---
The -ify Suite ("we," "us," "our") operates the website https://theifysuite.com (the "Service"). This Privacy Policy explains how we collect, use, store, share, and protect information about you when you access or use our Service. It also describes your rights and choices regarding your information.
We are committed to protecting your privacy. Please read this Privacy Policy carefully. By using the Service, you consent to the practices described in this document. If you do not agree with this Privacy Policy, please do not use the Service.
This Privacy Policy should be read in conjunction with our Terms of Service.
---
When you create an account, we collect:
- Email address
- Password (stored in hashed, encrypted form via Supabase; we never store your plaintext password)
- Age confirmation (checkbox confirmation only; we do not collect your date of birth)
(b) Content You SubmitWhen you use our tools, we collect:
- YouTube video URLs that you submit for processing
- Any text inputs you provide as context for AI generation
(c) Saved OutputsWhen you choose to save AI-generated outputs, we store:
- Refined titles and descriptions (Draftify)
- Generated tag sets (Draftify)
- Thumbnail comparison results (Visual Lab)
- Video transcripts (Postify, where saved)
- Clip finder results (Postify)
- Chapter markers (Postify)
- Key takeaway outputs (Postify)
(d) CommunicationsIf you contact us via email at support@theifysuite.com, we collect the content of your communications and your email address.
We automatically collect the following usage metrics to enforce plan limits and improve the Service:
- Daily AI call count (resets at midnight UTC)
- Monthly save count per tool folder
- Monthly Postify video load count
- Account plan and subscription status
- Feature usage patterns (which tools are used and how frequently)
(b) Session InformationWe use browser localStorage to store:
- Session authentication tokens
- Temporary draft data pending account creation
- Last loaded Postify video state
We do not use cookies for tracking, advertising, or analytics purposes. Session tokens stored in localStorage expire in accordance with our authentication provider's settings.
(c) Log DataOur hosting provider (Vercel) automatically collects standard server log data, which may include:
- IP address
- Browser type and version
- Operating system
- Referring URL
- Pages visited and timestamps
- Error logs
This data is used solely for operational purposes and is governed by Vercel's privacy policy.
We do not collect:
- Payment card numbers, bank account details, or any financial account information (all payments are handled directly by Whop)
- Your full legal name
- Phone number
- Physical address
- Precise geolocation data
- Biometric data
- Demographic information beyond age confirmation
- Information from social media profiles
- Any data from YouTube videos beyond publicly available caption/transcript data and AI-processed outputs
---
We use the information we collect for the following purposes:
- Authenticating your identity and maintaining your session
- Processing YouTube video URLs through our AI tools to generate outputs
- Storing and retrieving your saved outputs
- Enforcing plan-based usage limits
- Providing customer support
- Sending transactional emails (account creation, email confirmation, password reset)
- Notifying you of material changes to these Terms or our Privacy Policy
- Responding to your support requests
- Analyzing aggregated, anonymized usage patterns to improve tool performance
- Identifying and fixing technical issues
- Developing new features based on usage trends
- Complying with applicable laws and regulations
- Detecting, preventing, and addressing fraud, abuse, and security incidents
- Enforcing our Terms of Service
- Responding to legal requests from law enforcement or government authorities
- Managing subscriptions and account statuses
- Processing refund requests
- Operating our affiliate program
---
We do not sell, rent, or trade your personal information to third parties. We share your information only in the following limited circumstances:
We share information with the following third-party service providers who assist us in operating the Service. Each provider is contractually obligated to protect your data and use it only for the purposes we specify:
(a) Supabase (Supabase Inc.)Role: Database storage and user authentication
Data shared: Email address, hashed password, saved outputs, usage metrics, session tokens
Location: United States
Privacy Policy: https://supabase.com/privacy
(b) Vercel (Vercel Inc.)Role: Application hosting and content delivery
Data shared: Server log data including IP addresses and request data
Location: United States (servers globally distributed)
Privacy Policy: https://vercel.com/legal/privacy-policy
(c) Google LLC (Gemini API)Role: AI processing of submitted video URLs and content
Data shared: YouTube video URLs, text inputs, contextual prompts
Note: YouTube video URLs you submit are transmitted to Google's Gemini API for processing. Google may process this data in accordance with its own privacy policies. We do not share your email address or account information with Google through this integration.
Privacy Policy: https://policies.google.com/privacy
(d) Whop (Whop Inc.)Role: Payment processing and subscription management
Data shared: Email address, subscription plan status
Note: Whop independently collects payment information directly from you. We do not receive or store your payment card details.
Privacy Policy: https://whop.com/legal/privacy/
(e) ngrok (ngrok Inc.)Role: Network tunneling for transcript service routing
Data shared: YouTube video URLs transmitted through transcript service requests
Privacy Policy: https://ngrok.com/privacy
We may disclose your information if required to do so by law, court order, or government request, or if we believe in good faith that such disclosure is necessary to:
- Comply with a legal obligation
- Protect and defend our rights or property
- Prevent or investigate possible wrongdoing in connection with the Service
- Protect the personal safety of users of the Service or the public
- Protect against legal liability
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or uses of your information and of any choices you may have.
We may share your information for other purposes with your explicit consent.
We may share aggregated, anonymized data that does not identify you individually with third parties for analytics, research, or business purposes.
---
We retain your account data (email address, usage metrics, saved outputs) for as long as your account remains active. If you delete your account, we will permanently delete your personal data from our active systems within thirty (30) days, subject to the exceptions in Section 4.3.
