Privacy Policy

Data Controller

The data controller responsible for your personal data is:
CodeFX Sp. z o.o.
ul. Zamknieta 10 lok 1.5
30-554 Krakow, Poland
NIP: 6793211981
Email: [email protected]

1. Introduction

FastTube ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at app.fasttube.ai (the "Service").

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

• Email address
• First and last name
• Password (stored in encrypted form)

2.2 Usage Information

We automatically collect certain information about your use of the Service:

• YouTube channels you add to your lists
• Videos you view through our Service
• Your language and notification preferences
• Log data (IP address, browser type, access times)

2.3 Third-Party Data

We access publicly available YouTube data (video titles, descriptions, transcripts, thumbnails). We do not access your personal YouTube account or viewing history.

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Generate AI-powered video summaries
• Send you newsletters and notifications (if opted-in)
• Respond to your inquiries and support requests
• Monitor and analyze usage patterns
• Detect and prevent fraud or abuse

4. Legal Basis for Processing (GDPR Article 6)

We process your personal data on the following legal bases:

• Contract Performance (Art. 6(1)(b)): Account data and preferences - necessary to provide the Service
• Legitimate Interest (Art. 6(1)(f)): Usage analysis, security, fraud prevention - our legitimate business interests
• Consent (Art. 6(1)(a)): Newsletter and marketing communications - you may withdraw consent at any time

5. Information Sharing

We do not sell your personal information. We may share information with:

• Service Providers: Third-party services that help us operate the Service (hosting, email delivery, AI processing)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Third-Party Services and International Data Transfers

Our Service uses the following third-party service providers:

• OpenAI: To generate AI-powered summaries
• ElevenLabs: To generate audio for podcasts (if enabled)
• Amazon Web Services: Infrastructure hosting

International Data Transfers: Some of our service providers are located in the United States. We ensure adequate protection through Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework where applicable.

7. Data Retention

We retain different types of data for different periods:

You may request deletion of your account and associated data at any time by contacting us.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption of passwords and secure data transmission (HTTPS). However, no method of transmission over the Internet is 100% secure.

9. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of Access (Art. 15): You can request a copy of your personal data
• Right to Rectification (Art. 16): You can request correction of inaccurate data
• Right to Erasure (Art. 17): You can request deletion of your data ("right to be forgotten")
• Right to Restriction (Art. 18): You can request limitation of processing in certain cases
• Right to Data Portability (Art. 20): You can receive your data in a machine-readable format
• Right to Object (Art. 21): You can object to processing based on legitimate interest
• Right to Withdraw Consent: You can withdraw consent at any time for consent-based processing
• Right to Lodge a Complaint: You can file a complaint with the Polish Data Protection Authority (UODO) at uodo.gov.pl

To exercise these rights, please contact us at [email protected]. We will respond within 30 days.

10. Cookies

We use essential cookies and local storage to maintain your login session and store your preferences. We do not use third-party tracking cookies or analytics services that track you across websites.

11. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.