Privacy Policy

1. Who we are and who this policy covers

This Privacy Policy explains how SaaSassins Dev LLC, a Wyoming limited liability company doing business as TuBe SEO ("TuBe SEO," "we," "us," "our"), collects, uses, discloses, retains and protects personal information. It applies to gotubeseo.com and to the services we provide from it.

This policy covers:

• Website visitors: anyone who browses gotubeseo.com.
• Prospective clients: anyone who submits an intake form, books a call, emails us, or exchanges text messages with us about working together.
• Clients: businesses that engage TuBe SEO, and the people at those businesses who act as contacts, approvers, billing contacts or platform users.
• Agency and white-label partners: agencies that resell or private-label the platform, and the people at those agencies.

Two different roles. The role we are in changes what we may do with information, so we separate them.

• As a business or controller. For information about website visitors, prospects, client personnel, partner personnel and billing contacts, TuBe SEO decides why and how the information is used. This Policy governs it.
• As a service provider or processor. When we perform search, content, local and digital PR work, we access personal information that lives inside a client's own website, accounts and systems ("Client Data"). We process Client Data only on that client's documented instructions. See Section 10.

This policy does not cover the practices of our clients. If you are a customer, lead or website visitor of a TuBe SEO client, that client's own privacy policy governs your information and you should send your privacy requests there. If you send one to us, we will refer it to the client and tell you we have.

Contact surface. TuBe SEO operates entirely online and does not publish a street address or a telephone number. Every notice, request and question under this Policy is handled by email at info@gotubeseo.com.

2. Information you give us

Most of what we hold about you is what you typed into a form or wrote in an email. On our intake forms we collect:

• Your name and the name of your business.
• Your website address.
• Your business email address.
• Your phone number: optional. You only need to give it if you want us to be able to call or text you, and you can submit the form without it.
• A budget band: the range you select, not a financial account or a credit reference.
• Your message: the free-text description of what you need, plus anything else you choose to include in it.
• Your consent selections: whether you checked the optional SMS consent checkbox, together with the evidence described in Section 13.1.

We also collect what you give us through other direct channels:

• Booking a call: your name, email, the time you selected and anything you write in the booking notes.
• Email and text correspondence: the content of messages you send us and our replies, including attachments.
• Onboarding and engagement materials: brand guidelines, target keyword lists, approver names and contact details, and any documents you send us to do the work.
• Billing details: the billing contact, billing entity and billing email. Payments are handled by a third-party payment processor. We do not receive or store full payment card numbers.

Please do not send us information we did not ask for. We do not need government identifiers, health information, financial account credentials or passwords, and we ask you not to put them in a form, an email or a text message. See Section 6.

3. Information we collect automatically

When you load a page on gotubeseo.com, your browser and our hosting infrastructure exchange a small amount of technical information. We collect the following automatically:

• Log data: the IP address that made the request, the date and time, the page or file requested, the referring URL, the HTTP status and response size, and the browser user agent string.
• Approximate location: the country, region and city inferred from that IP address. This is coarse and is often wrong by tens of miles. We do not collect precise geolocation, and this website never asks your browser or device for GPS-level location.
• Device and browser data: browser name and version, operating system, device type, language preference and screen dimensions where the browser reports them.
• Page and form interaction: which pages were requested, and, when you submit a form, which fields you completed and the state of the consent checkboxes at the moment of submission.

What we do not do automatically. The collection above happens in ordinary web server and content-delivery logs, not through tracking technology placed on your device. This marketing website loads no third-party scripts, sets no advertising cookies and uses no cross-site trackers. Section 14 describes that in full.

4. Information we receive once an engagement begins

Delivering search and AI-visibility work requires access to a client's own properties. Once an engagement begins, and only at the client's direction and with the client's authorization, we receive information from:

• The client website and its content management system: administrator or editor access sufficient to audit pages and, where publishing is in scope, to publish approved content. The platform publishes directly to WordPress and can also deliver by webhook or to a GitHub repository.
• Google Search Console: query, impression, click and indexing data for the client's property.
• Google Business Profile: listing details, categories, reviews and location data.
• Hosting, DNS and delivery endpoints where they are in scope for technical work.
• Files and exports the client sends us: content inventories, lead or form-submission records, or reporting exports.

Some of that material contains personal information: author bylines and staff biographies, contact details published on a client's own pages, names inside testimonials or reviews, and, where a client shares them, the names and contact details of that client's own leads and customers.

