Privacy Policy
Effective October 3, 2026
The short version. Tarin is bookkeeping, tax estimates and revenue insight for content creators. To do that we hold your financial data: what you connect (your bank through Plaid, Stripe, YouTube) and what you enter. We use it only to run Tarin for you. We don't sell it, we don't use it for advertising, and we never see your bank login.
This policy explains what information Tarinapp, Inc., a Delaware corporation doing business as Tarin ("Tarin", "we", "us"), collects through tarin.app, its waitlist, and the Tarin app at my.tarin.app (together, the "Service"), how we use and share it, and the choices you have.
Tarin is for businesses in the United States, and you must be at least 18 to use it. If you take part in our design partner program, the Design Partner Program Agreement also governs your data; where it and this policy differ, the one that protects you more applies.
1. Information we collect
Information you give us
- Account details: your name, email address and password (stored by our authentication provider as a one-way hash; we never see it), your workspace name and time zone.
- Team members: email addresses and roles of people you invite to your workspace.
- Business records you create: invoices (including your clients' names and email addresses, amounts and dates), recurring deals, categories, notes, and tax settings such as filing status and tax already withheld.
- Questions you ask Ask Tarin, our AI assistant, and its answers.
- Messages you send us, for example support requests.
- Waitlist sign-ups: your name and email address, and whether you want marketing email from us (a separate choice).
Information from accounts you connect
You choose which sources to connect, and you can disconnect them at any time.
- Bank and card accounts, through Plaid. Plaid handles your bank login; your bank credentials are never shared with Tarin. We receive account names and the last digits of account numbers, your institution's name, and transactions (amounts, dates, descriptions, merchant names and categories). Plaid's handling of your data is described in the Plaid End User Privacy Policy.
- Stripe. You give us a restricted, read-only API key. With it we read your balance activity: payments, fees, refunds, disputes and payouts.
- YouTube, through YouTube API Services. With your
permission through Google sign-in, we access your channel's ID and name
(
youtube.readonly) and your channel's estimated revenue by day (yt-analytics-monetary.readonly). See section 4 for how we handle data from Google.
To keep these connections working we store access tokens that Plaid, Stripe and Google issue to us. They are encrypted at rest with AES-256. Every connection is read-only: Tarin can't move money or make payments from any account.
When you disconnect a source, we stop retrieving data from it, revoke or delete its access token, and send the provider any required disconnection request. Data already imported stays in your books (see section 8).
Information collected automatically
- Cookies needed to run the Service: a sign-in session cookie and a cookie that remembers which workspace you have open. We don't use advertising cookies, analytics trackers, session recording or pixels, and we don't track you across other websites. Because of that, browser "Do Not Track" signals don't change anything we do. We honor Global Privacy Control and other legally required opt-out signals.
- Server logs: our hosting provider records technical information such as IP address, browser type and request times to operate and secure the Service.
- Fonts: our pages load fonts from Google Fonts, so Google receives your IP address when a page loads.
- Usage counts: how many Ask Tarin questions a workspace has used this month, to apply plan limits.
2. How we use information
- To provide the Service: import and categorize transactions, track invoices and deals, estimate taxes and set-asides, and show revenue and cash-flow insights.
- To power AI features you use: answering your Ask Tarin questions and suggesting categories for transactions (see section 3).
- To keep the Service secure, prevent fraud and abuse, and fix problems.
- To communicate with you about your account, security and changes to the Service.
- To comply with law and enforce our terms.
We don't sell your personal information, we don't share it for cross-context behavioral advertising, and we don't use your financial data to market to you.
We may use technical information about how the Service performs, and data that has been aggregated or de-identified so it can't reasonably be linked to you or your business, to operate, secure and improve the Service. Before we treat data as de-identified we take reasonable measures to keep it that way, and we don't try to re-identify it.
3. AI features
Tarin uses Anthropic's Claude models through Anthropic's commercial API. When you ask Ask Tarin a question, we send the question together with the financial context needed to answer it (for example totals, transactions, invoices and revenue, which can include revenue from YouTube). To suggest categories, we send transaction descriptions and amounts. Anthropic processes this data to return a response to us. Anthropic keeps these inputs and outputs for up to 30 days for safety and security purposes, then deletes them.
No training on your data. Neither Tarin nor our service providers use your data, or anything derived from it (including de-identified data), to train, fine-tune or evaluate AI models for their development or improvement. This applies while you use Tarin and to any data we keep afterwards. Using your data to produce your own results, and to check their quality and safety, isn't model training.
