Privacy Policy

1. Introduction

Welcome to Outbrand ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered social media content automation platform (the "Service").

Outbrand is a complete content automation platform that generates strategic content topics using AI, creates posts in multiple formats (LinkedIn posts & articles, Twitter threads & tweets, Instagram posts & carousels, Facebook posts, and Bluesky content), and automatically publishes them to your connected social media accounts.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Project information (business name, services, tagline, target customers, brand tone)
• Website URL (optional, for AI to learn your brand voice)
• Brand colors and visual preferences
• Payment information (processed securely through Stripe)

2.2 Social Media Account Information

When you connect your social media accounts to enable automation, we collect:

• LinkedIn: Profile information, OAuth tokens for posting content
• Instagram: Account information, OAuth tokens for posting images and captions
• Facebook: Page information, OAuth tokens for posting to your business pages
• X (Twitter): Account information, OAuth tokens for posting tweets and threads
• Bluesky: Handle and app password for posting content

We only access the minimum permissions required to post content on your behalf. We do not read your private messages, followers, or other personal data from these platforms.

2.3 Generated Content Data

Our AI system generates and stores:

• 30-day content topic calendars based on your business information
• AI-generated social media posts, captions, and image prompts
• Generated images created by our AI system
• Publishing schedules and automation settings
• Content performance data and posting history

2.4 Usage Data

We automatically collect information about how you use our Service:

• Login activity and session data
• Content generation requests and preferences
• Publishing activity and automation usage
• Feature usage and interaction patterns
• Technical information (IP address, browser type, device information)

3. How We Use Your Information

We use the collected information to:

• Generate Content: Create personalized content topics and social media posts using AI
• Automate Publishing: Post your generated content to connected social media platforms
• Learn Your Brand Voice: Analyze your website and preferences to match your unique tone
• Provide the Service: Operate and maintain the platform, process payments, provide support
• Improve AI Models: Enhance our content generation algorithms (using anonymized data only)
• Send Communications: Account updates, feature announcements, and customer support
• Ensure Security: Detect fraud, prevent abuse, and maintain platform security
• Legal Compliance: Meet legal obligations and enforce our terms of service

4. AI and Content Generation

Our AI system processes your business information to generate relevant content:

• We use your business details to create strategic content topics and posts
• Your website content may be analyzed to learn your brand voice and tone
• Generated content is stored in your account and can be edited before publishing
• AI-generated images are created based on your brand colors and style preferences
• All content remains your intellectual property

We use third-party AI services (OpenAI) to generate content. Your data is processed according to their privacy policies, but we do not share your personal information beyond what's necessary for content generation.

5. Social Media Platform Integration

When you connect social media accounts for automation:

• We use OAuth 2.0 secure authentication for LinkedIn, Instagram, Facebook, and X (Twitter)
• For Bluesky, we use app-specific passwords as they don't support OAuth
• We only request permissions necessary for posting content
• Access tokens are encrypted and stored securely
• You can disconnect accounts at any time from your dashboard
• We automatically post only the content you generate and approve

Each platform has its own privacy policy that also applies to content posted through our service.

6. Information Sharing and Disclosure

We do not sell or rent your personal information. We may share information only in these circumstances:

• Social Media Platforms: When posting your approved content
• AI Services: OpenAI for content generation (anonymized where possible)
• Payment Processing: Stripe for secure payment processing
• Service Providers: Trusted partners who help operate our service (under strict confidentiality)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers or acquisitions (with notice to you)
• Team Members: When you invite team members to collaborate on your projects

7. Data Security

We implement comprehensive security measures to protect your information:

• All data transmitted using SSL/TLS encryption
• Social media access tokens stored with encryption
• Secure authentication using Supabase Auth
• Regular security audits and updates
• Access controls and monitoring for all systems
• Secure cloud infrastructure with automatic backups

While we use industry-standard security measures, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your information as follows:

• Account Data: Until you delete your account
• Generated Content: Until you delete it or close your account
• Social Media Tokens: Until you disconnect the integration
• Usage Data: Up to 2 years for analytics and service improvement
• Payment Data: As required by law and payment processors

When you delete your account, we will delete your personal information and generated content, except where retention is required by law.

9. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: View all your personal data and generated content
• Edit: Update your account information and project details
• Delete: Remove your account and all associated data
• Export: Download your generated content and data
• Disconnect: Remove social media integrations at any time
• Control Automation: Enable or disable automatic posting
• Opt-out: Unsubscribe from marketing emails

To exercise these rights, use the controls in your account dashboard or contact us at privacy@outbrand.design.

10. Team Collaboration

Outbrand supports unlimited team members and collaboration:

• Project owners can invite team members via email
• Team members can access shared projects and generated content
• All team activity is logged for transparency
• Project owners control team member permissions
• Team members' access is limited to shared projects only

11. Cookies and Tracking

We use cookies and similar technologies to:

• Essential Cookies: Required for login and core functionality
• Analytics: Understand how you use our service (PostHog)
• Preferences: Remember your settings and preferences

You can control cookies through your browser settings, but disabling essential cookies may affect functionality.

12. International Data Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place to protect your personal information in accordance with this Privacy Policy and applicable laws.

13. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through our service. Your continued use of the Service after such modifications constitutes acceptance of the updated Privacy Policy.

15. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us: