Privacy Policy

Last Updated: November 11, 2025

This Privacy Policy describes how STVIGA LLC ("TubeNest," "we," "us," or "our") collects, uses, stores, and shares your information when you use our video organization service at stviga.com (the "Website") and related services, features, and applications (collectively, the "Service").

By using TubeNest, you consent to the collection, use, and sharing of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

Table of Contents

1. Information We Collect
2. How We Use Your Information
3. How We Share Your Information
4. YouTube API Services and Google Data
5. Cookies and Tracking Technologies
6. Data Security
7. Data Retention
8. Your Privacy Rights
9. International Data Transfers
10. Children's Privacy
11. Third-Party Services
12. Changes to This Privacy Policy
13. Contact Us

1. Information We Collect

We collect information about you in various ways when you use TubeNest. This includes information you provide directly, information we collect automatically, and information we receive from third-party services.

1.1 Information You Provide Directly

Account Information: When you create a TubeNest account, we collect:

• Email address
• Username
• Password (encrypted and stored securely)
• Display name (optional)
• Profile picture (optional)

User-Generated Content: When you use TubeNest's organizational features, we collect:

• Collections you create (names, descriptions, organization structure)
• Tags you add to videos
• Personal notes and comments you write
• Video URLs you save from YouTube
• Custom categories and folder structures

Communication Information: When you contact our support team, we collect:

• Your name and email address
• The content of your messages
• Any attachments you send
• Related support ticket information

Payment Information: If you subscribe to a paid plan, our payment processor (Stripe) collects:

• Credit card information
• Billing address
• Payment history

Note: We do not directly store your full credit card details. Our payment processor handles this in compliance with PCI-DSS standards.

1.2 Information We Collect Automatically

Usage Information: When you use TubeNest, we automatically collect:

• Pages you visit within the Service
• Features you use and how you use them
• Time, frequency, and duration of your activities
• Videos you save, organize, and interact with
• Search queries within the Service
• Device information (type, operating system, browser type)
• IP address and general location (country/city level)

Log Data: Our servers automatically record information including:

• Your IP address
• Browser type and version
• Pages you visit and time spent on those pages
• Referring/exit pages
• Date and time stamps
• Clickstream data

Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to:

• Keep you logged in
• Remember your preferences
• Analyze usage patterns
• Provide personalized experiences
• Improve the Service

See Section 5 for detailed information about cookies.

1.3 Information from Third-Party Services

YouTube Data: When you connect your YouTube account to TubeNest, we access and store:

• Your YouTube username and profile information
• Video metadata from videos you save (titles, descriptions, thumbnails, duration, channel information)
• Playlists you choose to import
• Your YouTube watch history (only if you explicitly grant this permission)

Important: We only request the minimum YouTube permissions necessary to provide our Service. You can revoke our access to your YouTube data at any time through Google's security settings: https://security.google.com/settings/security/permissions

OAuth/Social Login: If you sign up or log in using Google, Facebook, or other third-party authentication:

• We receive your name, email address, and profile picture from that service
• We do not receive your password from these services

1.4 Information from Other Users

If another user shares a collection with you or invites you to collaborate, we may receive your email address and related information from that user.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide and Improve the Service

• Create and maintain your account
• Organize and store your saved YouTube videos
• Provide search, filtering, and discovery features
• Sync your data across devices
• Personalize your experience
• Develop new features and improve existing ones
• Analyze usage patterns to optimize performance
• Debug and fix technical issues

2.2 To Communicate With You

• Send you service-related announcements
• Respond to your questions and support requests
• Send you updates about new features (if you opt in)
• Send you marketing communications (with your consent, and with easy opt-out)
• Request feedback or participation in surveys
• Notify you about changes to our Terms of Service or Privacy Policy

2.3 For Security and Fraud Prevention

• Protect against unauthorized access
• Detect and prevent fraud, spam, and abuse
• Verify your identity
• Enforce our Terms of Service
• Comply with legal obligations

2.4 For Analytics and Research

• Understand how users interact with TubeNest
• Analyze aggregate usage patterns
• Conduct research to improve our Service
• Generate anonymized statistical data

