Privacy

1. What we collect

Account: your email address and workspace settings.

Your business: public content from the website you give us, your Brand Profile, rules, and the content we create.

Connected accounts: access tokens for the platforms you connect, stored encrypted, plus the results of published posts (reach, clicks).

Free audit: the address you check and a one-way hash of your IP address for abuse prevention — never the IP itself.

2. Why we use it

Only to run and improve your marketing service, send you your Daily Brief and service emails, prevent abuse, and meet legal duties. We don't sell data and we don't run advertising trackers.

3. Who helps us

AI writing: OpenAI (API data isn't used to train their models). Images: Higgsfield. Email delivery, hosting and database providers process data on our behalf under data-processing agreements. We'll keep a current list on this page.

4. Cookies

We use one essential cookie to keep you signed in and a short-lived one while you connect an account. No advertising or cross-site tracking cookies.

5. How long we keep it

While your workspace is active. When you close it we delete your data within 30 days, except records we must keep by law. Audit results are kept for 90 days.

6. Your rights

You can access, correct, export or delete your data, and object to or restrict processing. Email us and we'll respond within 30 days. If you're in the EU or UK you can also complain to your data protection authority.

7. Security

Access tokens are encrypted at rest, sign-in links are single-use and expire in 20 minutes, and every automated action is logged with its reason.