Last updated: March 7, 2026

Privacy Policy

1. Overview

This Privacy Policy describes how Taffy at taffysearch.com ("the Service"), operated by Arun Agrahri ("we," "us," or "our"), collects, uses, and protects your information. By using the Service, you agree to the collection and use of information as described in this policy.

2. Information We Collect

Account Information

When you sign in with Google OAuth, we receive and store:

  • Your name
  • Email address
  • Profile picture (avatar)
  • Google account identifier

Usage Data

As you use the Service, we collect and store:

  • Chat conversations and search queries
  • Channels you have added or interacted with
  • Subscription and billing history
  • Feature usage and interaction patterns

Automatically Collected Information

We collect standard web analytics data through Google Analytics (GA4), including pages visited, time on site, referral sources, and general device and browser information.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process your subscription and payments
  • Store and display your chat history for your convenience
  • Improve and develop new features
  • Send transactional emails (channel ready notifications, billing updates)
  • Respond to support requests
  • Monitor for abuse and enforce our Terms of Service

4. YouTube Data We Process

Taffy processes publicly available YouTube data to power the Service. This includes:

  • Video transcripts from public YouTube videos
  • Public comments on YouTube videos
  • Channel metadata (name, subscriber count, video count, descriptions)
  • Video metadata (titles, descriptions, view counts, publish dates)

This data is used for evidence-based research and analysis. We always attribute content to the original creators and channels. We do not access private, unlisted, or members-only content.

Processed YouTube data, including transcripts, comments, generated embeddings, and AI-derived insights, is stored permanently in our systems to provide the Service.

5. Third-Party Services

We share information with the following third-party services only as necessary to operate the Service:

Google

Authentication via Google OAuth. We receive your profile information when you sign in. Subject to Google's Privacy Policy.

Stripe

Payment processing for subscriptions. We do not store your credit card details -- Stripe handles all payment data directly. Subject to Stripe's Privacy Policy.

Google Analytics

Anonymized website usage analytics to help us understand how people use the Service. Subject to Google's Privacy Policy.

We do not sell, rent, or trade your personal information to any third party.

6. Cookies & Tracking

We use a minimal set of cookies:

Session Cookie

Essential for keeping you signed in and maintaining your session. This cookie is required for the Service to function.

Google Analytics Cookies

Used for anonymized usage analytics. These cookies help us understand traffic patterns and improve the Service.

We do not use marketing, retargeting, or advertising cookies.

7. Data Storage & Security

Your data is stored on secure servers. We use industry-standard security measures to protect your information, including:

  • HTTPS encryption for all data in transit
  • Encrypted database connections
  • Secure cloud storage (Amazon S3) for processed data
  • Access controls limiting who can access production data

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your account information and chat history for as long as your account is active. Processed YouTube data (transcripts, comments, embeddings, insights) is stored permanently to provide the Service.

If you delete your account, we will remove your personal information and chat history within 30 days. Aggregated or anonymized data that cannot be linked back to you may be retained indefinitely.

9. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Delete your account and associated personal data
  • Export your chat history and account data
  • Opt out of non-essential communications

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

10. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. Material changes will be communicated through the Service or via email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].