Privacy Policy

Information we collect

• Account information. Your name and email address, handled through our authentication provider (Clerk) when you sign up or sign in.
• Brand data. The website URL you provide and the public content we crawl from it (text, images, colors, and tone) to learn your brand voice and visual style.
• Content you create. Posts, captions, images, videos, and assets generated in or uploaded to Catchier.
• Connected social accounts.When you connect a social account (such as LinkedIn or Instagram), we store an encrypted access token and basic account details (account ID and name) so we can publish the posts you approve. We never see or store your social-platform password. See “Data from social platforms” below.
• Usage and request logs. Metadata about your API requests (method, path, status, timing, IP address, user agent) and redacted request/response bodies, used for security, abuse prevention, and debugging.

How we use your information

• To operate Catchier — crawl your brand, generate content, and publish it to the accounts you connect.
• To maintain your account, credit balance, and plan.
• To secure the service, detect and prevent abuse, and troubleshoot issues.
• To send service communications (e.g. when content is ready or publishing fails). You can control non-essential email in your settings.

Data from social platforms

Before you connect an account, Catchier shows you what it will receive, when, how it is used and how to withdraw. You agree there, and the platform then asks you to approve the connection on its own screen. We ask again every time you reconnect, including when the platform's access expires (LinkedIn and Instagram access lasts 60 days).

• What we receive.Your account ID and the name shown on the account, and an access token. From LinkedIn that is your member ID and name only: not your email, photo, connections, feed or messages. When you connect a LinkedIn Company Page instead, we receive the list of Pages you manage and their names so you can pick one (forgotten within 10 minutes), then that Page's ID and name, and nothing about you or the Page's followers, comments or analytics. Facebook works the same way: the Pages you can post to and their names (forgotten within 10 minutes), then the chosen Page's ID, name and Page token. For your Analytics page we also receive the numbers for the posts Catchier published: from Instagram their reach, views, likes, comments, saves and shares; from Threads their views, likes, replies, reposts, quotes and shares; from Facebook their reaction, comment and share counts only; and each account's follower count. From Pinterest we keep only your account ID, the access token and the ID of the board you choose; your username, board names, follower count and the numbers for the Pins Catchier published (impressions, saves, Pin clicks, outbound clicks) are read from Pinterest each time we show them to you and never stored. From Google Business Profile we receive the Business Profile accounts and locations you manage, to find the one to post to, then that location's ID and name and an access token: not your email, reviews, messages, insights or any other listing's details. From TikTok we keep your account ID, username and an access token; your TikTok posting options (who can see your posts, whether comments, Duet and Stitch are open), your follower count and the view, like, comment and share counts of the public posts Catchier published are read from TikTok each time we need them and never stored. The choices you make for each TikTok post (who can see it, comments, Duet, Stitch, the commercial content disclosure, its title) are kept with that post. Never anyone else's posts, comments or messages.
• When.Once, when you connect. We do not fetch your profile again on a schedule; it is refreshed only when you reconnect. Exceptions: a LinkedIn Company Page's name and a Google Business Profile location's name, which we re-read once a week so they stay current; your Pinterest username, board names and Pin numbers, read each time you open Connected accounts, choose a board or open Analytics; your TikTok posting options, read each time you set up a TikTok post and right before it goes out, and your TikTok numbers, read each time you open Analytics; and on Instagram, Facebook and Threads the numbers for each post Catchier published, read 1, 3, 7 and 28 days after it goes out, and the follower count, read once a day, until you disconnect.
• How it is used. Only to publish the posts you approve, to the account you connected, at the time shown on each post, and to show you how those posts did on your Analytics page. Catchier never publishes a post you have not approved. Captions Catchier drafts are shown to you to edit before you approve them.
• What we never do. We do not sell, rent or share data from social platforms with anyone, use it for advertising, sales or recruiting, combine it with other data to build profiles, or show it to anyone outside your workspace. Nothing we receive from LinkedIn, Instagram, Facebook or Threads is sent to our AI providers or used to train AI or machine learning models. The one exception on any platform is your Instagram username, which Catchier may print on your own posts as your handle (our own code places it on the picture; it is not sent to an AI provider).
• How long we keep it.Until you disconnect the account or delete your Catchier account. Post numbers and follower counts from Instagram, Facebook and Threads are kept while the account stays connected, for up to 13 months, so your Analytics page can compare periods. They are deleted at once when you disconnect the account, remove Catchier in Instagram, Facebook or Threads, ask Meta to delete your data, delete your Catchier account or email us, and within a day of your paid plan ending, together with the connection itself. We keep the IDs and links of posts we published for you so your calendar can show where they went, until you delete your Catchier account or ask Meta to delete your data. A LinkedIn Company Page's name is kept at most 8 weeks, and a Google Business Profile location's name at most 30 days, without being re-read, and deleted if it cannot be. If your paid plan ends, we delete your LinkedIn connection and the LinkedIn post IDs and links within 10 days; your posts stay in Catchier.
• Withdrawing and deleting.Disconnect an account on the Connected accounts page at any time: we delete its access token and account name immediately and publish nothing more to it. You can also remove Catchier in the platform's own settings (on LinkedIn: Settings, Data privacy, Permitted services; on Facebook: Settings, Business integrations; on Instagram: Settings, Apps and websites; on Threads: Settings, Account, Website permissions; on Google: your Google Account, Security, Your connections to third-party apps and services; on TikTok: the apps and services listed in its settings). Disconnecting Google Business Profile or TikTok in Catchier also revokes Catchier's access there, and removing Catchier in TikTok deletes the connection in Catchier straight away. Meta gives apps no way to remove themselves, so after you disconnect Instagram, Facebook or Threads, Catchier shows you where to remove it in that app; removing it there deletes the connection and its numbers in Catchier straight away. Deleting your Catchier account deletes all connected accounts, or email privacy@catchier.ai and we will delete your data.

