Privacy Policy

1. Information we collect

Account information. Email address, name if you provide it, account identifiers, subscription status, usage counters, timezone, and notification preferences.

Content you provide. Campaign settings such as product name, description, keywords, URLs, goals, and competitors.

Lead and draft data. Public social posts we surface for you (for example title, body text, community name, link, author handle, post date, and relevance scores) plus reply drafts you create or edit in the Service.

Payment status. We receive subscription and billing status from our payment processor. We do not store full payment card numbers.

Technical and usage data. IP address, browser and device information, pages viewed, timestamps, security logs, and operational metrics needed to run and protect the Service.

Support and feedback. Messages you send us through support or in-app feedback forms.

2. Cookies and similar technologies

Essential cookies. Required to keep you signed in, secure your session, and operate core features. These do not require consent in many jurisdictions because the Service cannot work without them.

Analytics (optional). If you choose "Accept" on our cookie notice, we collect anonymous visit statistics (such as page views and referrers) to understand traffic and improve the site. If you choose "Essential only," we do not load optional analytics.

You can change your choice by clearing site data in your browser and revisiting the site, or by contacting us.

3. How we use information

• Provide, maintain, and improve the Service
• Process subscriptions and send service-related communications
• Score posts and generate reply drafts using third-party AI tools
• Enforce usage limits and prevent abuse
• Monitor reliability, security, and fraud
• Respond to support requests
• Comply with legal obligations

We do not use your content to train our own foundation models. AI providers process data only to deliver features you request.

4. Legal bases (EEA, UK, and Switzerland)

Where applicable, we rely on:

• Contract to provide the Service you signed up for
• Legitimate interests to secure the Service, prevent abuse, and improve reliability
• Consent for optional analytics cookies where required
• Legal obligation where we must retain or disclose data

5. How we share information

We share information with service providers that help us operate the Service, such as providers of authentication, payments, hosting, databases, background jobs, email delivery, search, and AI processing. They may only use data to perform services for us under contractual safeguards.

We may disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets.

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

6. Data retention

We keep account and campaign data while your account is active. Lead and draft data remain until you delete them, delete a campaign, or close your account. We use short-lived internal caches to avoid unnecessary repeat processing. Security and operational logs are kept only as long as needed for debugging, billing reconciliation, and legal compliance.

7. Your rights

Depending on where you live, you may have the right to:

• Access, correct, or delete personal information we hold about you
• Export or receive a copy of certain data
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Opt out of sale or sharing of personal information (we do not sell personal information)
• Lodge a complaint with your local data protection authority

California residents may also have rights under the CCPA/CPRA, including the right to know what categories of information we collect and to request deletion, subject to legal exceptions.

To exercise your rights, email hey@starfort.io. We may need to verify your identity before responding.

8. International transfers

We are based in the United States. If you access the Service from other countries, your information may be processed in the United States or other countries where our providers operate. We use appropriate safeguards where required by law.

9. Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure.

10. Children

The Service is not directed to children under 18, and we do not knowingly collect their data.

11. Changes

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may also be communicated through the Service or by email where appropriate.

12. Contact

Privacy questions or requests: hey@starfort.io