Suggested changes appear as proposals in your inbox. Only the actions you set to "Auto" in Settings apply on their own, and every change is recorded in your workspace's activity log.
4. Data from Google and YouTube
Tarin uses YouTube API Services. By connecting YouTube you agree to be bound by the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.
- What we access: your channel ID and name, and your channel's estimated revenue by day. We don't access your videos, comments, subscribers or any other YouTube data, and we can't post or change anything on your channel.
- How we use it: only to show your YouTube income in your books, revenue reports, tax estimates and Ask Tarin answers.
- Who it's shared with: people in your Tarin workspace, and the service providers in section 5 (including Anthropic when you ask Ask Tarin a question) solely to provide those features.
- Limited Use: Tarin's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, don't sell it, and don't use it to develop, improve or train generalized AI or machine-learning models. No one at Tarin reads it except with your permission, for security purposes, to comply with law, or when it is aggregated and anonymized for internal operations.
- Revoking access: you can disconnect YouTube in Tarin under Settings → Connections, or revoke Tarin's access at any time from your Google account's security settings page. Either way, we delete the YouTube data we stored (your channel details and imported YouTube revenue) within 7 days. Unlike other sources, YouTube history doesn't stay in your books after you disconnect.
5. How we share information
We share information only as described here.
- People in your workspace: members you invite can see your workspace's data according to their role.
- Service providers that process data on our behalf, under contracts that limit their use of it:
| Provider | What they do for Tarin |
|---|---|
| Supabase | Database and sign-in (authentication) |
| Vercel | Hosting for tarin.app and the Tarin app |
| Anthropic | AI processing for Ask Tarin and category suggestions |
| Plaid | Bank and card connections you choose to make |
| Stripe | Reading your Stripe account activity with the key you provide |
| YouTube data you choose to connect; Google sign-in; web fonts |
- Legal reasons: when required by law or legal process, or to protect the rights, safety and security of our users, the public or Tarin.
- Business transfers: if Tarin is involved in a merger, acquisition or sale of assets, your information may transfer as part of it, and this policy will continue to apply to it.
6. Who at Tarin can access your data
Workspaces are isolated from each other at the database level. A small number of authorized Tarin engineers have access to our production systems, and use it only to operate and secure the Service, to fix problems, or to help you when you ask for support. Every change made to your books in the app is recorded in your workspace's activity log.
7. Security
We encrypt data in transit with TLS, encrypt stored third-party access tokens with AES-256, and never receive your bank login. No system is perfectly secure. If we confirm unauthorized access to your data, we'll investigate, contain it, and notify you without undue delay, and sooner where the law requires.
8. Retention and deletion
We keep your information while your account is open. Disconnecting a source stops new imports; transactions already in your books stay so your records remain complete, unless you ask us to delete them.
When your account closes, or the design partner program ends:
- For 30 days you can export your data: download your transactions, income statement and Schedule C summary as CSV files from the Reports page, or ask us for a full copy in a commonly used format.
- Within 60 days after that, we delete or de-identify your data in our active systems.
- Copies in routine backups are deleted through the normal backup cycle, no later than 180 days after your account closes.
We may keep records longer only where we need them to meet legal obligations or to establish, exercise or defend legal claims, and only for that purpose. You can also ask us to delete your data sooner. YouTube data is deleted within 7 days of disconnecting or revoking access (section 4).
9. Your choices and rights
- Update your profile and workspace details in Settings.
- Disconnect any connected source in Settings → Connections.
- Ask us for a copy of your data, to correct it, or to delete it.
- Depending on where you live (for example California), you may have additional rights to know, access, correct or delete your personal information, and to not be discriminated against for using them. Email us to make a request; we'll verify your identity before acting on it.
10. Children
Tarin is for adults. You must be at least 18 to join the waitlist or create an account. The Service isn't directed to children under 13, and we don't knowingly collect their personal information; if we learn we have, we'll delete it.
11. Where your data is stored
Tarin is based in the United States, and your data is stored and processed in the United States.
12. Changes to this policy
If we make material changes, we'll notify you by email or in the app before they take effect, and update the date at the top of this page.
13. Contact us
Tarinapp, Inc.
2011 Park Blvd
Palo Alto, CA 94306
privacy@tarin.app