A post whose picture was made or changed with an AI image model is published to Pinterest with Pinterest's AI disclosure, so Pinterest labels it "AI modified". Nothing we receive from Pinterest is sent to our AI providers or used to train AI or machine learning models.

A post whose picture was made or changed with an AI image model is published to Instagram with Instagram's AI disclosure, so Instagram labels it. Posts made from your own photos, stock photos or text alone are not labelled.

On TikTok, every post goes out with the settings you chose for it on its TikTok screen; Catchier never chooses who can see a post for you. Posts whose picture an AI image model made or changed, and every video, are sent with TikTok's AI-generated content flag, so TikTok labels them. Catchier adds no Catchier branding, watermark or link to anything posted to TikTok. Nothing we receive from TikTok is sent to our AI providers or used to train AI or machine learning models.

Catchier's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data received from Google APIs is used only to publish the posts you approve to your Business Profile; it is not sent to our AI providers and is not used to develop, improve or train generalised AI or machine learning models.

Catchier is not affiliated with, endorsed or sponsored by LinkedIn, Meta, TikTok, Pinterest or Google.

AI processing & third-party services

To deliver the product we share the minimum necessary data with trusted providers: Clerk (authentication), Firecrawl (website crawling), Anthropic (caption and text generation), fal.ai (image and video generation), Cloudflare R2 (asset storage), Upstash Redis and our database host (infrastructure), Stripe (payments), Google Places (finding your business's public Google reviews), Pexels (stock photo search), Resend (email) and Sentry (error reports, which carry account IDs and technical details of the failure, never passwords or tokens). With your consent we also use Google Analytics (site usage statistics — see Cookies below). Each processes data only to provide its service to us.

We do not sell your personal information.

Cookies

Essential cookiesare always on: our authentication provider (Clerk) sets a session cookie so you stay signed in, and our payment provider (Stripe) sets cookies during checkout for payment processing and fraud prevention. The service can't work without them.

Analytics cookies (optional).With your consent we use Google Analytics to understand how people use the site. Analytics loads only after you choose “Allow analytics” in the cookie banner — declining means it is never loaded at all. We set no advertising or cross-site tracking cookies.

You can change your choice at any time, or block and delete cookies in your browser settings (without the session cookie you can't stay signed in).

Data retention

We keep your account, brand, and content data for as long as your account is active. Request-log bodies are automatically removed after 15 days and the log rows themselves after 30 days. When you delete your account, we delete or anonymize your personal data except where we must retain it to comply with legal obligations.

Your choices & rights

• Disconnect a social account at any time from the Connected Accounts page; we delete the stored token and account name immediately, and for Instagram, Facebook and Threads its post numbers and follower counts too.
• Access, correct, or delete your personal data by contacting us.
• Delete your account from Settings, which removes your associated data.

Security

Social tokens are encrypted at rest (AES-256). We restrict access to personal data and use reputable infrastructure providers. No system is perfectly secure, but we work to protect your information.

Changes to this policy

We may update this policy as the product evolves. We'll revise the “last updated” date above and, for material changes, notify you.