Tukey

Privacy Policy

Last updated

Effective date: September 27, 2026 · Last updated: October 15, 2026

Tukey ("we", "us") is a service operated by Tukey Inc., a corporation incorporated under the federal laws of Canada. This policy explains what personal information we collect when you use Tukey, how we use it, and the choices you have. For information about how Google handles your data, see the Google Privacy Policy at https://policies.google.com/privacy. For information about how Meta handles your data on Instagram, see the Meta Privacy Policy at https://privacycenter.instagram.com/policy. If something is unclear, email us at legal@tukey.ai.

What Tukey does

Tukey is a decision workspace for professional creators. It helps creators understand the channels and social accounts they control and identify content opportunities. Tukey supports connected YouTube channels and may offer controlled-beta support for Instagram Professional accounts. To be useful, it needs to understand the account you're creating for: your videos or Reels, your audience, and (where you connect it) your performance.

Information we collect

Sign-in information. When you create a Tukey account we collect your name, email address, and (if you sign in with Google) your Google account identifier. If you create an account with email and password, we store a salted hash of your password — never the plaintext.

YouTube data. When you connect a YouTube channel, we receive — via Google's YouTube Data API and YouTube Analytics API — information about that channel: its metadata (title, description, subscriber count, etc.), the videos on it (titles, descriptions, thumbnails, transcripts, visuals, comments), and, for channels you own, performance analytics (views, retention, traffic sources, demographics, geography). We request the OAuth scopes youtube.readonly and yt-analytics.readonly. We do not request write access to your YouTube account.

Instagram connection data and public Instagram content. Described in the two Instagram sections below.

Derived information. We process the data above to produce summaries and insights — for example, a description of a channel's or account's content pillars, an account-specific creator profile, an analysis of individual videos or Reels, or content opportunity recommendations. This derived information is stored alongside your account. It describes content and accounts; it does not transfer any rights in that content to Tukey.

Usage information. We log the requests you make to Tukey and the responses the assistant produces, so you can return to past conversations and so we can debug problems. We also record bounded product-usage events (for example, that a connection was started or a recommendation was rated) that never contain your content, account identifiers, or tokens.

Creator Survey. If you fill in our Creator Survey form or take part in a Creator Survey interview, we collect the information described under Creator Survey participants below. You do not need a Tukey account to take part.

Instagram account connection

Connecting an Instagram account is optional. During the controlled beta it is available only for supported Instagram Professional accounts (Business or Creator accounts); personal accounts are not supported.

If you choose to connect an Instagram account, Tukey uses Meta's Instagram login to confirm that you control or are authorized to manage that account. From that login Tukey receives the account identifier, the username, and the account type needed for that verification, and records them with your Tukey account. Tukey requests only the minimum basic Instagram account permission used for this verification.

Tukey does not request access to your private messages, private audience insights, comments, or publishing. Tukey does not publish to or modify your Instagram account. The access token from the login is used for the verification request and is not retained by Tukey.

Public Instagram content analysis

At your request, Tukey may use service providers acting on our behalf to retrieve recent publicly available profile and Reel information for the Instagram account you verified. This may include public captions, media, timestamps, public engagement counts, and other publicly visible metadata. Tukey analyzes this information to build an account-specific creator profile and recommend content opportunities for that account.

This route is limited to the account you verified. It is not intended for, and must not be used for, repeatedly profiling unrelated Instagram accounts. Public content may contain other people, collaborators, voices, or licensed material; Tukey's analysis does not change anyone's rights in it. You remain responsible for reviewing Tukey's recommendations and for respecting Instagram's rules and third-party rights in anything you create.

How we use the information

We use the information above to operate Tukey:

  • to authenticate you and, for Instagram, to confirm that you control the account you connect,
  • to retrieve, analyze, and summarize your YouTube data and the public content of your verified Instagram account when you ask Tukey to,
  • to build creator profiles and recommend content opportunities for the accounts you connect,
  • to maintain your chat history and the artifacts (scripts, hooks, thumbnail concepts, etc.) you create in Tukey,
  • to debug, secure, and improve the service.