How we treat it. Anything reached through a client's site or connected accounts is Client Data. We use it only to perform the services for that client. We do not use it for our own marketing, we do not add anyone in it to any TuBe SEO mailing list, and we never enroll anyone in our SMS program from it. Section 10 sets out the commitments in full.

Access ends when the engagement ends. Clients grant us scoped credentials rather than shared master credentials wherever the platform allows it, can revoke our access at any time, and are asked to revoke it on termination. We do not retain working credentials after an engagement closes.

5. Information from public sources during research

Competitive research and digital PR involve reading things that are already public. In the course of that work we collect:

• Published business contact information: the editor, author or general contact address a website publishes on its own contact, masthead or author pages.
• Author bylines, job titles, publication names and public professional profiles.
• The content of public web pages: article text, headings, structured data and link profiles gathered by crawling pages that permit crawling.
• Public business listings and review content, including map listings, categories and publicly posted reviews.
• Search results and answer-engine output: which pages rank, and which sources AI assistants cite, for a given question.

We collect published business contact information for one purpose: to send an individually written outreach email to the person responsible for a specific article or resource page. Every outreach email references that person's actual published work, is approved by a human before it is sent, and carries an unsubscribe path we honor absolutely.

What we never do with public sources. We do not buy, rent or subscribe to consumer lead lists. We do not obtain personal information from data brokers, lead-generation companies or co-registration arrangements. We never send a text message to a phone number obtained from a public source, from a purchased list, or from anywhere other than an intake form on which that person personally checked the SMS consent box. See Section 13.

6. Information we do not collect

Some categories of information have no place in a search marketing engagement, so we do not ask for them and do not want them. TuBe SEO does not intentionally collect sensitive personal information, including:

• Social Security numbers, driver's license numbers, passport numbers or other government identifiers;
• full financial account numbers, payment card numbers or account credentials;
• precise geolocation;
• biometric or genetic data;
• health, medical or mental health information;
• racial or ethnic origin, religious or philosophical beliefs, union membership, sexual orientation, sex life, immigration status or citizenship status;
• the contents of your mail, email or messages where we are not an intended recipient.

We do not use or disclose sensitive personal information for any purpose that would require us to offer a right to limit its use under state privacy law. If you send us information in this list even though we did not ask for it, we will delete it from our systems once we notice it, unless a legal obligation requires us to keep it.

7. How we collect information

There are five ways information reaches us, and no others: directly from you (Section 2); automatically from your browser, through ordinary server and content-delivery logs (Section 3); from accounts a client connects, at that client's direction and authorization (Section 4); from public sources during research (Section 5); and from our own service providers acting for us. That last category covers a delivery receipt from the provider that transmitted a text you asked to receive, a bounce notice from our email infrastructure, and a payment confirmation from our processor.

We do not purchase personal information. TuBe SEO does not buy, rent, lease or otherwise acquire personal information from data brokers, list vendors, lead-generation companies, affiliate networks or co-registration arrangements, and we do not accept transferred consent from any other business. Consent given to another company is not consent given to TuBe SEO.

8. Why we use information, purpose by purpose

We use personal information only for the purposes below. Each purpose is limited to the information that is reasonably necessary for it.

Purpose	What we use for it
Answer your inquiry and scope a proposal	Name, business name, website, email, phone, budget band, message; public information about the site you gave us
Schedule and hold calls	Name, email, booking details, phone where you provided it
Deliver the services under a signed engagement	Client contact details, approver details, Client Data reached through connected accounts
Send transactional and service messages about an active engagement	Email address; phone number, only where you opted in to text messages
Send our own marketing email to business contacts, with an unsubscribe link in every message	Business name, business email, stated interest
Digital PR outreach about a specific published page	Published business contact information from public sources (Section 5)
Invoice, collect payment and keep financial records	Billing contact and billing entity details, engagement and invoice history
Secure the site and the platform: abuse prevention, spam filtering, rate limiting, incident investigation	Log data, IP address, request metadata
Improve the site and the platform	Aggregated and de-identified usage and performance data that does not identify any individual or client
Prove consent and meet legal obligations	Consent records, suppression lists, tax and contract records
Establish, exercise or defend legal claims	Whatever is relevant to the claim, retained under legal hold

New purposes. If we ever want to use personal information for a purpose that is materially different from those listed here and not compatible with them, we will update this Policy and, where the law requires it, ask for your consent first.

Automated decisions. We do not use automated processing or profiling to make decisions about individuals that produce legal effects or similarly significant effects. Nothing on this site or in our platform decides anyone's employment, credit, housing, insurance, education or access to a service.