2.5 For Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and prevent harm
• Protect our rights and property

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following limited circumstances:

3.1 Service Providers

We share information with third-party service providers who help us operate TubeNest:

Infrastructure Providers:

• Cloud hosting services (e.g., AWS, Google Cloud, or similar)
• Content delivery networks (CDNs)
• Database services

Payment Processors:

• Stripe (for processing payments)
• Payment processors handle financial information according to their own privacy policies

Analytics Services:

• Usage analytics providers (e.g., Google Analytics, Mixpanel)
• Error tracking services (e.g., Sentry)

Communication Services:

• Email service providers (for sending service emails)
• Customer support platforms

All service providers are contractually obligated to:

• Use your information only to provide services to us
• Maintain appropriate security measures
• Not use your information for their own purposes

3.2 With Your Consent

We may share your information when you explicitly consent, such as:

• When you choose to make a collection public
• When you share collections with specific users
• When you connect TubeNest with third-party integrations

3.3 For Legal Reasons

We may disclose your information if required to:

• Comply with legal obligations (subpoenas, court orders, legal processes)
• Enforce our Terms of Service
• Protect the rights, property, or safety of TubeNest, our users, or the public
• Detect, prevent, or address fraud, security issues, or technical problems
• Respond to government requests

3.4 Business Transfers

If TubeNest is involved in a merger, acquisition, sale of assets, or bankruptcy:

• Your information may be transferred to the acquiring entity
• We will notify you via email and/or prominent notice on our Service
• The acquiring entity will be bound by this Privacy Policy unless you consent to a new policy

3.5 Aggregate and Anonymized Data

We may share aggregate, anonymized, or de-identified information that cannot reasonably be used to identify you:

• Usage statistics and trends
• Research findings
• Industry benchmarks

This data does not contain Personal Information and cannot be linked back to you.

3.6 Public Information

If you choose to make collections public or share them with specific links:

• Anyone with the link can view that collection
• Search engines may index public collections
• Other users may see your username associated with public collections

You control what information is made public through your privacy settings.

4. YouTube API Services and Google Data

TubeNest uses YouTube API Services to provide video organization functionality. Your use of TubeNest is subject to the Google Privacy Policy: http://www.google.com/policies/privacy

4.1 YouTube Data We Access

When you connect your YouTube account, we may access:

• Video metadata (titles, descriptions, thumbnails, duration)
• Channel information for videos you save
• Playlists (if you choose to import them)
• Your YouTube username and profile picture

4.2 How We Use YouTube Data

We use YouTube data solely to:

• Display video information within TubeNest
• Organize videos you explicitly save
• Provide search and filtering within your saved videos
• Show thumbnails and metadata for your collections

We do NOT:

• Share your YouTube data with advertisers
• Use your YouTube data for purposes other than providing TubeNest's core functionality
• Store your YouTube watch history unless you explicitly grant permission
• Access videos you haven't saved to TubeNest

4.3 YouTube Data Storage and Retention

• We store YouTube video metadata (titles, thumbnails, URLs) for videos you save
• This data is retained as long as you keep those videos in your TubeNest collections
• We cache thumbnails and metadata to improve performance
• When you delete a video from TubeNest, we remove associated YouTube data

4.4 Revoking YouTube Access

You can revoke TubeNest's access to your YouTube data at any time:

1. Visit Google Security Settings: https://security.google.com/settings/security/permissions
2. Find TubeNest in the list of connected apps
3. Click "Remove Access"

Note: Revoking access will prevent TubeNest from updating metadata for your saved videos, but your existing collections will remain accessible.

4.5 Google API Services User Data Policy Compliance

TubeNest's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Learn more: https://developers.google.com/terms/api-services-user-data-policy

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit websites. We use cookies and similar technologies (web beacons, pixels, local storage) to enhance your experience.

