Privacy Policy

1. Who we are

Gobuxx is a curated linear television platform built on YouTube content. We organise publicly available YouTube videos into themed shows and schedule them across our curated channels, giving viewers a lean-back TV experience.

This Privacy Policy explains how we collect, use, store, and protect information when you visit gobuxx.com, watch content on our platform, or apply to become a Gobuxx creator. By using Gobuxx, you agree to the practices described here.

2. Information we collect

When you watch or browse

• Your IP address and approximate location (country/city level)
• Browser type, device type, and operating system
• Pages visited, shows watched, and time spent
• Referring URL (how you arrived at Gobuxx)
• Chat messages submitted in our live viewer chat

When you use our search or interactive features

• Search queries entered into our search tool
• Filter and navigation choices

We do not require you to create an account to watch content on Gobuxx. Most browsing and viewing data is collected in aggregate and is not linked to a personally identifiable profile.

3. Creator-specific data

When you submit a creator application, we collect and store:

• YouTube channel ID — a unique identifier for your channel, used to verify ownership and prevent others from submitting your channel without your consent
• Channel name and handle — as returned by the YouTube Data API
• Channel avatar URL — a link to your YouTube channel thumbnail
• Subscriber count and video count — public statistics used to assess your channel's fit for Gobuxx
• Email address — provided by you in the application form, used to communicate with you about your application and your content on Gobuxx
• IP address — recorded at the time of application for security purposes
• Consent record — a timestamped record that you agreed to Gobuxx's content usage terms
• Revocation token — a unique, private token sent to your email that allows you to withdraw consent without needing an account

Content metadata

If your application is approved and we create a Gobuxx show using your content, we additionally store:

• Video titles, descriptions, and durations (from the YouTube Data API)
• Video thumbnails and poster images (stored on our CDN to power the TV guide experience)
• Show structure, episode order, and scheduling data we create around your content

Your actual video files are never downloaded or stored by Gobuxx. Videos are played using YouTube's official embed player, and all views count on your YouTube channel.

4. How we use your information

For viewers

• To serve and personalise the viewing experience (e.g. remembering your last channel)
• To measure platform usage and improve content curation
• To operate and maintain the live chat feature
• To detect abuse, fraud, or technical issues

For creators

• To verify your YouTube channel identity via Google OAuth
• To assess your application against our content eligibility criteria
• To communicate with you about your application status, your show going live, and platform updates
• To maintain a record of your consent and provide you with a mechanism to revoke it
• To display your channel information on your Gobuxx creator profile page
• To build and maintain your show's structure, poster, and episode data on our platform

We do not sell your data. We do not use your data for third-party advertising. We do not share your personal information with third parties except as described in Section 8.

5. YouTube and Google

Gobuxx uses the YouTube Data API v3 to verify creator channel identities and retrieve publicly available channel metadata. By connecting your Google account, you are also subject to Google's Privacy Policy at policies.google.com/privacy.

Gobuxx displays content using the YouTube IFrame Embed Player. When you watch content on Gobuxx, YouTube may also set cookies and collect viewing data in accordance with their own privacy policy. We have no control over the data YouTube collects through their embed player.

We request only the minimum OAuth scopes necessary to confirm your channel identity (youtube.readonly). We do not retain your Google OAuth access tokens after the verification process is complete.

6. Email communications

If you apply to become a creator, we use your email address to send:

• A confirmation of your application receipt (sent immediately)
• A notification when your show is live on Gobuxx
• A confirmation if you revoke your consent
• Occasional platform updates relevant to creators

We use Brevo (formerly Sendinblue) to deliver transactional emails. Your email address is transmitted to Brevo for the purpose of sending these messages. Brevo's privacy policy is available at brevo.com/legal/privacypolicy.

We do not send marketing emails without explicit consent. You can request removal from all communications by contacting us at hello@gobuxx.com.

7. Cookies and analytics

Gobuxx uses minimal cookies necessary to operate the platform:

• Session cookies — to maintain your session state while browsing
• Preference cookies — to remember settings like your last-watched channel

We do not currently use third-party analytics services (such as Google Analytics). Any analytics we perform are done using our own internal logging with aggregated, anonymised data.

YouTube's embed player may set its own cookies when you watch content. These are governed by Google/YouTube's cookie policy.

8. Sharing your information

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Service providers — we share data with Brevo (email delivery) and our hosting provider (Hostinger) solely for the purpose of operating the platform. These providers are contractually obligated to protect your data.
• Legal compliance — we may disclose information if required to do so by law, court order, or governmental authority.
• Business transfer — if Gobuxx is acquired or merged, your data may be transferred as part of that transaction. We will notify creators by email in advance of any such transfer.

Creator profile information (name, handle, avatar, subscriber count, show listings) is displayed publicly on your Gobuxx creator page as part of the platform's normal operation. This information is already publicly available on YouTube.

9. Data retention

We retain your data for as long as it is necessary to provide the service:

• Creator application data — retained for the duration of your relationship with Gobuxx. If you revoke your consent, your application record is marked as revoked and your content is removed from the platform. We retain a minimal record of the revocation event for legal compliance.
• Viewer session data — retained for up to 90 days.
• Chat messages — retained at our discretion; we may purge older messages periodically.
• Server logs — retained for up to 30 days for security and debugging purposes.

You may request deletion of your personal data at any time by contacting us. See Section 10 for your rights.

10. Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your data (subject to legal retention requirements)
• Right to withdraw consent — creators can withdraw content usage consent at any time using the revocation link in their confirmation email, without needing to contact us
• Right to object — to object to processing of your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at hello@gobuxx.com. We will respond within 30 days.

11. Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. These include:

• HTTPS encryption for all data in transit
• Hashed storage of all passwords (bcrypt)
• Parameterised database queries to prevent SQL injection
• CSRF token validation on all state-changing requests
• Rate-limited admin login with session expiry
• Unique, one-time-use revocation tokens for creator consent withdrawal

No system is entirely secure. If you discover a security vulnerability, please disclose it responsibly to hello@gobuxx.com.

12. Children

Gobuxx is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal information to us, please contact us and we will delete it promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. If you are a creator with an active application or show on Gobuxx, we will notify you by email of any significant changes.

Continued use of Gobuxx after changes are posted constitutes your acceptance of the updated policy.

14. Contact us