Privacy Policy

1. Data Controller

TubeArchiver is operated by Exception d.o.o., based in Croatia. For any questions regarding this privacy policy or your personal data, you can contact us at hellonull@tubearchivernull.com.

2. Information We Collect

We collect information you provide directly to us when you create an account, make a purchase, or contact us for support. This includes your name and email address. Payment information (credit card details) is processed directly by our payment provider, Stripe, and is not stored on our servers. We also collect usage data such as download history and account activity to provide and improve our services.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Contractual necessity: To provide our service, manage your account, and process your purchases.
• Legitimate interest: To improve our services, prevent fraud, and ensure the security of our platform.
• Consent: For optional analytics cookies and our email newsletter. You can withdraw consent at any time.

4. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, process transactions, send you technical notices and support messages, and respond to your comments and questions.

5. Information Sharing and Third-Party Processors

We do not sell, trade, or otherwise transfer your personal information to third parties. We share data only with the following trusted service providers who process data on our behalf:

• Stripe — payment processing. Stripe processes your payment details directly and is certified as a PCI Level 1 Service Provider. See Stripe’s Privacy Policy.
• Google Analytics — website analytics (only when you consent via our cookie banner). See Google’s Privacy Policy.

6. International Data Transfers

Our service providers (Stripe and Google) may process your data outside the European Economic Area (EEA). These transfers are safeguarded by Standard Contractual Clauses approved by the European Commission or other appropriate transfer mechanisms in accordance with GDPR requirements.

7. Cookies

We use the following types of cookies:

• Essential cookies: Required for the service to function (session management, authentication, CSRF protection). These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with our website (Google Analytics). These are only set when you consent via our cookie banner.

You can manage your cookie preferences at any time through the cookie banner or your browser settings.

8. Data Security

We implement appropriate technical and organizational measures to protect the security of your personal information, including encryption in transit (TLS) and at rest. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When you delete your account, we remove your personal data within 30 days, except where retention is required by law.

10. Your Rights

Under the GDPR and applicable data protection laws, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data (“right to be forgotten”).
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at the email address above. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

11. Children’s Privacy

TubeArchiver is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date above.

13. Contact

If you have any questions about this Privacy Policy, please contact us at hellonull@tubearchivernull.com.