We do not use your YouTube data, your Instagram connection data, the public Instagram content we retrieve for you, your conversations, or any derived profile, analysis, or recommendation to train general-purpose AI or machine-learning models. We do not sell your personal information. We do not show advertising in Tukey.

We use Creator Survey information only for the survey purposes described under Creator Survey participants below.

How we share information

Internally, access to your information is restricted to the people who operate Tukey and need it to run, secure, or debug the service. Externally, we share your information only with third-party providers that process it on our behalf, in these categories:

  • Cloudflare — hosting, request routing, content delivery, vector storage, and our LLM gateway.
  • Supabase — managed PostgreSQL database hosting (in the United States).
  • Fly.io — hosting for our content management system.
  • Cloudflare AI Gateway — when Tukey calls a large language model (including to analyze videos or Reels and to write profiles and recommendations), the request is routed through Cloudflare AI Gateway to a third-party model provider. We choose providers whose terms prohibit training their models on customer prompts.
  • Public-content data services — a specialized third-party provider acting on our behalf that retrieves publicly available profile and content information for a social account you have asked Tukey to analyze. We send it only what it needs to locate that public content (for example, the public profile address of your verified account), and it processes that information for us, not for its own purposes.
  • Creator Survey providers — for our Creator Survey only: Google (Google Calendar and Google Meet), Supabase, and Amazon, as described under Creator Survey participants below.

Beyond these categories of processors, we share personal information only when required by law or to protect Tukey, our users, or the public, and, only if you choose Allow for Reddit ad measurement on the Creator Survey page, with Reddit as described under Creator Survey participants below. We share it with no other external parties, except an AI assistant provider you connect, as described under Connected AI assistants.

Connected AI assistants

Connected AI assistants. You can connect an AI assistant that supports the Model Context Protocol, such as ChatGPT or Claude, to your Tukey account. Connecting is optional and happens only when you sign in to Tukey from the assistant and approve it on Tukey's consent page, which names the assistant and shows the address that will receive access.

What the assistant can read. At your direction, Tukey returns to the connected assistant: which Tukey account is connected (your account's name and email address); Tukey's profile of your connected YouTube channel (its summary, content pillars, formats, recurring series, voice, hooks, audience description, and subscriber and video counts); your current and saved video opportunities; and the dated public sources behind an opportunity. Tukey does not return your YouTube analytics, private channel insights, your Tukey conversations, or your sign-in credentials to an assistant.

What the assistant can change. When you explicitly ask it to, a connected assistant can record a keep, weak or reject rating on one of your video opportunities, and can start a video opportunity as a Tukey workspace. These are recorded in your Tukey account exactly as if you had done them in Tukey. An assistant cannot publish to or change your YouTube channel through Tukey, and Tukey does not request write access to YouTube.

Who receives it. Information an assistant retrieves from Tukey is sent, at your direction, to that assistant's provider (for example OpenAI for ChatGPT, or Anthropic for Claude), and that provider handles it under its own privacy terms.

What we keep about the connection. We store the assistant's registration (its name and the address it is sent back to), your consent, and the tokens that let the assistant call Tukey. We record that an assistant connected, which Tukey tool it called, and that you disconnected it, with the assistant's category (ChatGPT, Claude or other) and the tool name only; these records never contain your content.

Ending the connection. You can disconnect any assistant on Tukey's Connections page. Disconnecting deletes that assistant's authorization and its stored tokens, and Tukey issues it no new or refreshed tokens. Tukey's assistant endpoint is designed to refuse an access token the assistant already holds on its next request; in any case, an access token expires within one hour of being issued. Removing Tukey inside the assistant may not end Tukey's authorization by itself. Ratings and workspaces created at your request remain in your account until you change or remove them.

Cookies and data stored on your device

Tukey stores small amounts of data on your device to make the service work. When you sign in, we place cookies in your browser that keep you signed in and protect your session. When you connect a Google account, we place a short-lived cookie that secures the connection flow. When you connect an Instagram account, we likewise place a short-lived, first-party cookie that protects the connection flow against forgery; it never contains an access token. These cookies are set by us and are strictly necessary for the service to function. We do not use advertising cookies, and we do not use third-party analytics or tracking cookies. If your browser blocks cookies, sign-in will not work.

