BS Tube Privacy Policy

Privacy version: 2026-08-22

Information We Handle

• Account and profile data, such as name, email, contact email, company information, and account status.
• Microsoft authentication identifiers and session records. BS Tube does not receive or store your Microsoft password.
• License, plan, paid-through, device activation, hardware-hash, computer-name, trial, credit, and audit records.
• Stripe customer, checkout, order, subscription, payment-status, tax, refund, and dispute identifiers and amounts.
• Images and related file metadata submitted to phone upload or Image → XYZ.
• Support communications and diagnostic details you choose to provide.
• Request, IP, device, browser, and security logs generated by hosting and service providers.

Why We Use Information

We use information to authenticate accounts, create or link customer records, enforce licenses and device limits, process purchases and refunds, grant and consume credits, provide cloud features, prevent abuse, maintain audit and financial records, troubleshoot problems, secure the service, and respond to support requests. BS Tube does not sell personal information and does not use the Website for third-party advertising or behavioral analytics.

Authentication, Licensing, and Local Storage

Microsoft and Supabase process sign-in. Supabase stores account, authentication, licensing, device, billing, credit, upload-session, and audit data used by BS Tube. The Website's Supabase client persists its signed-in session in browser storage and uses short-lived session storage to refresh billing status after OAuth or Stripe returns.

The desktop application stores projects, tooling libraries, settings, preferences, diagnostics, and license cache data on your Windows computer. A stay-signed-in choice stores authentication tokens in a protected local cache. You control local project files and can remove local application data using BS Tube's removal options.

Payments

Stripe hosts Checkout and the Customer Portal and processes payment methods. BS Tube does not receive or store full card numbers or card security codes. BS Tube retains the Stripe identifiers, amounts, currency, tax, status, product, subscription, refund, and dispute records needed to fulfill purchases and reconcile financial activity.

Image → XYZ and Phone Uploads

A direct Image → XYZ request sends the prepared PNG or JPEG through Supabase to OpenAI for coordinate extraction. BS Tube does not write that image to its application database or storage. The request instructs OpenAI not to retain Responses API application state. OpenAI may still retain abuse-monitoring logs that can include submitted content for a limited period under its API data controls, generally up to 30 days unless a different approved retention control applies.

Phone upload stores one image temporarily in a private Supabase Storage bucket for a one-time session that expires after about 10 minutes. The object is removed after the desktop claims it, cancellation, or expiration cleanup. Limited session metadata and security/audit records may remain for operations and abuse prevention; the uploaded image is not kept as a customer media library.

Providers and Disclosures

• Microsoft and Supabase provide authentication and cloud database, function, and storage services.
• Stripe provides payment, tax, subscription, refund, and customer-portal services.
• OpenAI processes prepared images for Image → XYZ.
• Vercel hosts the Website and may process normal web request and security logs.
• GitHub hosts public release downloads and may process normal download request logs.
• Professional advisers, authorities, or service providers may receive limited information when reasonably necessary for legal, security, accounting, or support purposes.

Each provider handles information under its own terms, privacy commitments, and infrastructure practices.

Retention and Deletion

Retention depends on purpose. Temporary phone images follow the short lifecycle described above. Account and license records are kept while the account is active and as needed for support. Payment, refund, chargeback, credit, device, security, and audit records may be retained longer for accounting, fraud prevention, dispute resolution, legal obligations, and system integrity. Local files remain until you remove them or the application data.

You may request account access, correction, or deletion by contacting support. We will verify the request and apply rights available in your jurisdiction. Deletion may be limited where records must be kept for taxes, contracts, security, fraud prevention, disputes, or other legal obligations. Deleting an account does not erase files stored only on your own computer.

Cookies and Browser Storage

BS Tube does not currently use advertising cookies or third-party analytics tracking. Authentication and billing use Supabase browser storage and may use provider cookies needed for Microsoft, Supabase, Stripe, and security workflows. Blocking required storage or cookies may prevent sign-in or checkout.

Security and International Processing

We use access controls, private storage, service-role boundaries, encryption in transit, protected local token storage, audit records, and provider security controls. No system is completely secure. Service providers may process information in the United States or other countries where they operate, subject to their contractual and legal transfer mechanisms.

Your Privacy Rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection, and to appeal or complain to a regulator. These rights vary by jurisdiction and may be subject to identity verification and legal exceptions. BS Tube does not use personal information for automated decisions that produce legal or similarly significant effects.

Changes to This Policy

We post the current version and update date here. Material revisions receive a new Privacy version and may be presented for renewed acknowledgement with the corresponding Terms version.

Contact

Contact support@bstube.net for privacy questions or requests.

Last Updated

August 22, 2026