SubstackToYT ("we", "us", or "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.
1. Data We Collect
Account Information
- Full name and email address (via Google OAuth sign-in)
- Google account identifier (sub claim from Google's OpenID Connect)
- Phone number (collected during account verification via SMS)
Payment Information
- Subscription plan and billing status
- Stripe customer ID and subscription ID
- We do not store credit card numbers or full payment details — all payment processing is handled securely by Stripe
Usage Data
- Videos you create: title, format, job ID, creation date, and status
- YouTube channel connection tokens (OAuth access and refresh tokens, stored securely in our database)
- Video analytics fetched from the YouTube Data API (view counts, like counts)
Technical Data
- Session cookies used strictly for authentication (see Section 7)
- Server-side logs (IP address, request timestamps) retained for up to 30 days for security purposes
2. How We Use Your Data
- To provide the service: generating scripts, voiceovers, and videos from Substack articles; uploading content to your YouTube channel on your behalf
- To communicate with you: sending email notifications when your video is ready, and transactional account messages
- To prevent abuse: phone verification is used to deter mass account creation and API abuse
- To process payments: managing your subscription via Stripe
- To improve the service: aggregate, anonymised usage statistics only — no individual profiling
3. We Never Sell Your Data
We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes, ever.
4. Third-Party Services
To deliver the service we use the following third-party providers, each subject to their own privacy policies:
Article text you submit is sent to Anthropic for script generation and to fal.ai for image generation. We do not transmit your personal account details to these services.
5. Data Retention
- Account data is retained while your account is active
- Generated video files are stored on our servers; you may discard them at any time from your dashboard
- Upon account deletion, all personal data is removed within 30 days
- Anonymised aggregate statistics may be retained indefinitely
6. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by emailing us at justonia2@gmail.com. We will respond within 30 days. You may also delete your account directly from your Account settings page.
7. Cookies
We use a single session cookie to keep you logged in after signing in with Google. This cookie is strictly necessary for the service to function and does not track you across other websites. We do not use advertising, analytics, or third-party tracking cookies.
8. Children's Privacy
SubstackToYT is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify registered users by email of any material changes. The "last updated" date at the top of this page will always reflect the most recent revision.
10. Contact
Questions or concerns? Email us at justonia2@gmail.com.