Privacy Policy
Last updated: September 19, 2026
YouTube Outreach AI ("we", "us", or the "Service") respects your privacy. This Privacy Policy explains how we collect, use, retain, and share personal information when you use the Service, as well as the rights available to you.
Please read this Policy before using the Service. By using the Service, you acknowledge and agree to it. We may update this Policy and will provide advance notice by email or in-product notice for material changes.
1. Data Controller
The data controller for the Service is:
- Product: YouTube Outreach AI
- Website: tarelivo.com
- Privacy contact: support@tarelivo.com
2. Personal Information We Collect
2.1 Information you provide
Account information: email address and password stored as a one-way cryptographic hash. Payment information: transaction amount, payment status, and subscription plan; we do not store full card numbers. Communications: emails and feedback you send to support.
2.2 Information collected automatically
Device and network data such as IP address and request-origin information, processed temporarily to prevent abuse and enforce rate limits. Product usage data such as quota consumption, publish attempts, and error events, used for reliability and plan enforcement.
2.3 Google and YouTube data
When you connect a Google account, you authorize us through Google OAuth 2.0 to read the YouTube channels you own, their public metadata, and the public metadata of the target videos and channels you add to a campaign pool. We use the YouTube Data API v3 to publish the comments you approve. We do not access your private messages, and we do not request access beyond the scopes shown on the consent screen.
2.4 Google user data - Limited Use
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the features described in this Policy, we do not sell it, we do not use it for advertising, and we do not allow humans to read it except where you give explicit consent, where it is necessary for security or to comply with law, or where the data has been aggregated and anonymized.
3. How We Use Personal Information
| Purpose | Legal basis |
|---|---|
| Providing and maintaining the Service | Performance of a contract |
| Billing and payment processing | Performance of a contract |
| Customer support | Performance of a contract / legitimate interests |
| Service notices (billing, security, policy changes) | Legitimate interests |
| Security, abuse prevention, and quota enforcement | Legitimate interests |
| Product improvement and analysis | Legitimate interests |
| Legal compliance | Legal obligation |
We may aggregate or de-identify data for statistical analysis. This information cannot identify an individual.
4. Cookies and Tracking Technologies
| Type | Purpose | Can be disabled |
|---|---|---|
| Strictly necessary | Sign-in, session handling, and core functionality | No |
| Analytics | We do not currently use analytics or advertising cookies | — |
You can adjust cookie preferences through your browser settings.
5. Sharing and Disclosure of Personal Information
We do not sell personal information, including as “sale” is defined by applicable laws such as the CCPA. We share information only in these circumstances:
- Service providers: cloud-computing, payment, email-delivery, and similar providers. Payment card data is handled by Waffo Pancake in its checkout and is not stored on our servers.
- YouTube and Google: to the extent required to read the channels you authorize and to publish the comments you approve, through the YouTube Data API v3.
- Legal and regulatory requirements: where required by law, court order, or a lawful government request.
- Business transactions: in a merger or acquisition, with advance notice and continuing protection obligations.
- With your consent: for another purpose where you have given prior, explicit consent.
6. Security Measures
- Encryption in transit: TLS / HTTPS for all traffic to the Service.
- Credential storage: account passwords are stored as one-way hashes and are never recoverable in plaintext.
- Token protection: Google OAuth access tokens and refresh tokens are encrypted at rest with AES-256-GCM.
- Access control: least-privilege principles and audit logging of administrative actions.
- Security maintenance and issue remediation appropriate to Service risk.
If a security event affects your rights, we will take response and notification measures as appropriate under applicable law and the circumstances. Keep your account credentials secure and do not share them.
7. Retention of Personal Information
| Data type | Retention period | End-of-period handling |
|---|---|---|
| Account information | While active; 90 days after deletion | Deletion or anonymization |
| Transaction records | As required by law, generally 3 years | Deletion or archival |
| Google OAuth tokens | Until you disconnect the channel or revoke access | Immediate deletion |
| Comment jobs and AI generation logs | 12 months | Deletion or anonymization |
| Security audit logs | 30 days | Secure deletion |
8. Your Data Rights
To exercise a right below, contact us. We will handle the request within 30 calendar days.
| Right | Description |
|---|---|
| Information | Know which data we collect and use |
| Access | Obtain a copy of your personal information |
| Correction | Correct inaccurate or incomplete information |
| Erasure | Request deletion in specified circumstances |
| Restriction | Ask us to pause processing in specified circumstances |
| Portability | Receive your data in a machine-readable format |
| Objection | Object to processing based on legitimate interests or marketing |
| Withdraw consent | Withdraw consent-based processing authorization |
You can also revoke our access to your Google account at any time from your Google Account permissions page; doing so disconnects the affected channels and stops their automation. If you believe we have not handled your information appropriately, you may complain to your local data-protection authority.
9. Marketing Communications and Opt-out
We do not currently send marketing emails. Service-essential notices, such as billing and security notices, are not marketing communications and cannot be opted out of.
10. International Data Transfers
Our servers are deployed on Cloudflare's global network, and a service provider such as Waffo Pancake may be located in Singapore or the United States. For international transfers, we take appropriate safeguards based on applicable law and the actual service arrangement:
- Transfer information only to recipients necessary to provide the Service.
- Use reasonable transfer and access-control measures.
11. Children
The Service is intended for users aged 18 or older. We do not knowingly collect information from people below that age. If you believe your child has provided information to us, contact us immediately and we will delete it as soon as practicable.
12. Third-party Links and Services
The Service may contain third-party links, such as to YouTube or Google, or integrate with third-party services. This Policy applies only to information we collect directly. We are not responsible for third-party data practices; please review their policies before use.
13. Changes to This Policy
For a material change, we will notify you at least 15 days in advance through an in-product notice or your registered email and update the “Last updated” date at the top of this page. Continued use after the effective date means acceptance.
14. Contact Us
- Privacy contact: support@tarelivo.com
- Customer support: support@tarelivo.com
- Website: tarelivo.com
This Privacy Policy is for information only and is not legal advice.
YouTube Outreach AI · tarelivo.com