Privacy Policy

Information we collect

• Account information — your name, email address, and password (stored only as a secure one-way hash).
• Business profile — the business details you provide (industry, website, brand voice, goals, products, and uploaded media) so the AI can create on-brand content for you.
• Content you generate — posts, captions, images, videos, campaigns, and review responses created through the Service.
• Connected social accounts — when you link an account (e.g. Facebook, Instagram, Google, LinkedIn, X), we receive an access token and basic account/page information needed to schedule, publish, and read engagement on your behalf. Access tokens are encrypted at rest and are never shown or shared.
• Usage and billing data — how you use the Service, AI/image/video usage for quota and billing, and subscription status.

How we use information

• Provide, operate, and improve the Service.
• Generate content and recommendations tailored to your brand.
• Schedule and publish content to the social accounts you connect, and report analytics and reviews back to you.
• Process subscriptions and enforce plan limits.
• Secure the Service, prevent abuse, and comply with law.

We do not sell your personal information, and we do not use data obtained through platform APIs (such as Meta) for advertising or for any purpose other than providing the Service to you.

Platform data (Meta and other integrations)

When you connect a Facebook Page or Instagram account, we use Meta's APIs solely to perform the actions you request — publishing content you approve and reading engagement metrics for your own accounts — under the permissions you grant during connection. We store only the encrypted access token and the identifiers needed for those actions. You can revoke our access at any time (see "Your choices" and our Data Deletion instructions), after which we stop accessing the platform and delete the stored token.

Service providers we share with

We share information only with vendors that help us run the Service, under agreements that limit their use of it:

• AI providers (e.g. Anthropic, Google) to generate content, images, and video.
• Social platforms (e.g. Meta/Facebook/Instagram, Google, LinkedIn, X) to publish and read your connected accounts.
• Payments (Stripe) to process subscriptions.
• Email (Resend) to send transactional messages such as password resets.
• Hosting/infrastructure (Railway, Vercel) to run the application and store data.

Data retention and deletion

We keep your information for as long as your account is active. You can delete a business (which removes its content, schedules, reviews, products, and connected accounts) from your dashboard, or delete your entire account by contacting us. See our Data Deletion page for full instructions. We honor deletion requests within 30 days, except where retention is required by law.

Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), encryption at rest for connected-account tokens, and hashed passwords. No method of transmission or storage is 100% secure, but we work to protect your information.

Your choices

• Disconnect any social account from the Service at any time.
• Revoke our access from the platform itself (e.g. Facebook → Settings → Apps and Websites).
• Access, correct, or delete your data by contacting us.

Children

The Service is intended for businesses and users 18 and older. We do not knowingly collect personal information from children.

Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions or requests? Email us at andy1gext2@gmail.com.