Saved outputs are retained until you delete them or your account is deleted.
We may retain certain data beyond the periods described above where:
- Retention is required by applicable law
- Retention is necessary for legitimate business purposes such as fraud prevention, dispute resolution, or enforcement of our Terms of Service
- Data has been anonymized and is retained in aggregate form for analytical purposes
Server log data retained by Vercel is subject to Vercel's data retention policies.
Communications you send to our support email may be retained for up to two (2) years for customer service and dispute resolution purposes.
---
We implement the following security measures to protect your information:
- Passwords are hashed and salted using industry-standard cryptographic methods through Supabase
- Data in transit is encrypted using TLS/HTTPS
- Access to user data is restricted to authorized personnel on a need-to-know basis
- Session tokens are stored in browser localStorage with appropriate expiration controls
Despite our efforts, no method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security of your information. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
In the event of a security breach that is reasonably likely to result in risk to your rights and freedoms, we will notify affected users within seventy-two (72) hours of becoming aware of the breach, to the extent practicable. Notification will be sent to the email address associated with your account.
You are responsible for maintaining the security of your account credentials. We strongly recommend using a unique, strong password for your account and not sharing your login credentials with others.
---
You have the right to access the personal information we hold about you and to request correction of any inaccurate or incomplete information. You can update your account information through the account settings in the Service. For additional requests, contact us at support@theifysuite.com.
You have the right to request deletion of your personal data. You can delete your account directly through the Service's account settings, which will initiate permanent deletion of your data within thirty (30) days. You may also contact us at support@theifysuite.com to request deletion.
Upon request, we will provide you with a copy of your personal data in a structured, commonly used, machine-readable format to the extent technically practicable.
You may opt out of receiving non-essential communications from us at any time by contacting us at support@theifysuite.com. Note that you cannot opt out of receiving transactional communications that are essential to the operation of your account (e.g., account confirmation emails, security alerts).
You can clear your browser's localStorage at any time through your browser settings. Note that doing so will log you out of your account and clear any locally stored session data.
---
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional rights and provisions apply to you under the General Data Protection Regulation (GDPR) and applicable national data protection laws.
We process your personal data on the following legal bases:
- Contract performance: Processing necessary to provide the Service you have requested
- Legitimate interests: Processing for fraud prevention, security, and Service improvement where these interests are not overridden by your rights
- Consent: Where you have given explicit consent to specific processing activities
- Legal obligation: Processing required to comply with applicable laws
In addition to the rights described in Section 6, EEA users have the following rights:
(a) Right to Restriction: You have the right to request that we restrict the processing of your personal data under certain circumstances. (b) Right to Object: You have the right to object to processing of your personal data where processing is based on legitimate interests. (c) Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. (d) Right to Lodge a Complaint: You have the right to lodge a complaint with the supervisory authority in your EEA member state.Your personal data may be transferred to and processed in the United States and other countries that may not provide the same level of data protection as your home country. We rely on appropriate safeguards such as standard contractual clauses where required by applicable law.
For the purposes of the GDPR, The -ify Suite acts as the data controller for personal data processed through the Service.
---
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with the following additional rights:
You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
You have the right to request deletion of personal information we have collected from you, subject to certain exceptions permitted by law.
You have the right to request correction of inaccurate personal information we maintain about you.
We do not sell or share your personal information for cross-context behavioral advertising. You therefore have no need to opt out of such practices with respect to our Service.
We will not discriminate against you for exercising any of your CCPA/CPRA rights.
In the past twelve (12) months, we have collected the following categories of personal information:
- Identifiers (email address)
- Internet or other electronic network activity information (usage data, log data)
- Commercial information (subscription plan, transaction history via Whop)
- Inferences drawn from the above (feature usage patterns for Service improvement)
To exercise your California privacy rights, contact us at support@theifysuite.com. We will respond to verifiable requests within forty-five (45) days as required by law.
---
The Service is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from anyone under 18 years of age. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information as quickly as possible.
The Service is not subject to the Children's Online Privacy Protection Act (COPPA) because it is not directed to children under 13. However, as stated above, we do not permit use of the Service by anyone under 18.
If you believe we have inadvertently collected information from a minor, please contact us immediately at support@theifysuite.com.
---
We do not use third-party tracking cookies, advertising cookies, or behavioral analytics cookies. We do not participate in any ad networks or cross-site tracking programs.
We use browser localStorage (not cookies) to store session authentication tokens and temporary application state. This data is stored locally on your device and is not transmitted to third parties except as necessary for authentication with our service provider Supabase.
Our hosting provider Vercel may set technical cookies necessary for load balancing and security purposes. These cookies are strictly necessary for the operation of the Service and cannot be disabled.
We do not currently use third-party analytics services such as Google Analytics. Any usage analysis we conduct is based on aggregated data stored in our own systems.
---
The Service may contain links to third-party websites, including YouTube and other platforms. We are not responsible for the privacy practices of any third-party website. We encourage you to read the privacy policies of any third-party website you visit through links on our Service.
---
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by sending an email to the address associated with your account and by posting a notice on the Service. The "Last Updated" date at the top of this document will be revised accordingly. Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Privacy Policy, you must stop using the Service.
---
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
The -ify SuiteEmail: support@theifysuite.com
Website: https://theifysuite.com
We will respond to all legitimate privacy-related inquiries within thirty (30) days.
---
© 2026 The -ify Suite. All rights reserved.