9. Legal bases for processing (UK and EU visitors)

If you are in the United Kingdom, the European Economic Area or Switzerland, we rely on the following legal bases under the UK GDPR and EU GDPR:

• Performance of a contract, or steps taken at your request before entering one: responding to your inquiry, preparing a proposal, delivering the services, invoicing and supporting an active engagement.
• Legitimate interests: operating, securing and improving our website and business; preventing abuse and fraud; keeping records of who we dealt with and when; and business-to-business outreach and marketing to organizational contacts. We balance these interests against your rights and interests before we rely on them, and you may object at any time.
• Consent: where consent is the appropriate basis, including your consent to receive text messages under Section 13 and, where required, marketing email. You may withdraw consent at any time, and withdrawal does not affect the lawfulness of processing carried out before you withdrew it.
• Legal obligation: retaining tax and accounting records, responding to lawful requests, and keeping the consent and suppression records that telecommunications and marketing rules require us to keep.
• Legal claims: establishing, exercising or defending legal claims, which we treat as a legitimate interest and, where necessary, as a legal obligation under a hold.

Where we act as a processor for a client, that client determines the legal basis, and you should direct your request to them. See Section 21 for the rights available to you and how to complain to a supervisory authority.

10. Client Data we process on behalf of our clients

When we work on a client's website and accounts we are that client's service provider and processor, not the decision-maker. For all Client Data, TuBe SEO commits that:

• we process it only on the documented instructions of that client, for the purpose of delivering the services in that client's engagement;
• we do not sell it and do not share it for cross-context behavioral advertising or targeted advertising;
• we do not use it for our own marketing and do not add anyone in it to a TuBe SEO list of any kind;
• we do not use it to train, fine-tune or improve any general-purpose or third-party artificial intelligence model;
• we do not combine it with information from other clients except as aggregated, de-identified data that cannot reasonably be re-identified;
• we keep it logically isolated per client inside the platform, so one client's data is not accessible to another;
• we bind every subprocessor that touches it to written terms no less protective than our own; and
• we return or delete it at the end of the engagement, within the period our data processing terms specify, unless the law requires us to keep it longer.

If you are an individual whose information sits inside a client's systems (a lead, a customer, a reviewer, a staff member named on a client's website), the client, not TuBe SEO, decides how it is used. Send your access, correction or deletion request to that client; if you send it to us, we pass it on and tell you we have.

A current list of the categories of subprocessors that handle Client Data is available on request at info@gotubeseo.com.

11. Who we disclose information to

We disclose personal information only in the situations described below. We describe recipients by category rather than by brand name, because the vendors inside a category change and a stale brand list is worse than an accurate category list.

Service providers and subprocessors. Each is engaged under a written contract that limits it to processing on our instructions, for our purposes only, and prohibits it from selling the information or using it for its own purposes:

• Cloud hosting, database, storage and content-delivery providers: the infrastructure this website and our platform run on.
• Email infrastructure and deliverability providers: transmitting and delivering the email that we ourselves send, and reporting whether it arrived.
• SMS messaging platforms, aggregators and mobile carriers: only as described in Section 13, and only to transmit messages you asked to receive.
• Large language model and AI inference providers, and AI image generation providers: used to research, draft and produce content and imagery.
• Search and SEO data providers: keyword, rank tracking, backlink, crawl, local and map-pack, and SERP data vendors.
• Scheduling and calendar providers: for booking and confirming calls.
• Payment processors and billing platforms: for taking payment and issuing invoices.
• Logging, error monitoring, backup and security providers: for keeping the platform available and investigating incidents.
• Professional advisers: lawyers, accountants and insurers, under professional duties of confidentiality.

Legal compliance and protection. We may disclose personal information where we reasonably believe disclosure is required by law or necessary to respond to a subpoena, court order, warrant or other lawful request from a government authority or regulator; to enforce our agreements; to investigate suspected fraud, abuse or a security incident; or to protect the rights, property or safety of TuBe SEO, our clients or the public. Where we are legally permitted to do so, we will tell the affected person before responding to a request for their information.

Business transfers. If TuBe SEO is involved in a merger, acquisition, financing, reorganization, bankruptcy or sale of all or part of its business or assets, personal information may be disclosed to the counterparty and its advisers under confidentiality obligations, and may be transferred as part of that transaction. Any successor will be bound by commitments no less protective than this Policy for the information it receives, and we will post notice on this website of any change in who controls your information.

