Legal

Privacy Policy

Last updated October 25, 2026

1. Information We Collect

We collect information you provide directly to us, including:

  • Account information (name, email, password)
  • Profile information
  • Payment information (processed by Stripe)
  • Social media OAuth tokens (encrypted)
  • Content you create and schedule

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process your payments
  • Send you technical notices and support messages
  • Publish content on your behalf to connected platforms
  • Monitor and analyze usage patterns

3. Data Storage and Security

We use industry-standard encryption to protect your data:

  • All data is encrypted in transit using SSL/TLS
  • OAuth tokens are encrypted at rest using AES-256
  • Data is stored in secure databases with Row Level Security
  • We never store your social media passwords

4. Data Sharing and Service Providers

We do not sell your personal information. We share it only with the providers below, and only what each needs to do its job:

  • LinkedIn and X: to publish the content you schedule or approve
  • Supabase: database, authentication and file storage
  • Vercel: hosting and aggregate page view analytics
  • Stripe: payment processing and billing
  • Anthropic (Claude): writes and reviews post drafts, replies and video scripts from your notes and settings
  • OpenAI: creates embeddings of your content for brand memory, it does not write your posts
  • fal.ai: generates AI images for your posts
  • ElevenLabs: creates narration for explainer videos
  • Amazon Web Services: renders explainer videos
  • Apify: fetches public posts from creators you add as inspiration
  • Resend: sends account and service emails
  • Cloudflare Turnstile: bot protection on login, signup, password reset and our free tools
  • Upstash: rate limiting, which processes IP addresses

5. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data
  • Opt out of marketing communications

6. Cookies, Analytics and Advertising Tags

We use cookies to keep you signed in and to remember your country (a two letter code from your IP address) so we know which tags we may load. Our pages also load the analytics and advertising tags below, which measure visits and ad conversions:

  • Google Analytics 4 and Google Ads: site analytics and ad conversion measurement. Opt out
  • LinkedIn Insight Tag: conversion tracking and audiences for LinkedIn ads. Opt out
  • X pixel: conversion tracking for X ads. Opt out

If you visit from the European Economic Area, the United Kingdom or Switzerland, Google tags run with advertising and analytics storage denied, and the LinkedIn and X tags are not loaded. You can also block cookies in your browser settings, though you need them to sign in.

7. GDPR Compliance

If you are located in the European Economic Area (EEA), we comply with GDPR requirements for data protection and privacy.

8. Contact Us

If you have questions about this Privacy Policy, please contact us at hey@hiresteward.com