Privacy Policy

This notice describes data handling in the current development preview. Operator and privacy contact information, retention periods and the commercial privacy notice must be completed before production access is opened.

Sign-in and security

We store your verified email address, account name, identity references and session records. Google sign-in uses Firebase to verify your identity and does not request permission to read your Gmail. Email sign-in sends a one-time code through the configured email provider. The database stores a digest of the code. Request IP addresses are used to derive rate-limit keys.

Workspace content

We store business details, prompts, media references, videos and task records. Uploaded media may be sent to configured AI providers to analyze content and generate videos. Connected publishing account sessions are stored encrypted; publishing requires the connection and actions you initiate.

Public media

Media is served from public OSS/CDN URLs. Anyone with a URL may access it. Removing a workspace record does not guarantee deletion of the underlying file or invalidate a previously shared URL. Public URLs do not automatically authorize community display.

Cookies and third parties

An HttpOnly cookie maintains your product session. Logging out revokes that session. Google sign-in loads the Firebase SDK only when requested; email delivery, media hosting, AI generation and social publishing use their respective configured providers.

Preview limits

This notice does not promise automatic deletion or a fixed retention period. Avoid sensitive content during preview. Account deletion and formal privacy request channels will be defined with the production operator details before launch.

Last updated: October 11, 2026