Last updated: March 7, 2026
Privacy Policy
1. Overview
This Privacy Policy describes how Taffy at taffysearch.com ("the Service"), operated by Arun Agrahri ("we," "us," or "our"), collects, uses, and protects your information. By using the Service, you agree to the collection and use of information as described in this policy.
2. Information We Collect
Account Information
When you sign in with Google OAuth, we receive and store:
- Your name
- Email address
- Profile picture (avatar)
- Google account identifier
Usage Data
As you use the Service, we collect and store:
- Chat conversations and search queries
- Channels you have added or interacted with
- Subscription and billing history
- Feature usage and interaction patterns
Automatically Collected Information
We collect standard web analytics data through Google Analytics (GA4), including pages visited, time on site, referral sources, and general device and browser information.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process your subscription and payments
- Store and display your chat history for your convenience
- Improve and develop new features
- Send transactional emails (channel ready notifications, billing updates)
- Respond to support requests
- Monitor for abuse and enforce our Terms of Service
4. YouTube Data We Process
Taffy processes publicly available YouTube data to power the Service. This includes:
- Video transcripts from public YouTube videos
- Public comments on YouTube videos
- Channel metadata (name, subscriber count, video count, descriptions)
- Video metadata (titles, descriptions, view counts, publish dates)
This data is used for evidence-based research and analysis. We always attribute content to the original creators and channels. We do not access private, unlisted, or members-only content.
Processed YouTube data, including transcripts, comments, generated embeddings, and AI-derived insights, is stored permanently in our systems to provide the Service.
5. Third-Party Services
We share information with the following third-party services only as necessary to operate the Service:
Authentication via Google OAuth. We receive your profile information when you sign in. Subject to Google's Privacy Policy.
Stripe
Payment processing for subscriptions. We do not store your credit card details -- Stripe handles all payment data directly. Subject to Stripe's Privacy Policy.
Google Analytics
Anonymized website usage analytics to help us understand how people use the Service. Subject to Google's Privacy Policy.
We do not sell, rent, or trade your personal information to any third party.
7. Data Storage & Security
Your data is stored on secure servers. We use industry-standard security measures to protect your information, including:
- HTTPS encryption for all data in transit
- Encrypted database connections
- Secure cloud storage (Amazon S3) for processed data
- Access controls limiting who can access production data
While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
8. Data Retention
We retain your account information and chat history for as long as your account is active. Processed YouTube data (transcripts, comments, embeddings, insights) is stored permanently to provide the Service.
If you delete your account, we will remove your personal information and chat history within 30 days. Aggregated or anonymized data that cannot be linked back to you may be retained indefinitely.
9. Your Rights
You have the right to:
- Access the personal information we hold about you
- Delete your account and associated personal data
- Export your chat history and account data
- Opt out of non-essential communications
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
10. Children's Privacy
The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. Material changes will be communicated through the Service or via email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
12. Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].