Privacy Policy

1) Who We Are

TAP Commerce (“we”, “us”, or “our”) operates the NicheStats™ web application (“the Service”). This Privacy Policy explains how we collect, use, share, and protect personal data when you use the Service. For the purposes of the GDPR, we act as the data controller.

2) Information We Collect

Google account data (OAuth): name, email address, and profile image to create and authenticate your account.
Subscription & billing data: subscription plan and status, and related billing metadata (e.g., customer or invoice identifiers) processed by Stripe. We do not store full card numbers or sensitive payment credentials.
Usage & interaction data: in-app interactions (e.g., which subniches you view and timestamps) used for service operation, security, debugging, and product improvements.
Technical & log data: IP address, device/browser information, error and security logs used for security, fraud prevention, and service stability.
Cookies & local storage: essential authentication/ session handling and preference storage. We do not use advertising or marketing cookies. (See our Cookie Policy.)

3) Public YouTube Data

The Service analyzes publicly available YouTube video and channel data obtained via the YouTube Data API and presented in aggregated and analytical form. This does not include private user data from YouTube.

4) AI-Generated Content

Certain features of the Service may provide AI-generated insights (for example: summaries, title ideas, tag ideas, or strategy suggestions). These outputs are provided for informational purposes only and may contain inaccuracies or omissions.

AI outputs may be generated based on aggregated, non-private data and cached securely for performance and cost control.
We do not use your personal data to train AI models.

5) How We Use Your Information (Purposes & Legal Bases)

Provide and operate the Service (performance of a contract with you).
Authenticate and secure accounts (legitimate interests; legal obligations where applicable).
Process subscriptions and payments via Stripe (performance of a contract; legitimate interests).
Improve features, reliability, and performance (legitimate interests—service quality and stability).
Communicate service-related updates (performance of a contract; legitimate interests). You can opt out of non-essential messages where applicable.
Comply with legal obligations (legal obligations).

6) Sharing Your Information

We do not sell personal data. We share data only as needed to operate the Service and comply with law:

Payments: Stripe processes billing data securely.
Service providers: hosting, infrastructure, monitoring, analytics (if used), and support—bound by confidentiality and data protection terms.
Legal & safety: to comply with law, enforce our terms, or protect rights, security, or property.

7) Data Retention

We keep personal data only as long as necessary for the purposes described above. Typical periods include: account and subscription records for the life of the account; billing records as required by tax/accounting law; and security logs for a limited period (typically up to 12 months) unless needed longer for investigations or legal obligations.

8) International Transfers

Personal data may be processed in Germany, the United States, and other countries where our service providers operate. Where required under the GDPR, we use appropriate safeguards for cross-border transfers (for example, Standard Contractual Clauses).

9) Security

We use appropriate technical and organizational measures (such as TLS in transit, restricted access, logging, and backups) to protect personal data. However, no method of transmission or storage is 100% secure.

10) Your Rights

If you are in the EU/EEA, you have rights under the GDPR, including access, rectification, erasure, restriction, portability, and objection (including to processing based on legitimate interests). You may also withdraw consent where processing relies on consent.

If you are a California resident, you may have rights under CCPA/CPRA (e.g., access, deletion, correction). We do not “sell” personal information as defined by CCPA/CPRA.

To exercise your rights, contact support@nichestats.com. We may request information to verify your identity and will respond within the time required by applicable law. You can also lodge a complaint with your local supervisory authority (e.g., an EU Data Protection Authority).

11) Children’s Privacy

The Service is not intended for individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it promptly.

12) Third-Party Policies

13) Changes to This Policy

We may update this Privacy Policy from time to time. We’ll post the updated version on this page with a revised “last updated” date and, if changes are material, we will provide additional notice where required by law.

14) Contact

For privacy inquiries or data-subject requests, contact: support@nichestats.com