Privacy Policy

Account details — your name, email address and (optionally) a phone number, handled by our authentication provider Clerk. We never store passwords.

Your preferences — the topic you post about, tone, language, and any standing AI instructions you write.

Channel connections — for each channel you connect, an access token issued by that platform, plus your public profile name, handle, avatar and follower/engagement statistics.

Your content — the posts, captions and media you create, schedule or publish through RiseScribe.

Payment records — plan, amount, and Razorpay order and payment IDs. Card and UPI details go directly to Razorpay; we never see or store them.

Technical data — your device timezone and approximate country (used to pick trends and schedule at your local time), plus standard request logs.

To run the service you asked for: generating drafts, publishing to your channels, scheduling at your local best time, showing your analytics, enforcing plan limits, taking payment, and emailing you about failures, limits and account matters. We do not sell your personal data, and we do not use it for advertising.

Only the processors needed to deliver the product: Cloudflare (hosting, database, media storage), Clerk (authentication), Postproxy (platform OAuth, publishing and analytics), Google Gemini and Cloudflare Workers AI (generating text and images), Razorpay (payments), and Resend (transactional email). Each receives only what it needs, and the social platforms receive exactly what you choose to publish.

When you ask for a draft or an image, your prompt — along with your tone, language and any standing AI instructions — is sent to our AI providers to produce that output. Don't put confidential information or anyone else's personal data in prompts.

Data is stored on Cloudflare's global infrastructure. We keep your account data while your account is active. When you disconnect a channel we revoke and delete its access token immediately and keep a permanent record that the connection was revoked, so it can't be silently reused.

Delete your account and we remove your profile, content and connections within 30 days, apart from records we must keep for tax and accounting law (typically payment records, up to 8 years).

You can access, correct, export or delete your data, withdraw consent, and object to processing. Most of it you can do yourself in Settings; for anything else email [email protected] and we'll action it within 30 days.

Everything travels over HTTPS. Platform tokens are held encrypted and are never exposed to the browser. API requests are authenticated against a verified session — the app can't act for a user it hasn't proven you are. No system is perfect, so if a breach ever affects you, we'll tell you promptly.

We use only the cookies and local storage needed to keep you signed in and remember your app preferences — no advertising or third-party tracking cookies. RiseScribe isn't intended for children under 13, and we don't knowingly collect their data.