ShapelessAI Privacy Policy

1. What we collect

This Privacy Policy covers ShapelessAI, the AI content studio at shapelessai.com, including its website, API, CLI and MCP server, and the ShapelessAI app you authorize on social platforms such as TikTok. "ShapelessAI", "we" and "us" mean the company and that app.

Account: your name, email, and avatar from Google sign-in, or the email you sign in with by code; we use Google data only to sign you in and identify your account. Content: the instructions you give the agent, the conversations you have with it, and what it generates. Usage: pages visited, features used, device and log data. Cookies: essential cookies keep you signed in, and our analytics uses a small identifier to measure usage; we set no advertising cookies. Payments: handled by Polar, our merchant of record; we never see your card number.

Email from us: we email you about your own account - a welcome when you sign up, when the agent has drafted posts for you to approve, when a post could not be published, and a weekly summary of what was published. You can stop the welcome, drafts and summary emails with the link in any of them or in Settings; the notice that a post failed to publish keeps arriving because it is about your account. We send no third-party advertising.

Separately from your account, we maintain a proprietary research knowledge base of publicly available content and engagement statistics sourced from third-party data providers. It is used in aggregate to learn what content performs; it is not linked to your account data.

2. How we use it

To run the service: generating your content, keeping your conversation history, metering usage, and billing.

To improve it: analyzing usage, evaluating and training the models, prompts, and skills behind the agent, and building aggregate statistics about what performs. Where we publish numbers, they are aggregated and never identify you or your content. If we ever materially change how we use your data, the change will apply going forward and we will tell you first.

3. Who we share it with

Service providers that run the product: Google Cloud (hosting and AI models), Polar (payments) and Resend (email delivery). They process data for us under their own safeguards. We do not sell or share your personal information as those terms are defined under US state privacy laws, and we have not done so in the preceding 12 months.

4. Connected social accounts

You can connect the social platforms we integrate with or are applying to integrate: LinkedIn, X, Bluesky, Mastodon, Instagram, Facebook Pages, Threads, YouTube, TikTok, Pinterest, Telegram, Discord, and Reddit. For each account you connect, we store the access token you authorize (for Discord, the channel webhook you paste; for Telegram, only which chat you added our bot to) and your account handle so the product can publish on your behalf. If you connect an advertising account, we additionally store that account's name, currency and identifier, and we read your campaigns' daily results - spend, impressions, clicks and outcome counts - so we can show them next to your organic numbers; we never create or change campaigns without your explicit approval, and we still set no advertising cookies. We publish only content you explicitly approve, we do not read your private messages, and disconnecting an account deletes its stored token immediately. We do not use any platform-sourced data to train models. You can also request deletion at any time as described on our Data Deletion page.

For YouTube specifically, we request only the youtube.upload scope, which we use to upload videos you have created and approved to your own YouTube channel on your behalf. We do not read, list, modify, or delete any other data in your YouTube account, and our use of YouTube also follows the YouTube Terms of Service and the Google Privacy Policy.

For TikTok specifically, when you connect your account to ShapelessAI through TikTok Login Kit, we use user.info.basic (your open id, avatar and display name) to show which account is connected; user.info.profile (your username, profile link, bio and verified status) to label the account correctly; user.info.stats (your follower, following, like and video counts) and video.list (your public videos and their view, like, comment and share counts) to show how the posts you published through ShapelessAI performed; and video.upload and video.publish to post the videos you approve to your TikTok account. We do not read your private videos or messages, and disconnecting TikTok in ShapelessAI deletes the stored token at once.

ShapelessAI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

For authorized platform data (including YouTube), we store it no longer than 30 days, then refresh or delete it, and we honor deletion requests for platform data within 7 days.

5. Security

We protect your data with encryption in transit (TLS) and at rest, restrict access to authorized personnel and systems on a need-to-know basis, and store OAuth tokens and credentials in access-controlled cloud infrastructure that relies on our provider's certified security controls. No system is perfectly secure, but we work to protect your data against unauthorized access, disclosure, alteration, and loss.

6. Retention

We keep your data while your account exists. Ask us to delete your account and we will remove personal data within 30 days, except records we must keep for legal or billing reasons and aggregated or de-identified data that no longer identifies you.

7. Your rights

You can request a copy of your data, correction, or deletion at any time by writing to the email address below, and we will not treat you differently for exercising these rights. Depending on where you live - including under US state privacy laws and Israel's Protection of Privacy Law - additional statutory rights may apply; we honor requests from any jurisdiction the same way.

8. Changes and contact

ShapelessAI is a registered business in Israel, based in Tel Aviv-Yafo. We will post any changes here with a new date and notify you of material ones. Questions or requests: hello@shapelessai.com.