Privacy Policy

This Privacy Policy explains how AutoContent (“AutoContent,” “we,” “us,” or “our”) collects, uses, and shares information when you use the autocontent.social website, applications, and related services (the “Service”). By using the Service, you agree to this Policy. Capitalized terms not defined here have the meaning given in our Terms of Service.

1. Information we collect

• Account information. Your name, email address, and password (which we store hashed, never in plain text). If you sign in with Google, we receive the basic profile information Google shares.
• Business and brand content you provide. The websites, blog posts, articles, PDFs, transcripts, images, brand assets, and voice and style preferences you upload or configure.
• Content we ingest on your instruction. When you point the Service at a website or other source, we crawl and store text and media from it so we can generate content for you.
• Connected social accounts. When you connect a platform (such as Instagram, TikTok, Facebook, YouTube, LinkedIn, or X), we receive the access tokens and account details needed to publish on your behalf and retrieve engagement metrics on your posts.
• Payment information. Subscription and billing details are processed by Stripe. We do not store your full card number; we receive limited information such as billing status and the last four digits.
• Usage and device data. Log data, IP address, browser and device type, pages viewed, and actions taken in the Service.
• Cookies and similar technologies. Used to keep you signed in, remember preferences, and measure usage.

2. How we use information

We use the information we collect to:

• provide, operate, secure, and support the Service;
• ingest your sources and generate, schedule, and publish content;
• process payments and manage your subscription;
• retrieve and display engagement analytics on your posts;
• communicate with you about your account, support requests, and updates;
• improve and develop the Service;
• detect, prevent, and address fraud, abuse, and security issues; and
• comply with our legal obligations.

3. AI processing

To generate content, we send Your Content and related inputs to third-party AI providers that power text, image, and video generation. These providers process the data to return Output to us and are contractually limited in how they may use it. We do not sell your information, and we do not authorize our AI providers to use Your Content to train their models except as needed to provide their service to us.

4. How we share information

We share information with the following categories of recipients. We do not sell your personal information.

• Service providers (subprocessors) who help us run the Service under contracts that limit their use of the data, including: payment processing (Stripe); social publishing and metrics (Post for Me); content ingestion and web crawling (Apify); transactional email (Resend); AI content generation (providers such as OpenAI, Google, Anthropic, and BytePlus); and hosting and infrastructure (such as Railway, Vercel, and Amazon Web Services).
• Social media platforms, when you direct us to publish or retrieve data on your connected accounts.
• Legal and safety, when we believe disclosure is required by law or necessary to protect the rights, safety, or integrity of users, the public, or the Service.
• Business transfers, in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

5. Data retention

We keep your information for as long as your account is active and as needed to provide the Service. After you close your account, we delete or de-identify your information within a reasonable period, except where we must retain it to comply with legal, accounting, or security obligations.

6. Security

We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and hashed passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can update much of your information in your account settings or by emailing hello@autocontent.social, and you can disconnect any social account at any time. We honor applicable privacy laws, including the GDPR and the CCPA/CPRA, where they apply to you.

8. International data transfers

We are based in the United States and process information there. If you access the Service from outside the U.S., you understand that your information will be transferred to and processed in the U.S. and in other countries where our providers operate, which may have different data-protection laws than your own.

9. Cookies

We use cookies and similar technologies to operate the Service, keep you logged in, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect how the Service works.

10. Children’s privacy

The Service is for business use by adults. It is not directed to children under 18, and we do not knowingly collect personal information from them.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, for material changes, provide additional notice. Your continued use of the Service after changes take effect means you accept the updated Policy.

12. Contact

Questions or requests about your privacy? Email us at hello@autocontent.social.