Privacy Policy

1. Who We Are

This Service is operated by Ghost Management. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service. For questions, contact us at coach@biomechcoaching.com.

2. Information We Collect

We collect the following information when you use the Service:

• Account information — your email address collected when you sign in via Google or X.
• X (Twitter) credentials — OAuth access tokens obtained when you connect your X account. These are stored securely and used only to post content on your behalf.
• Uploaded images — images you upload to use in your posts, stored securely in cloud storage.
• Content you create — personas, example posts, and scheduled content you create within the Service.
• Usage data — basic logs of Service activity for security and debugging purposes.

3. How We Use Your Information

We use your information solely to provide and improve the Service:

• Authenticating your account and maintaining your session
• Generating AI-assisted content based on your personas and preferences
• Scheduling and publishing posts to X on your behalf
• Storing your uploaded images for use in posts
• Communicating with you about your account if necessary

We do not sell your data. We do not use your data for advertising.

4. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase — database and file storage. Your data is stored on Supabase infrastructure. See Supabase Privacy Policy.
• OpenAI — AI content generation. Content you generate is processed by OpenAI’s API. See OpenAI Privacy Policy.
• X (Twitter) — post publishing. Your OAuth tokens are used to publish content to your X account via the X API. See X Privacy Policy.
• Vercel — hosting and infrastructure. See Vercel Privacy Policy.

5. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days. Anonymised or aggregated data may be retained for longer for operational purposes.

6. Security

We use industry-standard security measures including encrypted storage, row-level security policies, and secure HTTP-only cookies for OAuth state. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Disconnect your X account from the Service at any time

To exercise any of these rights, contact us at coach@biomechcoaching.com.

8. Children’s Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, contact Ghost Management at coach@biomechcoaching.com.