Privacy Policy

Last updated October 14, 2026. This is an early-stage draft, not reviewed by a lawyer yet — treat it as a plain-language description of current practice, not a finished legal document.

What we collect

• Account info: your email, an optional display name, and a password (stored as a salted PBKDF2 hash — we never see or store it in plain text)
• Agent configuration you write: your business's website, who you're targeting, what counts as a fit, and the voice you want replies written in
• Lead data: post content, links, and drafted/sent replies that you add or that come in through a connected platform
• Connected accounts: the login session X, Reddit or another platform gives the isolated browser you log in through (never your password), kept inside your workspace's own container, plus the account's numeric id, which we use to stop one account earning referral credit more than once
• Billing: your plan, and Paystack's customer and subscription references. Card details are entered on Paystack's checkout and never reach us.
• Referrals: which workspace referred yours, if any
• Usage counts: how many free drafts you've used and how many referral-earned sends you have left
• Two cookies: one to keep you logged in, one to remember a referral link until you sign up

We don't run analytics or advertising trackers on this site today. If that changes, this page will say so before it happens, not after.

How we use it

To run your account: searching for posts through your connected account, scoring them against your own criteria, drafting replies in your voice, and, on Pro only, sending them the way you've configured (your approval, or auto mode if you turn it on). On the free plan nothing is ever posted from your account. Your edits improve your own agent's future drafts, not a shared or cross-account model. We also email you about your account: failed payments, a platform that disconnected, a search that keeps failing.

Who it's shared with

• Model providers — post text and the business context you provide are sent to a language-model API to score posts and draft replies. That's a required part of how the product works.
• X, Reddit and the other platforms you connect: used to search and to check your connection, and, on Pro, to post a reply when you approve it or have auto mode on.
• Paystack processes payments for Pro. It receives your email and the card details you enter on its checkout. See Paystack's own privacy policy.
• Network provider: if you choose a location for an agent, its traffic to the platform is routed through a network provider so it comes from an IP address in that country. The provider only carries that traffic; we don't send it any of your account data.
• country.is: when you open a page that shows a price, your IP address is looked up there to find your country, so the price can be shown in your currency. We keep the result in memory for a day and don't store it.
• ZeptoMail (Zoho) sends our account emails, so it receives your email address and the message.

We don't sell data, and we don't share it with ad networks — there aren't any integrated.

Cookies

Two cookies, both httponly and neither used for tracking or advertising: the session cookie that keeps you logged in, and a referral cookie set only when you arrive through someone's referral link, kept for 30 days so the referral counts if you sign up. No consent banner is shown because nothing non-essential is set. If that changes, this section (and the banner) will too.

Data retention & deletion

Your data is kept until you delete it. A workspace owner can delete the workspace from the dashboard (Team, at the bottom): that removes its agents, leads and settings, destroys its container along with every logged-in browser session, and cancels any subscription. Two things are kept after deletion: the numeric ids of accounts that were connected, so a deleted workspace can't be used to claim referral credit again, and payment records Paystack keeps under its own legal obligations.

Security

Passwords are hashed (PBKDF2-SHA256, never stored or logged in plain text). Sessions are stored server-side and can be revoked everywhere at once from your account.

Changes

If this policy changes in a way that matters, the "last updated" date above will move and we'll flag it — not bury it.

Contact

A support address is being set up; until then, reach us through the account you signed up with.