What is not on the list. TuBe SEO does not disclose personal information to any third party, partner or affiliate for that party's own marketing, promotional or advertising purposes, and does not participate in lead resale, list rental, co-registration, affiliate marketing or any arrangement that treats your contact details as a product. There is no category of recipient in this Policy that receives personal information for marketing or advertising.

12. We do not sell your personal information

TuBe SEO does not sell personal information, does not share personal information for cross-context behavioral advertising, and does not process personal information for targeted advertising, as those terms are defined under the California Consumer Privacy Act and the comprehensive privacy laws of Colorado, Connecticut, Texas, Virginia and the other states listed in Section 19. We have not sold or shared personal information for those purposes in the preceding twelve months, and we have no plans to.

Because we do not sell or share personal information, there is nothing to opt out of. We honor opt-out requests and Global Privacy Control signals anyway, as described in Sections 15 and 19, so that your preference is on record with us if our practices ever change.

• Under-16s. We do not sell or share the personal information of any consumer, and specifically not of any consumer we know to be under 16. See Section 23.
• Sensitive information. We do not sell sensitive personal information. We do not collect it in the first place (Section 6).
• Nevada residents. Nevada law (NRS 603A.340) lets consumers submit a verified request that a business not sell covered information. We do not sell covered information. If you send such a request to info@gotubeseo.com, we will confirm that in writing and record your preference.
• Financial incentives. We do not offer financial incentives, loyalty programs or price differences in exchange for personal information.

13. SMS messaging program and mobile information

This section describes how TuBe SEO handles mobile phone numbers and text messaging data. It is written to satisfy the disclosure requirements that mobile carriers and messaging aggregators apply to application-to-person (A2P 10DLC) messaging programs. Where anything else in this Policy could be read to conflict with this section, this section controls.

Program name and operator. The program is the TuBe SEO SMS Program, operated by SaaSassins Dev LLC dba TuBe SEO. Every number we message from is registered to that entity under the A2P 10DLC framework.

13.0 How you join the SMS Program, and only how

The only way to opt in to the TuBe SEO SMS Program is to affirmatively check the SMS consent checkbox on a TuBe SEO website intake form at gotubeseo.com before you submit that form. The checkbox is unchecked by default. You have to check it yourself. Nothing checks it for you.

We do not enroll anyone in the SMS Program through a phone call, an in-person conversation, a signed services agreement, a purchase, an email exchange, a third party, a purchased list, or any channel other than the website intake forms described above.

Consent to receive text messages is never a condition of purchase, of using our services, or of receiving a quote or proposal. You can leave the box unchecked, submit the form, and get exactly the same response, the same pricing and the same service. Leaving the phone field blank entirely is also fine.

13.1 What mobile information we collect

• Your mobile phone number, as you entered it on the form.
• Your opt-in event metadata, captured at the moment you submitted the form: the date and time of submission with time zone; the exact intake form you used; the page URL on which consent was given; the IP address the submission came from; the referring URL and browser user agent; the state of the SMS consent checkbox; and the exact consent text that was displayed to you on screen at that moment.
• Message content: the text of messages we send you and messages you send us.
• Delivery metadata: send and delivery timestamps, delivery or failure status, the carrier of record, and any opt-out or help keyword we received from you.

We capture the opt-in metadata for one reason: so that we can prove, later and precisely, that you asked to hear from us and exactly what you were shown when you did.

13.2 How we use mobile information

We use your mobile number and the related information only to:

• send you the messages you consented to receive: quote and proposal follow-ups, scheduling confirmations and reminders, onboarding steps, service and account notifications, and replies to messages you send us;
• receive and respond to text messages you send us;
• process and honor STOP, HELP and other opt-out keywords, and maintain our suppression list so that you stay opted out;
• maintain the consent record described in Section 13.1; and
• meet our legal, carrier and aggregator compliance obligations.

We do not use mobile information for lead resale, list rental, co-registration or affiliate marketing of any kind. We do not text numbers gathered from public sources, from clients' records, or from any source other than a consent checkbox you personally checked.

13.3 How mobile information is shared

The only sharing of mobile information that occurs is the limited operational sharing required to deliver the SMS Program itself. That means the messaging platform and aggregator that transmit the message on our behalf, and the mobile carrier that routes it to your handset. Those providers are contractually restricted to that purpose and are prohibited from using mobile information for any purpose of their own.

Beyond that operational routing, the only other circumstance in which mobile information may be disclosed is where the law compels it: a subpoena, court order or other lawful demand, as described in Section 11. It is never disclosed to lead-generation companies, data brokers, advertising networks, analytics platforms used for advertising, affiliates, resellers or any other business, and it is excluded from any business transfer of the kind described in Section 11.

