Privacy Policy

Last updated: August 18, 2026 · Treehop has not yet launched; this policy describes the service as built.

What we collect

• Account. Your email address and sign-in credentials, held by Supabase (our database and authentication provider). If you sign in with Google, we receive your email address from Google.
• Your podcast. The RSS feed URLs you connect and the episode metadata they carry (titles, descriptions, artwork URLs, chapters). Episode audio is fetched from your feed's public enclosure URL.
• Pipeline artifacts. Transcripts, waveform data, and rendered videos, stored in Cloudflare R2 under keys scoped to your account.
• Billing. A minutes ledger with your credit balance history, recorded payment amounts, and Stripe transaction identifiers. Your card details never touch Treehop — they are entered only on Stripe's hosted pages.
• YouTube connection. Your channel name and the OAuth tokens that let Treehop upload to your channel. Tokens are stored only encrypted (AES-256-GCM); they are decrypted only on the server, only to perform the uploads and checks you asked for.

Processors we use

• Supabase — database and authentication.
• Cloudflare R2 — storage for audio, transcripts, waveforms, and rendered videos.
• AWS (us-east-1) — video rendering compute.
• Deepgram — transcription. Deepgram fetches your episode audio directly from your feed's public enclosure URL.
• Stripe — payments. Card data is entered only on Stripe's hosted pages and never touches Treehop.
• Google / YouTube — optional Google sign-in, and video uploads to the channel you connect.

We do not sell your data, and no other third party receives it.

Google user data

When you connect a YouTube channel, Treehop requests exactly two OAuth scopes:

• https://www.googleapis.com/auth/youtube.upload — used to upload your episodes' finished videos to your channel.
• https://www.googleapis.com/auth/youtube.readonly — used to identify the channel you chose and to confirm that an uploaded video finished processing.

That is all the scopes are used for. Treehop's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect your YouTube channel at any time with one click from the dashboard; disconnecting deletes the stored connection, including the encrypted tokens.

Cookies

This marketing site sets no cookies and loads no third-party resources. The Treehop app uses session cookies to keep you signed in, plus one short-lived cookie during the YouTube connect flow to protect against cross-site request forgery. There are no advertising or tracking cookies anywhere.

No analytics

Neither this site nor the Treehop app contains analytics or tracking of any kind.

Data deletion

• YouTube connection: the Disconnect button deletes the stored connection immediately.
• Feeds: removing a feed stops all processing for it and hides it from your dashboard. Your billing history is preserved, as required for accurate accounting.
• Account and data: to delete your account and its data, reach us via the contact page. Self-serve account deletion does not exist yet — we say so here honestly rather than pretend otherwise — and deletion requests are handled by a human.

Changes

This policy may be updated; material changes will be reflected on this page with a new "last updated" date.

Contact

Privacy questions: reach us via the contact page.