Tukey

Privacy Policy

Last updated

Effective date: July 22, 2026

Tukey ("we", "us") is a service operated by Tukey Inc., a corporation incorporated under the federal laws of Canada. This policy explains what personal information we collect when you use Tukey, how we use it, and the choices you have. For information about how Google handles your data, see the Google Privacy Policy at https://policies.google.com/privacy. If something is unclear, email us at legal@tukey.ai.

What Tukey does

Tukey is an AI assistant purpose-built for YouTube creators. To be useful, it needs to understand the channel you're creating for: your videos, your audience, your performance. You connect a YouTube channel to Tukey by signing in with the Google account that manages it. Tukey uses YouTube API Services: we read data about that channel from YouTube's APIs and use it as context when you chat with the assistant.

Information we collect

Sign-in information. When you create a Tukey account we collect your name, email address, and (if you sign in with Google) your Google account identifier. If you create an account with email and password, we store a salted hash of your password — never the plaintext.

YouTube data. When you connect a YouTube channel, we receive — via Google's YouTube Data API and YouTube Analytics API — information about that channel: its metadata (title, description, subscriber count, etc.), the videos on it (titles, descriptions, thumbnails, transcripts, visuals, comments), and, for channels you own, performance analytics (views, retention, traffic sources, demographics, geography). We request the OAuth scopes youtube.readonly and yt-analytics.readonly. We do not request write access to your YouTube account.

Derived information. We process the data above to produce summaries and insights — for example, a description of your channel's content pillars, or a synthesis of what your audience responds to. This derived information is stored alongside your account.

Usage information. We log the requests you make to Tukey and the responses the assistant produces, so you can return to past conversations and so we can debug problems.

How we use the information

We use the information above to operate Tukey:

  • to authenticate you,
  • to retrieve, analyze, and summarize your YouTube data when you ask Tukey questions about your channel,
  • to maintain your chat history and the artifacts (scripts, hooks, thumbnail concepts, etc.) you create in Tukey,
  • to debug, secure, and improve the service.

We do not use your YouTube data, your conversations, or your derived insights to train general-purpose AI or machine-learning models. We do not sell your personal information. We do not show advertising in Tukey.

How we share information

Internally, access to your information is restricted to the people who operate Tukey and need it to run, secure, or debug the service. Externally, we share your information only with a small number of third-party providers that process it on our behalf:

  • Cloudflare — hosting, request routing, content delivery, vector storage, and our LLM gateway.
  • Supabase — managed PostgreSQL database hosting (in the United States).
  • Fly.io — hosting for our content management system.
  • Cloudflare AI Gateway — when Tukey calls a large language model, the request is routed through Cloudflare AI Gateway to a third-party model provider. We choose providers whose terms prohibit training their models on customer prompts.

Beyond these processors, we share personal information only when required by law or to protect Tukey, our users, or the public. We share it with no other external parties.

Cookies and data stored on your device

Tukey stores small amounts of data on your device to make the service work. When you sign in, we place cookies in your browser that keep you signed in and protect your session. When you connect a Google account, we place a short-lived cookie that secures the connection flow. These cookies are set by us and are strictly necessary for the service to function. We do not use advertising cookies, and we do not use third-party analytics or tracking cookies. If your browser blocks cookies, sign-in will not work.

Where information is stored

Your account data, YouTube-derived data, and chat history are stored in managed databases located in the United States (Supabase) and in Cloudflare's global object and vector stores. Service logs sit on Cloudflare's infrastructure. As a Canadian company we comply with applicable Canadian privacy law (PIPEDA), and we apply equivalent protections to users in other jurisdictions.

How long we keep information

We keep your account data and the YouTube-derived data we hold for you as long as your account is active, and we keep that data current: information retrieved from YouTube API Services is refreshed on an ongoing basis, and stored YouTube data that has not been refreshed within 30 calendar days is deleted. If you disconnect a Google account from Tukey, we delete the access and refresh tokens for that grant immediately and stop reading from YouTube on your behalf. If the connection is not restored within 30 days, we also delete the stored analytics data and analytics-derived insights for that grant. Derived public information about channels you tracked may be retained because it is not personal to you. If you delete your account (see below), we delete the personal information associated with it.

Your choices

  • Revoke Tukey's access to YouTube. You can revoke Tukey's access to your Google account at any time at myaccount.google.com/permissions.
  • Disconnect inside Tukey. You can disconnect a YouTube channel inside Tukey, which removes the associated tokens and the channel from your account.
  • Access, correct, or delete your data. Email legal@tukey.ai. We delete stored YouTube data within 7 calendar days of your request and complete the rest of the request within 30 days, or tell you why we cannot. Deleting your data from Tukey does not affect the data stored on YouTube itself; to manage your data on YouTube, use YouTube directly.

YouTube API Services

Tukey uses YouTube API Services. By using Tukey, you are also agreeing to be bound by the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy.

Google API Services User Data Policy

Tukey's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Children

Tukey is not intended for use by anyone under 13 (or the equivalent minimum age in your jurisdiction). We don't knowingly collect personal information from children.

Security

We protect personal information in transit (HTTPS) and at rest, restrict internal access to your data, and use database-level access controls to prevent cross-account leakage. No system is perfectly secure, but we treat your data with care.

Changes to this policy

If we change this policy in a material way, we'll update the effective date above and, if you have an account, notify you by email or in-app.

Contact

Tukey Inc., Toronto, Ontario, Canada
Email: legal@tukey.ai