13.4 Your choices regarding the SMS Program

• Reply STOP to cancel. Text STOP to any message from us and we will stop. We also honor END, CANCEL, UNSUBSCRIBE and QUIT. You will receive one final confirmation message acknowledging that you have been unsubscribed, and after that we will not text you again unless you opt in again.
• Reply HELP for help. Text HELP to any message and we will reply with our business name, the categories of messages we send, a reminder that you can text STOP, and our email address.
• Revoke by email. Email info@gotubeseo.com with the subject line "Revoke Consent" and the phone number you want removed. You may also revoke consent by any other reasonable means, including telling us in a reply to any message.
• We honor revocations promptly. STOP takes effect immediately and is applied across every campaign we run. Revocations sent by any other reasonable method are honored as soon as practicable and, in all cases, within ten (10) business days.
• Opting out of texts changes nothing else. It does not affect your engagement, your pricing, our email replies to your inquiry, or anything we owe you under a signed agreement.
• To start again, text START to a number you previously received messages from, or submit a new consent through an intake form on our website.

After you opt out we keep the record of your original consent and the fact of your opt-out, on our suppression list, solely to prove that consent existed and to make sure we do not contact you again. We do not use that record to message you.

13.5 Message and data rates

Message and data rates may apply. TuBe SEO does not charge you for text messages, but your mobile carrier may charge you for sending or receiving them under your plan. Contact your carrier for details.

Message frequency varies and depends on your activity. Typically that means a handful of messages a month, and more during active onboarding or an open project. Carriers are not liable for delayed or undelivered messages. Delivery depends on carrier and network availability and is not guaranteed.

For the full program terms, the exact consent language we display, and the complete opt-in and opt-out mechanics, see our Consent to Contact page and our SMS Opt-In Disclosure.

14. Cookies, analytics and tracking on this website

We will describe this honestly rather than reprint a generic cookie policy that does not match the site you are reading. gotubeseo.com is a static website. Pages are pre-built HTML files served from our hosting infrastructure. Specifically:

• It loads no third-party scripts. There is no Google Analytics, no advertising pixel, no Meta or LinkedIn tag, no tag manager, no chat widget, no A/B testing tool and no session-replay tool on this site.
• It sets no advertising cookies and no cookies used to build a profile of you.
• It uses no cross-site trackers and does not participate in any advertising or data-sharing network. Nothing on this site follows you to another website.
• Fonts and images are served from our own domain, so simply reading a page does not disclose your visit to a third party.
• The one script the site loads is our own, served from this domain, and it handles navigation, accessibility behavior and form submission.

What remains is the ordinary web server and content-delivery logging described in Section 3, which we use for security and to keep the site running.

The client platform is separate. The signed-in application our clients use is a different system from this marketing site. It uses strictly necessary cookies for authentication, session management and security. Those are required for a logged-in session to work, and they are not used for advertising or cross-site tracking.

If this ever changes. If we add analytics or any other non-essential technology to this website, we will update this section before it goes live and, where the law requires consent, ask for yours before setting anything non-essential on your device.

15. Do Not Track and Global Privacy Control

Do Not Track. Some browsers can send a "Do Not Track" (DNT) signal. There is no consensus industry or legal standard for what a business must do in response, and TuBe SEO does not respond to DNT signals. In practical terms there is nothing for a DNT signal to switch off here: this website does not track visitors across sites and does not serve targeted advertising (Section 14).

Global Privacy Control. TuBe SEO honors the Global Privacy Control (GPC) signal. When we detect GPC from your browser or device, we treat it as a valid request to opt out of the sale or sharing of personal information and of processing for targeted advertising, and we record that preference for that browser or device. We do not sell or share personal information in the first place (Section 12), so the signal does not change what we do. It is honored and recorded regardless, so your preference is already on file.

A GPC signal is specific to the browser and device that sends it, so enable it on each browser and device you use. If you are a client with a platform account, we apply the preference to that account too, where it is technically feasible.

