Privacy Policy

1. Information We Collect

We collect the following categories of information:

Account Information

• Name, email address, and password (encrypted) when you register
• Billing and payment information, processed by our third-party payment providers (see Section 3) — we do not store full payment card details ourselves
• Workspace and team member information you provide

Content & Usage Data

• Content you create, upload, or generate using the Service (posts, images, articles, prompts)
• Social media account connections you authorize (via OAuth) and associated metadata (post performance, engagement statistics)
• Usage data such as feature interactions, credit consumption, and login activity

Technical Data

• IP address, browser type, device information, and general location (city/country level)
• Log data collected automatically when you use the Service

2. How We Use Your Information

• To provide, operate, and maintain the Service, including generating and publishing content on your behalf as instructed
• To process payments and manage your subscription, credits, and billing history
• To send transactional communications (account verification, billing receipts, support responses, security alerts)
• To improve the Service, including analyzing aggregated usage patterns
• To detect, prevent, and address fraud, abuse, or violations of our Terms of Service
• To comply with legal obligations

We do not sell your personal information to third parties.

3. Third-Party Service Providers

We use the following categories of third-party service providers ("subprocessors") to operate the Service. Each processes data only as necessary to perform its function and under its own privacy and security terms.

4. AI Content Generation & Third-Party AI Providers

When you use AI-powered features (content generation, image generation, video generation), the relevant prompt and any content you provide is sent to the underlying AI provider you or the platform selects for that request, which may include Anthropic, OpenAI, Google, Perplexity, Mistral, Groq, xAI, Stability AI, or other providers integrated into the Service. Each provider processes this data under its own privacy policy and terms. We select and route requests to these providers to fulfill your generation request; we do not use your content to train our own foundation models.

If you use the "Bring Your Own Key" (BYOK) feature, requests are made using your own API credentials, and the relevant provider's terms govern that processing directly.

5. Connected Social Media Accounts

When you connect a social media account (Facebook, Instagram, LinkedIn, YouTube, Pinterest, Twitter/X, Threads, Telegram, or others as supported), we access only the data and permissions necessary to publish content and retrieve analytics on your behalf, as authorized through that platform's official OAuth process. You can revoke this access at any time, both within the Service and directly through the connected platform's own settings — see our Data Deletion Instructions for step-by-step details.

5A. Google User Data (Search Console, Analytics, Gmail)

You can choose to connect Google services to the Service. We access Google user data only after you approve it on Google's own consent screen, and only for the features described here.

• Google Search Console (permission to view and manage Search Console data for your verified sites): we read search performance (queries, clicks, impressions, positions) and the index status of your pages for the website you connect, and show them to you in the SEO Suite and Content Studio. When you press "Submit to search engines" for a published article, we submit your website's sitemap to Search Console so Google can find the new page. We only act on the Search Console property you select, and we never add, remove or change your properties, users or other settings.
• Google Analytics (read-only): we list the Google Analytics 4 properties you can access so you can pick your website's property, then read sessions, users and conversions from social media traffic (source, medium and campaign) for that property and show them to you in Website Attribution, so you can see which of your posts bring visitors to your website. We never change your Analytics settings.
• Gmail (send only): if you connect Gmail, we send emails that you write or approve in the Service (for example outreach emails) from your Gmail address. We cannot read, search or delete the emails in your mailbox.
• Your Google account email address: shown in the Service so you can see which Google account is connected.

How Google user data is used and shared. Google user data is used only to provide and improve the user-facing features you use, as described above. Search phrases from your Search Console may be included in instructions sent to our AI providers (see Section 4) to plan or improve content for your own website at your request. We do not sell Google user data; we do not use it, or transfer it, for advertising, retargeting or personalized ads; we do not use it to build profiles or for credit decisions; and we do not use it to develop, improve or train generalized AI or machine-learning models. We do not allow humans to read it, except with your permission for a specific support request, where necessary for security or to comply with the law. We share it only with the service providers needed to run these features, under the same restrictions.

Auto Presence AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Storage, removal and revoking access. Google access tokens are stored encrypted. You can disconnect Search Console, Analytics or Gmail at any time in the Service, which deletes the stored tokens; you can also remove Auto Presence AI's access at myaccount.google.com/permissions. Search results and reports fetched from Google are kept only as long as needed to show them to you and are deleted when you delete your account, or earlier on request (see Section 8 and our Data Deletion Instructions).

6. Cookies & Analytics

We use essential cookies required for authentication and core functionality, and Google Analytics to understand aggregate website traffic and usage patterns. Google Analytics may use cookies and similar technologies; you can opt out using your browser settings or Google's Analytics opt-out tools. We do not use tracking cookies for third-party advertising.

Visitors in the European Union, European Economic Area, United Kingdom and Switzerland are asked before any Google Analytics cookies are set, and nothing is loaded unless they accept. Every visitor can change their choice at any time using the "Cookie settings" link in the website footer. Google Analytics is only used on our public website, never inside your logged-in account.

7. Data Retention

We retain account and content data for as long as your account remains active. If you delete your account, we delete or anonymize personal data within a commercially reasonable period, except where retention is required for legal, tax, billing dispute, or fraud-prevention purposes.

8. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing.

If you are in the European Economic Area or UK (GDPR)

You have the rights listed above, plus the right to lodge a complaint with your local data protection authority. Our legal basis for processing includes performance of a contract (providing the Service), legitimate interests (improving and securing the Service), and consent (where applicable, e.g. marketing communications).

If you are a California resident (CCPA/CPRA)

You have the right to know what personal information is collected, request deletion, and opt out of the "sale" or "sharing" of personal information. We do not sell personal information as defined under CCPA/CPRA.

To exercise any of these rights, contact us using the details in Section 14.

9. International Data Transfers

As a global service, your information may be processed and stored in countries other than your own, including the United States, via our infrastructure and subprocessors listed in Section 3. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for transfers of personal data originating from the EEA, UK, or Switzerland.

10. Security

We use industry-standard measures to protect your information, including encryption of sensitive data (such as API keys) at rest, JWT-based authentication, and role-scoped access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

12. Availability & Restricted Regions

Auto Presence AI is available globally, except where prohibited by applicable law, sanctions, or export control regulations. The Service is not currently available to users in Israel. We may update this list of restricted regions from time to time to comply with applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date above, and where appropriate, by additional notice (such as email).

14. Contact Us

Questions about this Privacy Policy or your data can be directed to: support@autopresenceai.com