Privacy Policy

1. What we collect

Information you give us

• Account — email address, name, and a password hash (we never store the password itself). If you sign in with Apple or Google, we receive the identifier and email they release to us.
• Brand profile — your product URL, description, audience, niche, keywords, tone preferences, banned phrases and call to action. This is the material used to generate your content.
• Uploads — demo videos, screenshots, logos, b-roll and audio you add to your Library.
• Support and feedback — anything you send us, including optional screenshots.

Information from connected platforms

When you connect TikTok, Instagram, YouTube or LinkedIn we receive, and store, an access token, a refresh token where the platform issues one, your account identifier, handle, display name and avatar, plus the metrics for posts we published for you.

We request the narrowest scopes that let us publish and read back the performance of our own posts. We do not read your direct messages, your followers’ personal data, or posts we didn’t create. Tokens are used only by our server, are never sent to your browser, and are deleted when you disconnect the account.

Information collected automatically

• Product analytics — which screens you use and which actions you take, so we can tell what’s working. Collected via PostHog.
• Error reports — stack traces and device/browser details when something crashes. Collected via Sentry.
• Technical logs — IP address, user agent and timestamps, kept short-term for security and abuse prevention.

We do not run advertising trackers on this site and we do not sell or share personal information for cross-context behavioural advertising.

2. Why we use it

• To run the service — generating drafts, scheduling, publishing, reporting results. This is necessary to perform our contract with you.
• To bill you — via Stripe and RevenueCat. Also contractual necessity.
• To keep it working and secure — diagnostics, abuse prevention, rate limiting. Our legitimate interest.
• To improve it — aggregate usage analysis. Our legitimate interest; you can opt out of analytics in Settings.
• To email you — transactional messages (codes, receipts, failed publishes, trial reminders) as part of the service. Marketing email only with your consent, and every one has an unsubscribe link.

3. AI processing

Generating a draft sends your brand profile and the relevant trend context to a large-language-model provider. Depending on configuration that provider is Anthropic or OpenAI, and in the default configuration no external provider is called at all.

We use these providers under their API terms, which prohibit training on data submitted through the API. We do not use your content to train any model, ours or anyone else’s.

4. Who we share it with

Only the sub-processors the product runs on, each for a single purpose:

• Convex — application database, file storage and server functions
• Netlify — website and app hosting
• Stripe — web payment processing
• RevenueCat — subscription and entitlement management
• Apple / Google — in-app purchase billing, if you subscribe on mobile
• Resend — transactional email delivery
• Anthropic / OpenAI — content generation, where enabled
• Sentry — error monitoring
• PostHog — product analytics
• TikTok, Meta, Google, LinkedIn — only the content you asked us to publish

We may also disclose information where the law requires it, or to a successor if the business is acquired — in which case this policy continues to apply until you’re told otherwise.

We do not sell your personal information.

5. How long we keep it

• Account and brand data: while your account exists.
• Drafts, posts and uploads: until you delete them, or until account deletion.
• Platform tokens: until you disconnect that account.
• Analytics and error data: up to 24 months, then aggregated or deleted.
• Billing records: as long as tax and accounting law requires, typically 7 years.

Deleting your account from Settings removes your profile, brand, drafts, uploads and connections. It cannot recall content already published to a social platform — you delete that from the platform.

6. Offline storage on your device

So the app works without a connection, we cache your identity and recent content locally on your device for up to 30 days after your last successful sign-in. Session tokens are held in the platform’s secure storage — the iOS Keychain or the Android Keystore — and are excluded from device backups. Signing out clears the cache.

7. Your rights

Depending on where you live you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to withdraw consent. Most of this is self-serve in Settings; for anything else email support@altuzar.dev and we’ll respond within 30 days.

If you’re in the EEA or UK you also have the right to complain to your local data protection authority.

8. International transfers

Our sub-processors are largely US-based, so your data may be processed outside your country. Where we transfer personal data out of the EEA or UK we rely on the European Commission’s Standard Contractual Clauses or an equivalent approved mechanism.

9. Security

Data is encrypted in transit and at rest. Platform tokens are only ever read server-side. Access to production data is limited to those who need it. No system is perfectly secure, and we’ll notify you and any required regulator without undue delay if a breach affects your data.

10. Children

AfterLaunch is a business tool and isn’t for anyone under 18. We don’t knowingly collect data from children; if you believe we have, tell us and we’ll delete it.

11. Cookies

This marketing site sets no advertising cookies. The app uses local storage and a session cookie to keep you signed in and to remember preferences such as your filters. Analytics can be disabled in Settings.

12. Changes

We’ll post any update here with a new “last updated” date, and for material changes we’ll notify you by email or in the app before they take effect.

13. Contact

support@altuzar.dev