Legal
Privacy Policy
Last updated September 2026. This is a template for review by your counsel and is not legal advice.
What we collect
- Account details: your name, email address and, if you sign in with Google, your Google account id and profile picture. We never see your Google password.
- Content you create: character bibles, prompts, scripts, captions, uploaded reference or product images, and generated images and videos.
- Connected social accounts: the handle, display name, avatar and account type of each account you link, plus post ids and performance numbers (views, likes, shares, comments) for posts published through the service. Social logins are held by our publishing provider; we do not store your social passwords.
- Usage and security data: credits spent, jobs run, API requests, IP address and sign-in attempts, used for billing, rate limiting and abuse prevention.
- Payment details are handled by our payment processor; we never see full card numbers.
How we use it
- To run renders, store your library, publish and schedule posts you ask for, and show you analytics and best-time suggestions based on your own accounts.
- To verify your email, prevent duplicate free-credit claims and bot signups, and enforce rate limits.
- To bill you and show your usage ledger.
- To detect misuse, such as attempts to depict real people, minors or explicit content.
- To improve the product in aggregate. We do not sell personal data and do not use your content to train our own models.
AI processing and labeling
- Prompts, scripts and reference images are sent to the AI model providers that power the service (for example text, image and video models) only to fulfill your request.
- Posts published through the service carry an AI-generated disclosure and, where supported, the platform's AI-content label.
Service providers
Authentication (Supabase, including Google sign-in), social publishing and analytics (Post for Me and the networks you connect), AI model routing (OpenRouter and model providers), hosting, and payments (Stripe). Each receives only what it needs to perform its function.
Retention and deletion
- You can delete characters, videos, schedules and posts from the studio at any time. Deleting a post here does not delete it from the social network; remove it there too.
- Deleting your account removes your content within 30 days, except records we must keep for billing, fraud prevention (such as a hashed record that an email already claimed free credits) or legal reasons.
Cookies
We use a first-party session cookie to keep you signed in and short-lived cookies during Google sign-in. We do not use third-party advertising cookies.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data and to object to certain processing. Contact us and we will respond within 30 days.
Contact
Privacy questions or requests: hello@clickpop.ai.