Privacy Policy

Effective date: July 14, 2026

[App Name] ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Account information

When you register, we collect your name, email address, and company name. Authentication is handled by Clerk; we do not store passwords.

Payment information

Billing is processed by Stripe. We do not store credit card numbers or bank details. We receive only a tokenized reference from Stripe to manage your subscription.

Content you create

Images, videos, captions, campaign data, and brand settings you create or upload are stored on our servers and used solely to provide the service to you.

Usage data

We collect server logs (IP address, browser type, pages visited, timestamps) to operate and secure the service. We do not sell this data.

Cookies

We use strictly necessary cookies for authentication and session management. We use third-party cookies for embedded live chat (Crisp) and, only with your consent, for product analytics (PostHog) — declining analytics consent keeps PostHog from recording your activity. You can disable third-party cookies in your browser settings.

2. How We Use Your Information

• To create and manage your account and workspace.
• To process payments and send billing notifications via email.
• To generate AI-assisted marketing content on your behalf.
• To publish content to the social platforms you connect.
• To send product updates and transactional emails (you can opt out of marketing emails).
• To detect and prevent fraud, abuse, or unauthorized access.
• To comply with legal obligations.

3. AI-Generated Content

Our AI Agent processes the prompts and brand context you provide to generate images, videos, and copy. Your inputs may be sent to third-party AI providers — Google (Vertex AI / Gemini), Anthropic (Claude), OpenAI, fal.ai (which hosts inference for some image and video models), HeyGen, and ElevenLabs — solely to fulfill your request. We do not use your content to train AI models.

4. Social Platform Integrations

When you connect a social account (Instagram, Facebook, LinkedIn, TikTok, WhatsApp, or Google Business Profile), we store only the access tokens needed to publish on your behalf, encrypted at rest. We do not read your followers' data or private messages.

5. Data Sharing

We do not sell your personal data. We share it only with:

• Service providers — Clerk (auth), Stripe (payments), Resend (email), Cloudinary (media storage), Railway (hosting), Inngest (background jobs), Crisp (support chat), PostHog (product analytics, only with your cookie consent), Upstash (rate limiting — processes IP addresses only).
• Social platforms you connect — Meta (Facebook/Instagram/WhatsApp), TikTok, LinkedIn, Google — only to publish content on your behalf and read back the engagement stats of what you published.
• AI providers — as described in Section 3.
• Legal authorities — when required by law or to protect our rights.

6. Data Retention

We retain your data for as long as your account is active. When a trial expires and the account is not upgraded, we block the account and permanently delete personal data within 30 days (GDPR right to erasure). You may also request deletion at any time by contacting us at maha110192@gmail.com.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Data portability (receive your data in a machine-readable format).
• Withdraw consent at any time (where processing is based on consent).

To exercise any right, email maha110192@gmail.com. We will respond within 30 days.

8. Security

We use HTTPS, row-level security in our database, and separate tenant data with cryptographic isolation. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Children

The service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy. When we do, we will revise the effective date above and, for material changes, notify you by email or in-app banner at least 14 days in advance.

11. Contact

Questions or requests: maha110192@gmail.com