16. How long we keep information, and why

We keep personal information only as long as it is reasonably necessary for the purpose we collected it for, and then delete or de-identify it. Our working periods are:

What	How long	Why
Website server and content-delivery logs	Up to 12 months	Security, abuse investigation, uptime diagnosis
Intake form submissions from people who do not become clients	Up to 36 months from last contact	Following up on an inquiry and keeping a record of what we were asked
Client account, contract, engagement and billing records	The term of the engagement plus 7 years	Tax, accounting, audit and limitations periods
Client Data processed on a client's behalf	Returned or deleted at the end of the engagement, within the period our data processing terms specify	The client, not TuBe SEO, decides its lifecycle
Email marketing engagement records	24 months from last engagement	Suppressing stale contacts and honoring unsubscribes
Consent records for text messages and email: timestamp, IP address, form URL and the exact consent text shown	At least 5 years from our last communication with you, retained even after you opt out	Evidencing consent and defending against claims. These records are never used to contact you
Suppression and do-not-contact lists	Indefinitely	Keeping you opted out is only possible if we remember that you opted out
Security and access logs for the platform	12 months	Incident detection and investigation
Aggregated, de-identified statistics	Indefinitely	Not personal information, and cannot reasonably be re-identified

Where a legal hold, a regulatory obligation or an active or reasonably anticipated dispute requires it, we retain the relevant information until the hold lifts, even if a period above would otherwise have expired. When a period ends we delete the information or de-identify it so it can no longer be associated with you.

17. How we protect information

We take the security of personal information seriously, and we will describe our measures without dressing them up.

What we do:

• Encryption in transit. This website and our platform are served over HTTPS, and traffic between our systems and our providers is encrypted.
• Encryption at rest. Our databases, file storage and backups are encrypted at rest by our hosting and database providers.
• Least-privilege access. Access is limited to the people who need it to do their work and removed when they no longer do.
• Authentication controls. Unique accounts, no shared logins, and multi-factor authentication where the underlying platform supports it.
• Tenant isolation. Client data in the platform is separated per client, so one client's information is not reachable from another client's account.
• Credential handling. Client credentials are requested only through a designated secure method, scoped rather than shared where possible, and revoked at the end of an engagement.
• Vendor diligence. Every provider that processes personal information for us is under a written contract with confidentiality and security obligations.
• Logging, monitoring and backups, so we can detect a problem and recover from it.
• Incident response. If a security incident affects personal information, we investigate, contain it and notify affected people and regulators where the law requires, without undue delay.

What we do not claim. TuBe SEO does not hold, and does not claim to hold, any security certification or third-party audit report: no SOC 2 report, no ISO 27001 certification, and no HIPAA compliance attestation. We would rather tell you that plainly than imply an assurance we cannot evidence.

No system is perfectly secure. We cannot and do not guarantee that personal information will never be accessed, disclosed, altered or destroyed by an event that defeats our safeguards. Please do not send government identifiers, full payment card numbers, health information, or passwords to us by email or text message. If you need to send us a credential, ask us for the secure method and we will provide it.

18. Your rights and how to exercise them

Subject to the exceptions in the law that applies to you, you may ask us to:

• Access: confirm whether we hold personal information about you and give you a copy, together with the categories we collected, the sources, the purposes and the categories of recipients.
• Correct: fix personal information about you that is inaccurate or incomplete.
• Delete: erase personal information we hold about you.
• Port: provide a copy in a portable, machine-readable format, or transmit it to another business where that is technically feasible.
• Opt out: of the sale or sharing of personal information, of targeted advertising, and of profiling with legal or similarly significant effects. We do none of these things (Sections 8 and 12), and we will confirm that in writing.
• Limit: restrict the use of sensitive personal information. We do not collect it (Section 6).
• Withdraw consent: including consent to receive text messages (Section 13.4) and marketing email, at any time.
• Appeal: ask us to reconsider if we decline a request.

How to make a request. Email info@gotubeseo.com with the subject line "Privacy Request." Tell us (a) which right you are exercising, (b) your state or country of residence, and (c) the email address or phone number you gave us, so we can find your record. Because TuBe SEO operates exclusively online and deals with you directly, email is our designated method for privacy requests. There is no toll-free number to call.

Verification. We will ask you to confirm information we already hold that matches your record, and we will normally reply to the address in that record. We will not ask for a government ID for a routine request, and we will not make you create an account. If we cannot verify that a request is genuinely yours, we will tell you why rather than hand your information to the wrong person.

Timing. We acknowledge requests within 10 business days and respond substantively within 45 days, extendable once by a further 45 days where a request is complex, with notice to you before the first period ends.

Authorized agents. An agent may submit a request on your behalf with written authorization signed by you. We may contact you to confirm it.

Appeals. If we decline a request, you may appeal within 30 days by replying with the subject line "Privacy Appeal." We respond within 45 days, or 60 where the law that applies to you requires it. If we deny the appeal, we will give you the contact details for your state Attorney General or supervisory authority.