We also use a first-party browser identifier, stored in a cookie, and a short-lived browser session identifier, stored in your browser, to measure Tukey's own page views and form starts. They are set by us and are not used for advertising. On the Creator Survey page, if we offer Reddit ad measurement, we store your Allow or No thanks choice in a first-party cookie for six months. Only if you choose Allow does Reddit's measurement code run on that page and set Reddit's own cookie identifier in your browser. If you later turn measurement off, we stop it and expire that identifier. Reddit measurement never runs while you have opted out of Tukey's analytics or your browser sends a Do Not Track or Global Privacy Control signal.

Where information is stored

Your account data, YouTube-derived data, Instagram connection and public-content data, and chat history are stored in managed databases located in the United States (Supabase) and in Cloudflare's global object and vector stores. Service logs sit on Cloudflare's infrastructure. As a Canadian company we comply with applicable Canadian privacy law (PIPEDA), and we apply equivalent protections to users in other jurisdictions.

How long we keep information

YouTube. We keep your account data and the YouTube-derived data we hold for you as long as your account is active, and we keep that data current: information retrieved from YouTube API Services is refreshed on an ongoing basis, and stored YouTube data that has not been refreshed within 30 calendar days is deleted. If you disconnect a Google account from Tukey, we delete the access and refresh tokens for that grant immediately and stop reading from YouTube on your behalf. If the connection is not restored within 30 days, we also delete the stored analytics data and analytics-derived insights for that grant. Derived public information about channels you tracked may be retained because it is not personal to you.

Instagram. The access token from an Instagram login is not retained after the identity verification completes. Raw Reel media is processed transiently for analysis and is not retained as a media archive. The verified account binding, the bounded public evidence we retrieved (such as captions, timestamps, and public counts), and the derived profile and recommendations may be retained while needed to provide the service to you. Your Instagram information is deleted when you delete your Tukey account or following a verified deletion request, on the timelines described under Your choices.

If you delete your account (see below), we delete the personal information associated with it.

Creator Survey information is kept for the periods described under Creator Survey participants below.

Your choices

  • Revoke Tukey's access to YouTube. You can revoke Tukey's access to your Google account at any time at myaccount.google.com/permissions.
  • Disconnect inside Tukey. You can disconnect a YouTube channel inside Tukey, which removes the associated tokens and the channel from your account.
  • Disconnect a connected AI assistant. Open Connections in Tukey and choose Disconnect next to the assistant.
  • Revoke Tukey's Instagram authorization. You can remove Tukey at any time from your Instagram account's settings under Apps and Websites. Because Tukey does not retain the access token, revoking it does not by itself delete what Tukey already holds; request deletion as described next.
  • Access, correct, or delete your data, including Instagram data. Email legal@tukey.ai from the address on your Tukey account, or otherwise identify your Tukey account, and say what you are asking for. Never include an access token or a password in your request. We delete stored YouTube data within 7 calendar days of your request, delete the user-scoped Instagram binding, retained public evidence, and derived Instagram profile and recommendations under the same process, and complete the rest of the request within 30 days, or tell you why we cannot. Deleting your data from Tukey does not affect the data stored on YouTube or Instagram itself; to manage your data on those platforms, use them directly.
  • Creator Survey information. You do not need a Tukey account to ask for access to, or deletion of, your Creator Survey information. See Creator Survey participants below.
  • Reddit ad measurement on the Creator Survey. It is off unless you choose Allow on the Creator Survey page, and choosing No thanks does not affect your participation. You can turn it off at any time with the control on that page, which stops further measurement and expires Reddit's cookie identifier in your browser. A Do Not Track or Global Privacy Control signal from your browser also keeps it off.

