Spreadcast (Spreadcast, we, us, or our) turns your website into on brand social media creatives and schedules them to your connected accounts. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to our website, app, and related services, which we call the Service together.

By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.

1. Information we collect

We collect information you give us, information generated as you use the Service, and information we receive from platforms you connect.

Account information

When you create an account we collect your name, email address, and authentication details. Passwords are handled by our authentication provider and stored only in hashed form, so we never see your plain text password.

Brand and company information

To build your feed we collect the website URL you submit and the brand details tied to it, including your logo, color palette, fonts, product descriptions, and any copy you add or edit.

Website content you submit

When you paste a URL, we fetch and analyze its publicly available content, such as text, images, colors, and logos, to create your brand profile. Please only submit websites you own or have permission to use.

Content you create

We store the creatives, captions, feeds, and schedules you generate or upload, together with the edits you make to them.

Connected social accounts

If you connect a social account, such as Instagram, Pinterest, or LinkedIn, we receive and store the access tokens and basic profile information that platform provides, so we can publish on your behalf. We request only the permissions needed to schedule and post content, and we never receive your social account password.

Payment information

If you buy a paid plan, our payment processor collects and handles your payment details. We do not store full card numbers on our servers.

Usage and device information

We collect basic technical data such as IP address, browser type, device information, pages viewed, and actions taken, so we can operate, secure, and improve the Service.

2. How we use your information

We use the information we collect to:

Provide, operate, and maintain the Service.
Analyze the website and brand details you submit so we can generate on brand creatives.
Schedule and publish content to your connected accounts when you ask us to.
Process payments and manage your subscription.
Send you emails about your account, such as sign in links, security notices and a welcome message, and reply to your support requests.
Send you product updates, tips and occasional offers, only if you agreed to receive them. You can unsubscribe at any time.
Keep the Service secure and prevent fraud, abuse, and misuse.
Improve existing features and develop new ones.
Meet our legal and regulatory obligations.

3. AI processing

To generate text and images, we use trusted third party artificial intelligence providers. Your brand inputs, prompts, and the content you ask us to create are sent to these providers solely to produce your results. We currently use Google Gemini models for text and image generation.

We do not sell your content, and we do not use it to train our own models.

We do not sell your personal information. We share it only in the limited ways described below.

Service providers

We work with vendors who process data on our behalf to run the Service, under contracts that limit how they may use your data. These currently include:

Supabase, for authentication and database hosting.
Google Gemini, for text and image generation.
Vercel, for application hosting and delivery.
Our payment processor, for subscriptions and billing.

At your direction

When you connect an account and schedule a post, we share that content with the relevant social platform, such as Instagram, Pinterest, or LinkedIn, so it can be published.

Legal and safety

We may disclose information if required by law, to enforce our terms, or to protect the rights, property, or safety of Spreadcast, our users, or the public.

Business transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your information.

When you link a social account, you authorize Spreadcast to access that account through the platform's official interface for the purposes you approve, such as publishing scheduled posts and reading basic profile or page information.

You can disconnect an account at any time from your settings, and you can also revoke our access from within the social platform's own settings. Disconnecting stops future publishing and removes the stored access tokens. Our use of information received from these platforms follows their developer and platform policies.

6. AI assistant connections

You can connect Spreadcast to an AI assistant, such as Claude or ChatGPT, through our MCP server. You start the connection, sign in with your Spreadcast account, and choose what the assistant may do: make drafts only, or also schedule and publish.

When you ask the assistant for something, it sends that request to Spreadcast, and Spreadcast returns only what the request needs: your plan and connected networks, your apps and brand kit, your posts and their status, the designs and captions it made, and how your posts performed. We never return passwords, access tokens, or other secrets to the assistant.

We do not read your conversations with the assistant, its memory, or the files you share with it. We receive only the requests it sends to Spreadcast. What the assistant does with our replies is governed by that assistant's own privacy policy.

We keep a record of each connection and when it was last used. You can see and remove every connection in Settings, under AI Assistants, and removing one stops it at once. Assistant connections follow the same retention and deletion rules as the rest of your account.

7. Cookies and tracking

We use strictly necessary cookies to keep you signed in and to secure your session. We may also use limited analytics to understand how the Service is used so we can improve it. You can control cookies through your browser settings, though disabling essential cookies may break sign in and core features.

8. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. We retain some data longer where required for legal, tax, security, or dispute resolution purposes. When you delete your account, we delete or anonymize your personal information within a reasonable period, except for data we are required or permitted to keep.

9. Security

We use technical and organizational measures to protect your information, including encryption in transit, access controls, and trusted infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International transfers

We may process and store information in countries other than the one where you live. Where we transfer personal data across borders, we rely on appropriate safeguards, such as standard contractual clauses, to protect it.

11. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can also:

Update your account information in your settings.
Disconnect any linked social account.
Unsubscribe from marketing emails using the link in each message or in your settings.
Request deletion of your account by contacting us.

To exercise any of these rights, email us at privacy@spreadcast.app. We will respond as required by applicable law.

If you are in the European Economic Area or the United Kingdom, our legal bases for processing are performance of our contract with you, your consent, our legitimate interests in operating and improving the Service, and compliance with legal obligations. If you are a California resident, we do not sell or share your personal information as those terms are defined under California law.

12. Children's privacy

The Service is not intended for anyone under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.

13. Third party links

The Service may link to third party websites and platforms that we do not control. Their practices are governed by their own privacy policies, and we encourage you to review them.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised policy.

15. Contact us

If you have questions about this Privacy Policy or how we handle your information, email us at privacy@spreadcast.app.