Cost and non-discrimination. Requests are free. We may charge a reasonable fee, or decline, if a request is manifestly unfounded, excessive or repetitive, and we will explain why. We will never discriminate or retaliate against you for exercising a privacy right: no denial of service, no different price, no reduced quality.

Requests about a client's data. If your request concerns information we hold as a service provider for a client, we refer it to that client and tell you we have (Section 10).

19. US state privacy rights

A growing number of US states have comprehensive consumer privacy laws in effect. As of the date of this Policy, those states are:

California, Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Texas, Oregon, Montana, Delaware, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Kentucky and Rhode Island, together with Florida, whose Digital Bill of Rights is narrower in scope, and any additional states whose laws take effect after the date of this Policy.

What those laws give you. The specific rights, thresholds, exemptions and deadlines differ from state to state, but broadly they grant residents the right to confirm and access the personal information a business holds; to know the categories collected, the sources, the purposes and the categories of third parties it is disclosed to; to correct inaccuracies; to delete, subject to statutory exceptions; to obtain a portable copy; to opt out of the sale of personal information, of sharing for cross-context behavioral advertising, and of processing for targeted advertising; to opt out of profiling in furtherance of decisions producing legal or similarly significant effects; to limit the use and disclosure of sensitive personal information; to appeal a refusal; and to be free from discrimination or retaliation for exercising any of them.

How TuBe SEO applies them. We do not sell personal information, do not share it for cross-context behavioral advertising, do not process it for targeted advertising, do not profile individuals for consequential decisions and do not collect sensitive personal information, so several of these rights have nothing to act on here. The rest are exercised as described in Section 18. As a matter of practice we respond to verified requests from residents of any US state, whether or not that state's law applies to us by threshold.

Global Privacy Control. TuBe SEO honors Global Privacy Control browser signals. Where a state recognizes a universal opt-out mechanism, we treat a GPC signal received from your browser or device as a valid opt-out request submitted by you, without requiring you to send us anything further. Section 15 explains how we handle it.

Business contacts are covered. California's exemption for business-to-business contact information expired on January 1, 2023. Work email addresses, business phone numbers, job titles and employer names of California residents are personal information, and everything in this Policy applies to them. If you are a prospect, a client contact or a partner contact, these rights apply to your business contact information as much as to anything else.

20. Your California privacy rights

This section is for California residents and supplements Sections 18 and 19.

Categories of personal information and what happens to them. Using the statutory categories from California Civil Code section 1798.140:

Statutory category	Do we collect it?	Sold or shared?
Identifiers: name, business email, business phone, company, website URL, IP address	Yes	No
Customer records: billing contact and billing entity details	Yes	No
Commercial information: services inquired about, budget band, engagement history	Yes	No
Internet or network activity: pages requested, referrer, device and browser data	Yes	No
Geolocation: approximate city or region inferred from IP address	Yes, approximate only	No
Professional or employment information: job title, role, employer, industry	Yes, where you tell us	No
Audio, electronic or visual information: the content of emails and text messages you exchange with us	Yes	No
Inferences: our own assessment of fit and priority for an inquiry	Yes	No
Sensitive personal information	No (Section 6)	No
Biometric information, education records, protected classifications	No	No

Notice at collection. This Policy is our notice at collection. It tells you, at or before the point we collect anything, what we collect, why, how long we keep it and that we do not sell or share it. Every form on this site links here for that reason.

Shine the Light. California Civil Code section 1798.83 permits California residents with an established business relationship with us to request, once per calendar year and free of charge, information about personal information we disclosed to third parties for those third parties' own direct marketing purposes during the preceding calendar year. TuBe SEO does not disclose personal information to third parties for their own direct marketing purposes. To make a request anyway and receive that confirmation in writing, email info@gotubeseo.com with the subject line "Shine the Light Request."

Do Not Track. California law requires us to disclose how we respond to Do Not Track signals. We do not respond to them, for the reasons given in Section 15.

Contact for California requests. Because we operate exclusively online and interact with you directly, California law permits us to designate an email address as our sole request channel. That address is info@gotubeseo.com.

21. UK, EU and Swiss visitors

TuBe SEO is established in the United States and serves businesses principally in the United States. If you are in the United Kingdom, the European Economic Area or Switzerland, the following applies.

Controller and legal bases. SaaSassins Dev LLC dba TuBe SEO is the controller of the personal information described in Sections 2 and 3, contactable at info@gotubeseo.com. The legal bases we rely on are in Section 9.

