Trust & Security

Payments are handled by Paddle

We do not store your credit card number, billing address, or tax details. Our order process is conducted by Paddle, which acts as the Merchant of Record for all purchases.

• Your payment information is collected and stored by Paddle, not by us.
• Paddle handles tax collection, invoicing, renewals, cancellations, and refunds.
• We only receive a subscription status from Paddle so we can unlock your account features.

For billing terms, see Paddle's Checkout Buyer Terms.

What data we collect and why

We collect only the information we need to run the service. We do not sell your personal data and we do not use it to train AI models.

• Account data: your email address and a secure password hash (or Google account ID if you sign in with Google).
• Onboarding answers: your business name, niche, tone, and audience so the AI can write posts that sound like you.
• Generated posts: the captions, hashtags, and image ideas you create in the app.
• Usage data: basic error logs and feature usage so we can fix bugs and improve the product.

We send your prompts to modern AI providers so they can generate content for you. We do not allow those providers to use your data to train their models.

How we protect your account

Security is built into the app from the ground up. Here are the controls we have enabled:

• All traffic is encrypted with HTTPS/TLS.
• Passwords are hashed and never stored in plain text.
• Database access is protected by row-level security, so each user can only read their own data.
• Payment webhooks from Paddle are verified with cryptographic signatures before we trust them.
• We do not ask for, store, or transmit your Instagram or Facebook password.

What Google sign-in does

You can sign in with Google instead of creating a password. When you do:

• Google confirms your identity and sends us your email address and a unique account ID.
• We do not see your Google password.
• We cannot post to your Google account, read your emails, or access your contacts.
• You can revoke access at any time from your Google account settings.

Shared responsibility

We keep the app, servers, and payment integration secure. You are responsible for keeping your password safe, reviewing AI-generated content before you publish it, and following the terms of any platform where you post.

If you ever want to delete your account and data, contact us at support@socialaiposter.com.