Privacy

Three kinds of thing, for three different reasons.

• Your account. Your name and email address, and either a password or the identity your Google or GitHub sign-in returns. We never receive your password for those providers.
• Your workspace content. Your brand voice and style settings, the source material and media you upload, the briefs you write, and every draft, comment, approval and scheduled post that follows from them.
• Your connected accounts. When you connect a social network, we store the access token it issues plus the account name and avatar it exposes, so the calendar can show you which account a post is going out from. After a post publishes, we read back its public performance figures.

We do not run advertising or third-party analytics trackers on this site, and there is no cookie banner because there are no cookies to consent to beyond the one that keeps you signed in.

Your content is processed by a small number of services, each doing one job:

• Supabase — the database, authentication, and file storage behind everything above. Your content is at rest here.
• OpenRouter — routes draft generation to a language model. Your brief, your brand voice, and the source material a draft is written against are sent to the model serving that request. Generated media is produced the same way.
• The networks you connect — LinkedIn, X, Instagram, Facebook, Threads, TikTok and YouTube receive the posts you schedule to them, at the moment they are scheduled to go. What happens to a post after that is governed by that network’s own terms, not ours.

We do not sell your content, and we do not use it to train models of our own.

The tokens that let us publish on your behalf are the most sensitive thing we hold, and they are encrypted at rest with AES-256-GCM under a key that lives outside the database — a copy of the database alone does not yield a usable credential. Everything else is protected by the row-level access rules that keep one workspace out of another’s data.

No system is exhaustively safe, and we would rather say so than imply otherwise.

You can disconnect any network from your workspace at any time, which deletes the stored token for it immediately. You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete your account and everything in it. Deleting an account removes its workspaces, drafts, media and connections.

Depending on where you live you may have further rights over this data — including under the GDPR or the CCPA. We will honour those requests regardless of where you are.

Write to privacy@influenar.com and we will action it.

If this policy changes in a way that affects what we do with your content, we will tell account holders by email rather than quietly moving the date at the top of this page.