Privacy policy
Service: YoubAi (youbai.app) · Contact: hello@youbai.app · Last updated: 6 September 2026
1. Who we are
YoubAi is a service for creating vertical videos using artificial intelligence (scripts, images, animation, voices, music and editing) and publishing them to social media accounts that you choose to connect, through the platforms' official APIs. The data controller is YoubAi, which can be contacted at hello@youbai.app.
2. Data we process
- Account: email address, name or brand, password (stored as a bcrypt hash, never in plain text), language, plan and registration date.
- Content you create: briefs, scripts, voice-over text, generated images, animations and videos; files you upload (songs and videos to clone); avatars (description, portrait and voice); links to public videos that you submit for cloning.
- Social media: the connected account's public identifier, display name and image, and statistics returned by the platforms (views, likes, comments and followers). OAuth access tokens are held by our publishing provider (see section 4); we never collect a social media account's password.
- Assistant: your conversations with the YoubAi assistant and a short memory of the lasting preferences you share with it, specific to your account.
- Technical data: error logs (reference, account, page and message), IP address for protection against abuse (sign-in attempts and password reset requests), and timestamps.
- Cookie: a single session cookie (
yb_session), strictly necessary for signing in and valid for 30 days, with no advertising trackers or third-party analytics.
3. Purposes and legal bases
- Providing the service you request: generation, editing, publishing and statistics (performance of the contract).
- Securing the service and preventing abuse (legitimate interest).
- Sending emails necessary for your account: password resets and service alerts (performance of the contract). No marketing emails without your consent.
We do not use your data to train AI models, and we do not sell it.
4. Processors and recipients
To operate, YoubAi sends certain data to technical service providers, each solely for its respective function:
- xAI (United States) — artificial intelligence models: your briefs, scripts, text, image and video descriptions, audio excerpts for transcription and reference images are sent to xAI to generate content.
- Upload-Post (European Union) — social media connections and publishing: holds the OAuth tokens for your TikTok, YouTube and Instagram accounts, publishes your videos and retrieves your statistics.
- Hetzner (Germany) — graphics processing server: speech transcription and video resolution enhancement, with files deleted after processing; encrypted off-site copies of backups.
- Contabo (Germany) — hosting of the service, database and email server.
- Social media platforms (TikTok, YouTube/Google and Instagram/Meta) — receive the videos, titles and captions you publish, under their own policies.
No data resale or brokerage. Transfers outside the European Union (xAI) are based on standard contractual clauses.
5. Retention and deletion
- Final videos and projects: retained for as long as your account exists, or until you delete them (files are deleted immediately; an anonymous accounting record of the number of videos produced is retained for the monthly quota).
- Intermediate working files: deleted no later than 30 days after a project ends.
- Error logs: 12 months. Anti-abuse counters (IP address): 1 hour.
- Backups: the database is retained for 14 days on the primary server, code for 7 days, and the off-site copy for 90 days. After these periods, the corresponding archives are destroyed.
- Account deletion: available at any time under Configuration → Danger zone. Your videos, working files, avatars, clones, scheduled posts, AI profiles and profile with our publishing provider are deleted, followed by your account. Data contained in backups disappears as those backups are rotated, no later than 90 days after deletion.
- You can revoke access to a social media account at any time from YoubAi (Publishing → Manage) or from the platform's settings.
6. Security
HTTPS-encrypted communications, hashed passwords, timestamped sessions invalidated when passwords change, protection against brute-force attacks, keys and tokens stored outside the code with restricted access, monitoring and a central incident log, and daily backups with a restoration exercise.
7. Your rights
Access, rectification, erasure, portability, restriction and objection: email hello@youbai.app, or use account deletion directly in the application. You can also lodge a complaint with the CNIL (www.cnil.fr).
8. Contact
hello@youbai.app