5.2 Types of Cookies We Use

Essential Cookies (Required):

• Authentication: Keep you logged in
• Security: Prevent fraud and enhance security
• Session management: Remember your settings during your session

Functional Cookies (Optional):

• Preferences: Remember your language, theme, and display settings
• Features: Enable specific functionality you've requested

Analytics Cookies (Optional):

• Usage tracking: Understand how users interact with TubeNest
• Performance monitoring: Identify and fix technical issues
• A/B testing: Test new features with different user groups

Marketing Cookies (Optional, if applicable):

• Campaign tracking: Measure effectiveness of marketing campaigns
• Retargeting: Show relevant ads on other websites (with consent)

5.3 Third-Party Cookies

We may use third-party services that set their own cookies:

• Google Analytics (analytics)
• Stripe (payment processing)
• Social media platforms (if you use social login)

These third parties have their own privacy policies governing their use of cookies.

5.4 Managing Cookies

Browser Controls: Most browsers allow you to:

• View and delete cookies
• Block all cookies
• Block third-party cookies only
• Clear cookies when you close your browser

Note: Blocking essential cookies will prevent you from using TubeNest properly.

Our Cookie Settings: You can manage your cookie preferences in your TubeNest account settings (for non-essential cookies).

Opt-Out Tools:

• Google Analytics Opt-out: https://tools.google.com/dlpage/gaoptout
• Do Not Track: We respect browser Do Not Track signals for non-essential tracking

6. Data Security

6.1 Security Measures

We implement industry-standard security measures to protect your information:

Technical Safeguards:

• Encryption in transit (TLS/SSL)
• Encryption at rest for sensitive data
• Secure password hashing (bcrypt or similar)
• Regular security audits and vulnerability assessments
• Firewall protection and intrusion detection
• Secure API authentication (OAuth 2.0)

Organizational Safeguards:

• Access controls (least privilege principle)
• Employee training on data protection
• Confidentiality agreements with staff and contractors
• Incident response procedures

Infrastructure Security:

• Hosting with reputable cloud providers with SOC 2 compliance
• Regular backups
• Disaster recovery procedures

6.2 Limitations

While we take security seriously, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information. You are responsible for:

• Keeping your password confidential
• Using a strong, unique password
• Logging out when using shared devices
• Notifying us immediately of any unauthorized access

6.3 Data Breach Notification

In the event of a data breach that affects your personal information:

• We will notify you via email within 72 hours of discovering the breach
• We will describe what information was compromised
• We will explain what steps we're taking to address the breach
• We will provide recommendations for protecting yourself

7. Data Retention

7.1 How Long We Keep Your Data

Active Accounts: We retain your information for as long as your account is active and as necessary to provide the Service.

Deleted Accounts: When you delete your account:

• Most personal information is deleted within 30 days
• Some information may be retained for up to 90 days for backup and recovery purposes
• Certain data may be retained longer for legal compliance

Specific Retention Periods:

• Account information: Deleted 30 days after account closure
• User-generated content (collections, notes, tags): Deleted with account or when you manually delete
• Log data: Retained for 12 months for security and analytics
• Payment records: Retained for 7 years for tax and accounting purposes
• Support communications: Retained for 3 years

7.2 Legal and Compliance Retention

We may retain certain information longer if required by law or for:

• Tax and accounting purposes
• Resolving disputes
• Enforcing our agreements
• Fraud prevention

7.3 Anonymized Data

After the retention period, we may retain anonymized or aggregated data indefinitely for analytics and research purposes. This data cannot be used to identify you.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information.

8.1 Rights for All Users

Access: Request a copy of the personal information we hold about you

Correction: Request correction of inaccurate or incomplete information

Deletion: Request deletion of your personal information (subject to legal retention requirements)

Data Portability: Request your data in a machine-readable format

Object to Processing: Object to certain types of processing (e.g., marketing)

Withdraw Consent: Withdraw consent for processing based on consent

8.2 European Union (GDPR) Rights

If you're in the EU/EEA, you have additional rights under GDPR:

• Right to restriction of processing
• Right to lodge a complaint with a supervisory authority
• Right to object to automated decision-making and profiling

8.3 California (CCPA/CPRA) Rights

If you're a California resident, you have rights under CCPA/CPRA:

• Right to know what personal information we collect, use, and share
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your rights

California Disclosures:

• Categories of personal information collected: See Section 1
• Business purposes for collection: See Section 2
• Categories of third parties we share with: See Section 3
• We do not sell personal information

8.4 How to Exercise Your Rights

To exercise any of these rights:

• Email us: support@stviga.com
• Account Settings: Access and manage your data through your account dashboard
• Automated Tools: Export your data or delete your account directly in your settings

We will respond to your request within:

• 30 days for most requests
• 45 days for complex requests (we'll notify you if we need extra time)

We may need to verify your identity before processing your request.

