Last updated: July 16, 2026
Account details you provide (name, email, profile picture, optional bio and social handles), the content you create (workspaces, projects, posts, captured items, settings), and technical data needed to run the service (session records with IP address and browser, known devices, and an audit trail of security-relevant actions).
To provide the service you signed up for (performance of a contract), to keep it secure and prevent abuse (legitimate interest), to meet legal and accounting obligations (legal obligation), and — only where you opt in — to send product news (consent, withdrawable any time in Settings → Notifications).
We don't sell your data. We share the minimum necessary with the providers below, each acting on our instructions:
| Provider | Purpose | Data |
|---|---|---|
| Stripe | Payments & billing | Billing identity, subscription status |
| Email provider (Resend) | Transactional email | Email address, name |
| Object storage (S3-compatible) | Image & backup storage | Uploaded images, encrypted backups |
| Redis | Sessions, caching, rate limiting | Session tokens, transient identifiers |
| Social platform APIs | Publishing & analytics | Post content, connected account tokens |
| OpenRouter (LLM) | AI generation features | Content you submit for generation |
| Optional sign-in (OAuth) | Profile basics you authorize |
We use only strictly-necessary cookies to keep you signed in and to protect against cross-site request forgery. We set no advertising, analytics, or third-party tracking cookies, so there is nothing to opt into.
Data is encrypted in transit (HTTPS/HSTS) and at rest. Connected social-account tokens and encrypted backups use AES-256-GCM with a rotating key ring; tenant data is isolated with database row-level security. Access is scoped to your workspace.
We keep your data while your account is active. Deleting your account or workspace starts a 14-day recovery window, after which it is permanently purged. Raw analytics snapshots are kept up to 24 months; the security audit trail up to 24 months.
You can access and export a machine-readable copy of your data, correct it, or permanently delete it at any time from Settings → Profile. You may also object to or restrict certain processing and withdraw marketing consent. To exercise these rights, use the in-app controls or contact us below.
Some sub-processors above may process data outside your country under appropriate safeguards (such as Standard Contractual Clauses).
Questions or requests? Contact the workspace operator that invited you, or the address in this deployment's footer.
Search for a command to run...