Privacy Policy

Account data: the email address you sign up with, and the authentication record held by our identity provider. We do not store your password ourselves.

Content you create or upload: briefs, prompts, brand assets, images, captions and campaign settings you enter into the workspace, together with the outputs generated from them.

Connected channel data: when you link a social account, we store the access tokens and the account identifiers needed to publish and to read back the posts you asked us to publish.

Usage and technical data: pages visited, feature actions, browser and device type, IP address and timestamps, collected through server logs and our hosting provider.

To provide the service: generate creative, schedule and publish posts to channels you connected, and show results back to you.

To operate and secure the service: authentication, rate limiting, abuse prevention, debugging and backups.

To communicate: service notices, billing messages and replies to enquiries you send us.

We do not sell personal data, and we do not use your uploaded brand content to train our own models.

Hosting and database: Vercel (application hosting) and Supabase (authentication, database, file storage).

AI providers: content you submit for generation is sent to the model provider selected in your workspace, which may include Google (Gemini), Together AI, xAI and kie.ai. Requests are sent only to run your task.

Channel APIs: Meta (Facebook, Instagram) and other platforms you connect, strictly to publish or read the content you request.

Some of these providers process data outside the Republic of Korea, including in the United States.

Account and workspace content is kept while your account is active. When you delete an item it is removed from the workspace, and residual copies in backups are removed on our regular backup cycle.

You can ask us to delete your account and its content at any time using the contact address below. Records we must keep by law (for example transaction records) are retained for the period the law requires.

You can request access to, correction of, or deletion of your personal data, and you can withdraw consent for optional processing.

You can disconnect any linked social account at any time in Settings, which revokes the stored token.

To exercise any of these rights, write to the address in the contact section. We reply within the period required by applicable law.

Traffic is served over HTTPS, access to the workspace requires authentication, and API requests are rate limited and authorised per user.

No system is perfectly secure. If a breach affects your data we will notify you and the competent authority as required by law.

The service is intended for business use and is not directed at children under 14.

If this policy changes materially we will post the updated version on this page and change the date above before the change takes effect.