9. International Data Transfers

9.1 Where We Process Data

TubeNest is operated by STVIGA LLC, a company registered in New Mexico, USA, with a business office in Lithuania.

Your information may be transferred to and processed in:

• United States (primary data center location)
• European Union (if applicable)
• Other locations where our service providers operate

9.2 Legal Basis for Transfers

When we transfer data internationally, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by relevant authorities
• Your explicit consent
• Other legal transfer mechanisms as appropriate

9.3 EEA and UK Users

If you're in the European Economic Area or United Kingdom:

• We process your data based on legal grounds (contract, consent, legitimate interests, legal obligations)
• We implement appropriate safeguards for international transfers
• You have rights under GDPR (see Section 8.2)

10. Children's Privacy

10.1 Age Restriction

TubeNest is not intended for children under 13 years of age (or the applicable age in your jurisdiction, such as 16 in the EU).

We do not knowingly collect personal information from children under these ages.

10.2 If We Learn of Child Data

If we discover we have collected information from a child without parental consent:

• We will delete that information as soon as possible
• We will terminate the child's account
• We will notify parents if required by law

10.3 Parental Concerns

If you believe your child has provided information to TubeNest:

• Contact us immediately at support@stviga.com
• We will delete the information and close the account

11. Third-Party Services

11.1 Third-Party Links

TubeNest may contain links to YouTube videos and other third-party websites. We are not responsible for:

• The privacy practices of these third parties
• The content on external websites
• How these services handle your information

11.2 Third-Party Integrations

If you connect TubeNest with third-party services:

• Those services may access information from TubeNest according to their permissions
• Those services have their own privacy policies
• You can revoke integrations at any time through your account settings

11.3 YouTube's Privacy Policy

Your use of YouTube through TubeNest is governed by:

• Google Privacy Policy: http://www.google.com/policies/privacy
• YouTube Terms of Service: https://www.youtube.com/t/terms

12. Changes to This Privacy Policy

12.1 Updates

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices
• Changes in applicable laws
• New features or services
• User feedback

12.2 Notification

When we make material changes:

• We will update the "Last Updated" date at the top
• We will notify you via email (if you have an account)
• We will display a prominent notice on the Service
• For significant changes, we may ask for your consent

12.3 Your Acceptance

Your continued use of TubeNest after changes take effect constitutes acceptance of the updated Privacy Policy. If you do not agree with changes, please stop using the Service and close your account.

13. Contact Us

13.1 Privacy Questions

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:

Email: support@stviga.com Website: stviga.com

Mailing Address: STVIGA LLC Attn: Privacy Officer Žalgirio g. 92 Vilnius, LT-09300 Lithuania

13.2 Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer: Email: support@stviga.com Subject Line: "GDPR / Data Protection Inquiry"

13.3 EU Representative

For users in the European Union, you can contact us at our EU office:

STVIGA LLC Žalgirio g. 92 Vilnius, LT-09300 Lithuania Email: support@stviga.com

13.4 Response Time

We will respond to your privacy inquiries within:

• 30 days for general questions
• Time periods specified by law for rights requests (see Section 8)

Appendix: Definitions

Personal Information: Information that identifies, relates to, describes, or can be reasonably linked to you.

Aggregate Information: Statistical data that cannot be used to identify any individual.

Cookies: Small text files stored on your device by websites you visit.

Data Controller: The entity that determines the purposes and means of processing personal data.

Data Processor: An entity that processes personal data on behalf of the data controller.

GDPR: General Data Protection Regulation (EU law).

CCPA: California Consumer Privacy Act (California law).

Effective Date: November 11, 2025

Version: 1.0

Your Consent

By using TubeNest, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

If you do not agree with this Privacy Policy, please do not use TubeNest.