Privacy Policy

This policy explains how PLETFREE CREATIONS LTD("TubeGhost", "we", "us") collects, uses and shares personal data when you use the TubeGhost desktop app, web app, API and this website. We are the data controller for the account and billing data described here.

1. Data we collect

Data you give us

• Account data: name, email address, password (stored hashed by our authentication provider), or your Google account basics if you sign in with Google.
• Workspace data: workspace name, members, roles and invitations, including the email addresses of people you invite.
• Billing data: plan, billing address and payment details. Card details are entered directly with Stripe and never reach our servers.
• Support communications: anything you send us by email or chat.

Data you store in the Service

• Browser profiles and their settings, fingerprints, notes, groups and tags.
• Proxy details, including credentials, and phone-number assignments.
• 2FA secrets, cookies and browser sessions, if you choose to store or sync them. Synced sessions are encrypted before upload.
• Automations, channel details and channel statistics you add.

This content may itself contain personal data, for example logins for accounts you operate. For that content you decide what is stored, and we process it on your instructions to provide the Service.

Data collected automatically

• Device and usage data: app version, operating system, device name, connected devices, sign-in times, IP address, and logs of actions in your workspace's activity log.
• Profile status: which profiles are open and on which device, so that a profile is never open in two places at once.
• Network checks: when a profile launches, we check the proxy's outgoing IP address and look up its location to set timezone, language and geolocation.
• Website: this marketing site stores your light/dark theme choice in your browser. It does not use advertising cookies.

2. What we don't collect

We do not record the pages you browse inside a profile, and we do not sell personal data. When you connect an AI client through our MCP server or Claude Bridge, tools return workspace metadata such as profile names, groups, tags and proxy labels. They are designed not to return credentials, cookies or fingerprints.

3. How we use data

• To provide the Service (performance of our contract with you): run your account and workspaces, launch and sync profiles, provision proxies and phone numbers, and process payments.
• To keep it secure (legitimate interests): prevent fraud and abuse, enforce our Terms and Acceptable Use Policy, rate-limit requests, and investigate incidents.
• To communicate (contract and legitimate interests): send invitations, receipts, security notices and important changes to the Service.
• To improve the Service (legitimate interests): diagnose errors and understand which features are used.
• To meet legal obligations: tax, accounting, and lawful requests from authorities.

4. AI features

When you use the in-app assistant, your messages and relevant context (such as the current page and a list of your profile names and whether they are running) are sent to the AI model provider you select, either Anthropic or OpenRouter, to generate a reply. If you connect your own AI client (for example Claude) through our MCP server or Claude Bridge, data returned by our tools is handled by that client's provider under its own privacy terms.

5. Sharing and sub-processors

We share personal data only with service providers that help us run TubeGhost:

Data also goes to third parties you choose to connect yourself: webhook URLs you configure (for example Slack or Discord), a captcha-solving service if you add its key to an automation, and AI clients you authorise. We may also disclose data if the law requires it, to protect our rights or other people's safety, or to a successor in a merger or acquisition.

6. International transfers

Our providers may process data outside your country, including in the United States. Where required, we rely on safeguards such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum.

7. Retention

• Account and workspace data: kept while your account is active, and deleted within a reasonable period after you delete your account or workspace.
• Short-lived command queues, results and sign-in state: expire automatically, from minutes up to 30 days.
• Activity logs: kept for the period your plan includes.
• Billing records: kept as long as tax and accounting law requires.

8. Security

We use encryption in transit, row-level access controls that limit every request to your own workspace, permission checks, and encryption of synced browser sessions. No system is perfectly secure. You are responsible for protecting your password, devices, API keys and AI-client authorisations.

9. Your rights

Depending on where you live, including under the UK GDPR, EU GDPR and US state privacy laws, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. Email privacy@tubeghost.comto make a request. We will respond within the time the law requires. You may also complain to your local data protection authority. In the UK, that is the Information Commissioner's Office (ico.org.uk).

If you are a member of someone else's workspace, that workspace's owner controls the workspace content. We may refer content requests to them.

10. Children

TubeGhost is not intended for anyone under 18, and we do not knowingly collect their data.

11. Changes

We may update this policy. If a change is material, we will notify you by email or in the app. The effective date at the top shows when it last changed.

12. Contact

PLETFREE CREATIONS LTD, [REGISTERED ADDRESS]. Email: privacy@tubeghost.com.