyze your channel's performance, videos, playlists, and SEO metadata in order to power our dashboards, audits, rank tracking, and AI recommendations. By connecting your YouTube account through Google OAuth, you grant us permission to securely access and store your channel data, video statistics, and read-only analytics strictly for the purpose of operating the features you use, and we access nothing beyond the scopes you explicitly approve during the consent screen. We strictly adhere to the Google API Services User Data Policy, including its Limited Use requirements, which means your Google user data is never sold, never shared with advertisers or data brokers, never used for unrelated advertising or profiling, and human access to it is limited to what is necessary to maintain the service or comply with the law. You can revoke our access to your YouTube account at any time via your Google Security settings page, after which we will stop fetching new data, although previously synced aggregates required for billing records and fraud prevention may be retained as described below. We retain this data only for as long as your account remains active and will permanently delete your channel connection data upon account closure or upon your explicit written request, subject to legal retention obligations for financial and security records.

3. How We Use Your Information

We use the personal information collected via our website for a wide variety of legitimate business purposes, and we process it in reliance on our legitimate business interests, in order to enter into or perform our contract with you, with your consent where required, and for compliance with our legal obligations. In practical terms, we use the information we collect or receive for the following purposes, among others: to facilitate account creation, authentication, and the logon process, including email verification and password resets; to operate, maintain, and improve every feature of the platform, from keyword research and competitor tracking to AI generation and reporting; to send administrative information to you, such as product announcements, service and feature updates, security alerts, and information about changes to our terms, conditions, and policies; to fulfill and manage your orders, subscription renewals, payments, invoices, and billing disputes made through the website, including the enforcement of our strict no-refund policy and the investigation of chargebacks using access logs and usage history as evidence; to provide customer support, respond to your inquiries, troubleshoot technical issues, and gather feedback about your experience; to monitor usage patterns, enforce rate limits and fair-use quotas, and to protect our services as part of our continuous efforts to keep the website safe and secure, including fraud monitoring, abuse detection, and prevention of unauthorized access. We do not use your private channel data or personal information to train public AI models, and we do not sell your information to any third party under any circumstances.

4. Data Security and Encryption

We have implemented appropriate and continuously reviewed technical and organizational security measures designed to protect the security of any personal information we process against unauthorized access, alteration, disclosure, or destruction. All sensitive data, including Google OAuth access and refresh tokens, passwords, API keys, PINs, and billing-related information, is encrypted at rest using enterprise-grade AES-256-GCM encryption with unique initialization vectors, while all data in transit between your browser, our servers, and third-party APIs is protected using modern TLS/SSL protocols with strict transport security. Our infrastructure follows the principle of least privilege, production secrets are never committed to source control, administrative access is limited and logged, and our application enforces secure session handling, rate limiting, fraud monitoring, and a web application firewall against common attack classes. However, despite our safeguards and our best efforts to secure your information, no electronic transmission over the internet or information storage technology can ever be guaranteed to be one hundred percent secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information, and you acknowledge that you provide your information at your own risk while we commit to notifying you without undue delay of any breach that affects your personal data.

5. Cookies, Tracking, and Third-Party Processors

We use essential cookies and similar technologies that are strictly necessary for the website to function, such as session cookies that keep you logged in, security cookies that protect against forgery and abuse, and preference cookies that remember your theme and workspace settings, and these cannot be disabled without breaking core functionality. With your consent where required by law, we may also use analytics cookies to understand aggregate usage patterns so we can improve performance and prioritize features, but we do not operate cross-site advertising trackers and we do not sell cookie-derived data. Our services necessarily rely on a small number of carefully chosen third-party processors who handle data only on our instructions and under contractual confidentiality obligations, including our payment processors for billing, our email delivery providers for transactional messages, and Google itself for OAuth and YouTube data, and each of these parties maintains its own privacy practices which we encourage you to review. We never authorize these processors to use your data for their own independent marketing purposes.

6. Data Retention, Your Privacy Rights, and Contact

We retain your personal information only for as long as is reasonably necessary to fulfill the purposes for which it was collected, to operate your account, to comply with legal, tax, and accounting obligations, and to resolve disputes and enforce our agreements, including our no-refund and anti-chargeback provisions, after which it is securely deleted or anonymized. Account data is kept while your account is active; channel connection tokens are deleted when you disconnect or close your account; billing and transaction records are retained for the periods required by financial regulations; and security and fraud-prevention logs are kept for a limited period to protect the platform. Depending on your location, you may have certain rights under applicable data protection laws, including the right to request access to and obtain a copy of your personal information, to request rectification of inaccurate data or erasure of data that is no longer needed, to restrict or object to certain processing, and where applicable to receive your data in a portable format. To exercise any of these rights, or to ask any question about this policy, please contact us through our in-app support center or help pages with sufficient detail to identify your account, and we will consider and act upon every request in accordance with applicable law, verifying your identity first so that your data is never disclosed to the wrong person. If we ever rely on your consent for a specific processing activity, you have the absolute right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.