Privacy Policy

1. Scope & Who We Are

This Privacy Policy describes how Autoadify, Inc. ("Autoadify") collects, uses, discloses, and protects personal information when you visit autoadify.com, create an account, or use our AI social media management platform (the "Service").

For users in the EEA and UK, Autoadify acts as the data controller for personal data processed under this Policy. Where we process data on your behalf (e.g., your social media audience data), we act as a data processor.

This Policy does not apply to third-party platforms (Meta, TikTok, Google, LinkedIn, etc.) that you connect to Autoadify. Their own privacy policies govern their data practices.

2. Information We Collect

2.1 Account & Identity Information

• Name, email address, and password (hashed) when you register;
• Business name, website, and industry (optional profile information);
• Billing name, address, and payment card details (processed by our payment processor — we do not store full card numbers).

2.2 Social Media Account Data (via OAuth)

When you connect a social media account, the relevant platform provides us with an OAuth access token and, depending on the permissions you grant:

• your public profile information (username, profile picture, page/channel name);
• account identifiers required to publish content on your behalf;
• performance metrics (impressions, reach, engagement) for content published through Autoadify;
• audience demographics (in aggregate form only, where provided by the platform).

We do not access or store your social media passwords. OAuth tokens are encrypted at rest. You can revoke access at any time from your account settings or directly on the platform.

2.3 Content You Create or Upload

• Text, images, video, and audio you create using Autoadify's AI tools;
• Content prompts and instructions you submit to AI models;
• Scheduled posts and content drafts;
• Shopify and WooCommerce product data synced to your account (product names, images, descriptions, prices).

2.4 Usage & Technical Data

• Log data: IP address, browser type and version, OS, referrer URL, pages visited, timestamps;
• Device identifiers and session IDs;
• Feature usage patterns (tools used, scheduling frequency, AI model preferences);
• Error logs and crash reports to diagnose and fix bugs.

2.5 Communications

• Messages you send to our support team;
• Feedback, survey responses, and feature requests;
• Waitlist registration email addresses.

3. How We Use Your Information

We do not use your content, social media data, or AI-generated outputs to train AI models without your explicit, informed consent.

4. How We Share Your Information

We do not sell your personal information. We share data only as described below:

4.1 Service Providers

We use trusted third-party vendors who process data on our behalf under data processing agreements:

• Supabase — database hosting and authentication (AWS data centres);
• Vercel — web hosting and edge network;
• Stripe (or equivalent) — payment processing;
• Resend / SendGrid / Postmark (or equivalent) — transactional email;
• Vercel Analytics — privacy-preserving usage analytics.

4.2 Legal Disclosures

We may disclose your information if required by law, court order, or governmental authority, or where disclosure is necessary to protect our rights, prevent fraud, or respond to a safety emergency.

4.3 Business Transfers

If Autoadify is involved in a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy.

4.4 With Your Consent

We may share data with additional third parties where you have provided explicit consent.

5. Social Media Platform API Data

5.1 Meta (Instagram & Facebook)

We request OAuth permissions to publish posts, stories, and reels and to retrieve account insights. Meta user data is used solely to provide the Service features you have enabled. We comply with Meta's Platform Terms and data use restrictions and do not share Meta user data with unrelated third parties.

5.2 TikTok

We request permissions to upload videos and retrieve basic account metrics. TikTok data is used strictly to fulfil the scheduling and publishing features you activate and is not shared with unrelated third parties.

5.3 YouTube / Google

We use YouTube's API Services to upload videos and retrieve performance data, limited to providing the video scheduling and analytics features you enable. You can revoke our access at any time via your Google Account security settings at myaccount.google.com/permissions. YouTube data is also governed by the Google Privacy Policy.

5.4 LinkedIn, Pinterest, Reddit, X (Twitter)

We access these platforms' APIs solely to publish content and retrieve basic performance metrics on your behalf. Data obtained is used only to provide the features you have enabled and is not used for advertising targeting or sold to third parties.

5.5 E-Commerce (Shopify & WooCommerce)

When you connect your store, we access product catalogues (names, images, descriptions, prices, URLs) to generate and schedule social media content. We do not access customer data, order data, or payment information from your store.

6. AI Model Providers

To generate content, Autoadify sends your prompts and inputs to third-party AI providers via their APIs:

We do not pass personally identifying information (such as your name or email) to AI providers unless you include it in your prompts. We select providers who commit to not using API input data to train their models where such opt-out policies are available.

7. Data Retention

When you delete your account, we will delete or anonymise your personal data within 30 days, subject to legal retention requirements.

8. Security

We implement industry-standard security measures to protect your data:

• Encryption in transit: all data transmitted uses TLS 1.2+;
• Encryption at rest: sensitive data (OAuth tokens, passwords) is encrypted using AES-256 or equivalent;
• Access controls: role-based access limits employee access to personal data on a need-to-know basis;
• Vulnerability management: regular security assessments and dependency updates;
• Incident response: we maintain a data breach response plan and will notify affected users and authorities within the timeframes required by law.

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@autoadify.com.

9. Your Rights — EEA & UK (GDPR)

• Right of Access: request a copy of the personal data we hold about you;
• Right to Rectification: request correction of inaccurate or incomplete data;
• Right to Erasure: request deletion of your personal data (subject to legal retention obligations);
• Right to Restriction: request that we restrict processing in certain circumstances;
• Right to Data Portability: receive your data in a machine-readable format;
• Right to Object: object to processing based on legitimate interests (including direct marketing);
• Right to Withdraw Consent: withdraw consent at any time where processing is consent-based;
• Automated Decision-Making: right not to be subject to decisions made solely by automated processing that produce significant legal effects.

You also have the right to lodge a complaint with your national supervisory authority (e.g., the ICO in the UK).

International Transfers

Autoadify operates from the United States. If you are in the EEA or UK, your data may be transferred to and processed in the US and other countries. We rely on Standard Contractual Clauses (SCCs) and other approved mechanisms to ensure adequate protection for cross-border transfers.

10. Your Rights — California (CCPA / CPRA)

If you are a California resident, the CCPA as amended by the CPRA grants you the following rights:

• Right to Know: request information about categories and specific pieces of personal information we collect, use, disclose, and sell;
• Right to Delete: request deletion of your personal information;
• Right to Correct: request correction of inaccurate personal information;
• Right to Opt Out of Sale / Sharing: we do not sell or share personal information for cross-context behavioural advertising;
• Right to Limit Sensitive Personal Information: we do not use sensitive personal information beyond what is necessary to provide the Service;
• Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA rights.

To exercise your rights, email privacy@autoadify.com with the subject "California Privacy Rights Request." We will verify your identity and respond within 45 days.

Categories of Personal Information (12-Month Summary)

We collect identifiers, internet activity data, commercial information (subscription records), and inferences drawn from usage data. We disclose these categories to service providers for business purposes. We do not sell personal information.

11. Cookies & Tracking Technologies

We do not use third-party advertising cookies or cross-site behavioural tracking technologies. You can control cookies through your browser settings. Disabling essential cookies will impair Service functionality.

12. Children's Privacy

The Service is not directed to children under 13 years of age (or under 16 in certain EEA member states). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without verified parental consent, we will delete it promptly.

If you believe a child has provided us with their personal information, contact us at privacy@autoadify.com.

13. Third-Party Links & Integrations

The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to read the privacy policies of any third-party services you connect or visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email and/or a prominent notice at least 14 days before taking effect. We encourage you to review this Policy regularly.

15. Contact Us & Data Protection Officer

For questions, requests, or complaints regarding this Privacy Policy, please contact:

If you have an unresolved privacy concern, you may contact your local data protection authority.