Creator Survey participants

Tukey runs the Creator Survey: short interviews with creators about how they decide what to make next. This section explains how we handle information from people who fill in our Creator Survey form or take part in a Creator Survey interview. Taking part does not require a Tukey account. Where this section differs from the rest of this policy, this section applies to survey information.

What the form collects. When you submit the Creator Survey form, we collect:

  • your email address;
  • the link to your public channel or profile;
  • your primary publishing platform;
  • your answers to the five survey questions: the content formats you publish, how often in the past 30 days uncertainty about what to make next affected what you published, what makes choosing what to create next difficult for you, if anything, what you usually turn to when you need ideas or decide what to make next, and a short account of a recent time you chose what to make next;
  • your confirmation that you are 18 or older;
  • the time you submitted the form;
  • the UTM source, medium and campaign tags in the link you used to reach the form, when the link has them;
  • the hostname of the website that referred you to the form, but not the full address of the page that referred you.

If we invite you to an interview. We also collect the scheduling details needed to arrange the interview and the notes we take during it. With your separate consent, which we ask for at the start of the interview, we may also record and transcribe it. You can decline recording and still take part in the interview and receive the gift card.

How we use survey information. We use it only to:

  • understand how creators decide what to make;
  • select and contact people to invite to interviews;
  • run and review the interviews;
  • send the gift card to participants who complete an interview.

We do not use survey information for marketing. Submitting the form does not add you to a mailing list or waitlist, and it does not create a Tukey account.

Providers we use for the survey. Survey information is handled by these providers on our behalf:

  • Google — Google Calendar and Google Meet, to schedule and hold interviews and, if you agree, to record and transcribe them;
  • Supabase — to store form responses;
  • Amazon — only when needed to deliver your digital gift card.

Analytics and advertising. The form page uses the first-party analytics described under Cookies and data stored on your device. We may advertise the Creator Survey on Reddit, and the form page may ask whether you allow Reddit ad measurement, with equal Allow and No thanks choices. Nothing is sent to Reddit unless you choose Allow. If you do, Reddit's code on the page tells Reddit when you visit the page, start the form, and submit it, and our servers tell Reddit when your submission is saved, so we can see which ads work. Only after you choose Allow does Reddit receive browser technical information (such as the IP address and browser type that any web request reveals), its own cookie identifier, and the Reddit click ID from the ad you clicked. Reddit never receives your survey email, profile link, or answers, and our servers do not send Reddit your IP address or browser type. Declining does not affect your participation, and you can change your choice on the form page at any time.

How long we keep survey information.

  • We keep form responses for 90 days after you submit them.
  • We keep interview recordings and transcripts, and interview notes that identify you, for 90 days after the interview.
  • We may keep de-identified, aggregate survey findings.
  • We retain gift-card and payment records for as long as required by applicable tax and accounting laws.

Access and deletion. To ask for a copy of your survey information or for its deletion, email legal@tukey.ai from the email address you used on the form, or tell us that address. You do not need a Tukey account. We respond within 30 days. If we have already issued your gift card, deleting your survey information does not erase our accounting record of that card.

YouTube API Services

Tukey uses YouTube API Services. By using Tukey, you are also agreeing to be bound by the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy.

Google API Services User Data Policy

Tukey's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Instagram and Meta

Instagram is operated by Meta. Your use of Instagram, including any account you connect to Tukey, remains subject to the Instagram Terms of Use (https://help.instagram.com/581066165581870) and Meta's Privacy Policy (https://privacycenter.instagram.com/policy). Tukey is an independent service and is not endorsed by, affiliated with, or a partner of Meta or Instagram.

Children

Tukey is not intended for use by anyone under 13 (or the equivalent minimum age in your jurisdiction). We don't knowingly collect personal information from children.

Security

We protect personal information in transit (HTTPS) and at rest, restrict internal access to your data, and use database-level access controls to prevent cross-account leakage. No system is perfectly secure, but we treat your data with care.

Changes to this policy

If we change this policy in a material way, we'll update the effective date above and, if you have an account, notify you by email or in-app.

Contact

Tukey Inc., Toronto, Ontario, Canada
Email: legal@tukey.ai