Privacy Policy

1. What we collect

Account: your name, email, and avatar from Google sign-in; we use Google data only to sign you in and identify your account. Content: the instructions you give the agent, the conversations you have with it, and what it generates. Usage: pages visited, features used, device and log data. Cookies: essential cookies keep you signed in, and our analytics uses a small identifier to measure usage; we set no advertising cookies. Payments: handled by Polar, our merchant of record; we never see your card number.

Separately from your account, we maintain a proprietary research knowledge base of publicly available content and engagement statistics sourced from third-party data providers. It is used in aggregate to learn what content performs; it is not linked to your account data.

2. How we use it

To run the service: generating your content, keeping your conversation history, metering usage, and billing.

To improve it: analyzing usage, evaluating and training the models, prompts, and skills behind the agent, and building aggregate statistics about what performs. Where we publish numbers, they are aggregated and never identify you or your content. If we ever materially change how we use your data, the change will apply going forward and we will tell you first.

3. Who we share it with

Service providers that run the product: Google Cloud (hosting and AI models) and Polar (payments). They process data for us under their own safeguards. We do not sell or share your personal information as those terms are defined under US state privacy laws, and we have not done so in the preceding 12 months.

4. Connected social accounts

You can connect the social platforms we integrate with or are applying to integrate: LinkedIn, X, Bluesky, Instagram, Facebook Pages, Threads, YouTube, TikTok, Pinterest, and Reddit. For each account you connect, we store the OAuth access token you authorize and your account handle so the product can publish on your behalf. We publish only content you explicitly approve, we do not read your private messages, and disconnecting an account deletes its stored token immediately. We do not use any platform-sourced data to train models. You can also request deletion at any time as described on our Data Deletion page.

For YouTube specifically, we request only the youtube.upload scope, which we use to upload videos you have created and approved to your own YouTube channel on your behalf. We do not read, list, modify, or delete any other data in your YouTube account, and our use of YouTube also follows the YouTube Terms of Service and the Google Privacy Policy.

ShapelessAI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

For authorized platform data (including YouTube), we store it no longer than 30 days, then refresh or delete it, and we honor deletion requests for platform data within 7 days.

5. Security

We protect your data with encryption in transit (TLS) and at rest, restrict access to authorized personnel and systems on a need-to-know basis, and store OAuth tokens and credentials in access-controlled cloud infrastructure that relies on our provider's certified security controls. No system is perfectly secure, but we work to protect your data against unauthorized access, disclosure, alteration, and loss.

6. Retention

We keep your data while your account exists. Ask us to delete your account and we will remove personal data within 30 days, except records we must keep for legal or billing reasons and aggregated or de-identified data that no longer identifies you.

7. Your rights

You can request a copy of your data, correction, or deletion at any time by writing to the address below, and we will not treat you differently for exercising these rights. Depending on where you live - including under US state privacy laws and Israel's Protection of Privacy Law - additional statutory rights may apply; we honor requests from any jurisdiction the same way.

8. Changes and contact

ShapelessAI is operated by Tal Weiss. We will post any changes here with a new date and notify you of material ones. Questions or requests: hello@shapelessai.com.