Privacy Policy

Effective date: May 17, 2026

Tukey ("we", "us") is a service operated by Tukey Inc., a corporation incorporated under the federal laws of Canada. This policy explains what personal information we collect when you use Tukey, how we use it, and the choices you have. For information about how Google handles your data, see the Google Privacy Policy at https://policies.google.com/privacy. If something is unclear, email us at legal@tukey.ai.

What Tukey does

Tukey is an AI assistant purpose-built for YouTube creators. To be useful, it needs to understand the channel you're creating for: your videos, your audience, your performance. You connect a YouTube channel to Tukey by signing in with the Google account that manages it. We then read data about that channel from Google's YouTube APIs and use it as context when you chat with the assistant.

Information we collect

Sign-in information. When you create a Tukey account we collect your name, email address, and (if you sign in with Google) your Google account identifier. If you create an account with email and password, we store a salted hash of your password — never the plaintext.

YouTube data. When you connect a YouTube channel, we receive — via Google's YouTube Data API and YouTube Analytics API — information about that channel: its metadata (title, description, subscriber count, etc.), the videos on it (titles, descriptions, thumbnails, transcripts, visuals, comments), and, for channels you own, performance analytics (views, retention, traffic sources, demographics, geography). We request the OAuth scopes youtube.readonly and yt-analytics.readonly. We do not request write access to your YouTube account.

Derived information. We process the data above to produce summaries and insights — for example, a description of your channel's content pillars, or a synthesis of what your audience responds to. This derived information is stored alongside your account.

Usage information. We log the requests you make to Tukey and the responses the assistant produces, so you can return to past conversations and so we can debug problems.

How we use the information

We use the information above to operate Tukey:

to authenticate you,
to retrieve, analyze, and summarize your YouTube data when you ask Tukey questions about your channel,
to maintain your chat history and the artifacts (scripts, hooks, thumbnail concepts, etc.) you create in Tukey,
to debug, secure, and improve the service.

We do not use your YouTube data, your conversations, or your derived insights to train general-purpose AI or machine-learning models. We do not sell your personal information. We do not show advertising in Tukey.

We work with a small number of third-party providers that process information on our behalf to run the service:

Cloudflare — hosting, request routing, content delivery, vector storage, and our LLM gateway.
Supabase — managed PostgreSQL database hosting (in the United States).
Fly.io — hosting for our content management system.
Cloudflare AI Gateway — when Tukey calls a large language model, the request is routed through Cloudflare AI Gateway to a third-party model provider. We choose providers whose terms prohibit training their models on customer prompts.

Beyond these processors, we share personal information only when required by law or to protect Tukey, our users, or the public.

Where information is stored

Your account data, YouTube-derived data, and chat history are stored in managed databases located in the United States (Supabase) and in Cloudflare's global object and vector stores. Service logs sit on Cloudflare's infrastructure. As a Canadian company we comply with applicable Canadian privacy law (PIPEDA), and we apply equivalent protections to users in other jurisdictions.

How long we keep information

We keep your account data and the YouTube-derived data we hold for you as long as your account is active. If you disconnect a Google account from Tukey, we delete the access and refresh tokens for that grant and remove the authorization to read from YouTube on your behalf. Derived public information about channels you tracked may be retained because it is not personal to you. If you delete your account (see below), we delete the personal information associated with it.

Your choices

Revoke Tukey's access to YouTube. You can revoke Tukey's access to your Google account at any time at myaccount.google.com/permissions.
Disconnect inside Tukey. You can disconnect a YouTube channel inside Tukey, which removes the associated tokens and the channel from your account.
Access, correct, or delete your data. Email legal@tukey.ai. We will complete your request within 30 days, or tell you why we cannot.

Google API Services User Data Policy

Tukey's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Children

Tukey is not intended for use by anyone under 13 (or the equivalent minimum age in your jurisdiction). We don't knowingly collect personal information from children.

Security

We protect personal information in transit (HTTPS) and at rest, restrict internal access to your data, and use database-level access controls to prevent cross-account leakage. No system is perfectly secure, but we treat your data with care.

Changes to this policy

If we change this policy in a material way, we'll update the effective date above and, if you have an account, notify you by email or in-app.

Contact

Tukey Inc., Toronto, Ontario, Canada
Email: legal@tukey.ai