Security at TranscriptsTube

At TranscriptsTube, we take your data and account security seriously. Our goal is to ensure that your personal information, content, and payment data are protected at all times.

1. Account Protection

• We use Supabase for secure authentication and session management.
• All passwords are hashed and never stored in plaintext.
• Session tokens are securely stored and automatically expire after a set duration.

2. Data Encryption

• All data in transit is encrypted via HTTPS/TLS 1.2+.
• Supabase manages encrypted-at-rest storage for user data and transcripts.
• We never store YouTube video content, only metadata and generated outputs.

3. Payment Security

• Payments are handled via Stripe, a PCI-DSS Level 1 certified provider.
• We do not store or process any credit card numbers directly.
• Stripe manages all billing and secure checkout sessions.

4. Infrastructure

• Our app is hosted on Vercel, which provides global edge delivery and secure deployment environments.
• We monitor error logs and traffic anomalies using observability tools.

5. Responsible Disclosure

If you discover a security vulnerability, we encourage you to report it to us immediately at support@transcriptstube.com. We will acknowledge your report, investigate, and take action as needed.

6. Ongoing Improvements

We regularly audit our code, dependencies, and platform configurations to ensure alignment with current best practices.

Last updated: May 27, 2025