Privacy Policy

Account information. When you sign up, we collect your name, email address, and (if you use Google Sign-In) basic profile information from Google via OAuth.

Brand and product content. Product photos, brand guidelines, color palettes, tone descriptions, and any other content you upload to build a brand profile. This content is used solely to generate content for that brand.

Connected social accounts. When you connect Instagram, TikTok, or YouTube, we store access tokens issued by those platforms so we can publish approved content on your schedule. We never see or store your social account password — authentication happens directly with the platform via OAuth.

Payment information. Billing is processed by [PAYMENT PROCESSOR]. We do not store full credit card numbers on our servers.

Usage data. Standard technical data — IP address, browser type, pages visited, approval/rejection actions in the Inbox — collected to operate and improve the service.

• To generate carousel and video content based on your brand and product inputs
• To publish approved content to your connected platforms at your scheduled times
• To operate your account, process billing, and provide customer support
• To send transactional email (approval notifications, billing receipts) and, if you opt in, product updates
• To monitor for abuse, fraud, and violations of our Terms of Service

We do not publish anything without your explicit approval. Content generation and publishing are separate, gated steps — see our Terms of Service for details.

We rely on the following subprocessors to operate Shipcut. Each processes data only as needed to perform its function:

• Supabase — authentication, database, and file storage
• Vercel — application hosting
• Anthropic — AI text generation (prompts, captions)
• fal.ai — AI image and video generation
• Meta Graph API — Instagram publishing
• TikTok API — TikTok publishing
• YouTube Data API — YouTube Shorts publishing
• Resend — transactional email delivery
• [Stripe] — payment processing

Your product photos and brand materials are sent to Anthropic and fal.ai as part of generating content — this is core to how the product works. We do not sell your data to third parties.

We retain your account and brand data for as long as your account is active. If you delete a brand or cancel your account, we delete associated content within [30/90] days, except where retention is required for legal, billing, or fraud-prevention purposes.

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at [CONTACT EMAIL]. We will respond within [30] days.

If you are located in the EEA/UK, you have rights under GDPR. If you are a California resident, you have rights under the CCPA.

We use industry-standard measures (encryption in transit, access controls, Supabase's managed security) to protect your data. No system is 100% secure, and we cannot guarantee absolute security.

Shipcut is a B2B tool intended for business use by adults. It is not directed at, and we do not knowingly collect data from, anyone under 18.

Your data may be processed in the United States and other countries where our subprocessors operate. By using Shipcut, you consent to this transfer.

We may update this policy from time to time. Material changes will be notified via email or an in-app notice before they take effect.

Questions about this policy: [CONTACT EMAIL]
[LEGAL ENTITY NAME], [BUSINESS ADDRESS]