Your rights. You have the right of access; to rectification; to erasure; to restrict processing; to data portability; to object to processing based on our legitimate interests; and an absolute right to object to direct marketing at any time. Where processing rests on consent, you may withdraw it at any time without affecting the lawfulness of what came before. Exercise any of these as described in Section 18.

Complaints. You may lodge a complaint with your supervisory authority: in the UK, the Information Commissioner's Office; in the EEA, the authority for your country of residence, place of work or the alleged infringement; in Switzerland, the Federal Data Protection and Information Commissioner. We would appreciate the chance to address your concern first, but you are not required to come to us before you complain.

No automated decision-making. We make no decisions about you based solely on automated processing that produce legal or similarly significant effects.

Representative. We do not currently target our services to individuals in the EEA or the UK and have not appointed a representative under Article 27 of the EU or UK GDPR. If we appoint one, we will name that representative here.

Where we are a processor. If your information reached us through one of our clients, that client is the controller. Address your request there, and see Section 10.

22. International transfers

TuBe SEO is based in the United States. Our infrastructure and our service providers store and process personal information in the United States, and some providers may process it in other countries where they or their subprocessors operate. Data protection laws in those countries may differ from the laws where you live.

Where we transfer personal information out of the United Kingdom, the European Economic Area or Switzerland, we rely on an appropriate transfer mechanism, which may include:

• the European Commission's Standard Contractual Clauses, with the UK International Data Transfer Addendum where the transfer originates in the United Kingdom and the Swiss addendum where it originates in Switzerland;
• the EU-US Data Privacy Framework and its UK Extension and Swiss-US Framework, where a receiving provider is certified under them; or
• another lawful transfer mechanism recognized at the time of the transfer.

In each case we apply supplementary technical and organizational measures appropriate to the information being transferred: encryption in transit and at rest, access controls, and contractual restrictions on onward transfer. A copy of the safeguards relevant to a particular transfer is available on request at info@gotubeseo.com.

By submitting a form or corresponding with us from outside the United States, you understand that the information you send will be processed in the United States under the safeguards described here.

23. Children's privacy

TuBe SEO provides services to businesses, not to individuals under 18. This website is not directed to children, our services are not offered to children, and we have no product, feature or communication channel aimed at anyone under 18.

We do not knowingly collect personal information from anyone under 18, and we do not knowingly collect personal information from a child under 13. We do not sell or share the personal information of any consumer, and specifically not of any consumer under 16. See Section 12.

If we learn that we have collected personal information from a person under 18, we will delete it promptly. If you are a parent or guardian and you believe a child has given us personal information, email info@gotubeseo.com and we will locate and delete it and confirm to you that we have.

24. Other websites we link to

This website links to third-party websites, tools and resources: search engine documentation, industry research, our clients' published work and similar material. Those sites are operated by other people. We do not control them, we are not responsible for their content or their privacy practices, and this Policy does not apply to them. A link is not an endorsement. When you follow a link away from gotubeseo.com, read the privacy policy of the site you land on.

The same is true of any third-party platform you connect to us during an engagement: your content management system, your Google properties, your host. Your relationship with those providers is governed by their own terms and privacy policies.

25. Changes to this policy

We may update this Privacy Policy as our services, our providers or the law change. When we do:

• we post the updated Policy at this URL and change the "Last updated" date at the top;
• for changes that materially affect how we use or disclose personal information, we give at least 30 days' notice before the change takes effect, by posting a prominent notice on this website and, for clients and active contacts, by email;
• we do not apply changes retroactively to information already collected in a way that would be incompatible with the Policy in force when we collected it; and
• any material change to Section 13 that would expand how mobile information is used or shared will not be applied to existing subscribers without a new, affirmative opt-in. Consent you gave under an earlier version of Section 13 is consent to that version.

Only one version of this Policy is live on gotubeseo.com at any time. If you want a copy of a previous version, or of the version in force on a particular date, email info@gotubeseo.com and we will send it to you.

26. How to contact us

Privacy questions, requests and complaints go to the same place.

Useful subject lines, so your message reaches the right process quickly:

• "Privacy Request": access, correction, deletion, portability or opt-out (Section 18).
• "Privacy Appeal": to appeal a decision on a request (Section 18).
• "Revoke Consent": to stop text messages, with the phone number to remove (Section 13.4).
• "Shine the Light Request": for the California disclosure in Section 20.
• "Subprocessor List": for the current categories of providers that handle Client Data (Section 10).

We acknowledge privacy correspondence within 10 business days. If you need this Policy in an alternative accessible format, ask and we will provide one.