Privacy Policy

What we collect

• Your account details — the email you sign up with, your business name, category, website, and time zone.
• A photo of you — the portrait your videos are built from, together with a record of when you consented to us using it and which consent wording you were shown.
• Your connected accounts — for each account you connect, the identifier that platform gives us (your Instagram account id, your TikTok open id), your username on it, and the permissions you granted. The access token is stored separately from everything else, in a part of our database that is not reachable from any browser. We ask for the narrowest permissions that let us publish and read back how a post did; nothing we hold lets us read your private messages, your followers’ details, or anything you did not post through us.
• What we made and posted — the scripts, captions, videos, and the identifiers of the posts we published for you.
• How your posts performed — views, reach, watch time, likes, comments, shares, saves, profile visits, and follows, read back from Instagram and TikTok at four points after each post. We read these figures only for posts we published for you, and we use them for one thing: showing you which kinds of video work, and choosing what to make next.

How long we keep performance data

Performance data retrieved from Instagram and TikTok is kept for 24 months from the date of the post it belongs to, and is then deleted. We keep it that long because comparing this year against last year is the point of collecting it at all; beyond that it stops being useful and we do not want it.

If you delete your account before that, it goes immediately — see below.

What a deletion request removes, and what it does not

You can ask us to delete your data from your account settings, or through Instagram or TikTok if you connected there. Either way we act on it the same day.

You can also disconnect a single account without closing your Unibasal account — from your settings here, or by removing our access in Instagram’s or TikTok’s own app settings. Either way we delete that platform’s access token and stop posting there. Revoking access on the platform ends our ability to post there immediately; we record the connection as revoked and delete the token we were holding.

Removed completely:

• Your access tokens for every connected platform — Instagram and TikTok — deleted first, before anything else.
• Your photo, and every video made from it.
• The consent record attached to that photo.
• Your Instagram and TikTok connections, the account identifiers, and your usernames on them.
• Every performance figure read back from Instagram and TikTok.
• The identifiers of the posts we published, and their captions.
• Your account and your email address.

Kept, with everything identifying removed:

• What kind of video each one was — the opening style, the format, the length, the call to action — with the scripts, captions, and headlines erased.
• What each video cost us to make, how long it was, and whether it succeeded.

We keep that second list because it is how we know what our product costs to run and which kinds of video work. None of it names you, names your business, or can be traced back to either — the text that would have is deleted along with everything else, and the remaining rows are moved off your account entirely.

Who else sees it

We use a small number of providers to run the service: Supabase (database and file storage), Anthropic (writing scripts and captions), fal.ai (generating the videos), Meta (posting to Instagram and reading performance back), and TikTok (posting to TikTok and reading performance back). Each of them only receives what that job needs.

What goes to Instagram and TikTok is the video, its caption, the AI-content disclosure, and the schedule — the same things you would send if you posted it yourself. Your photo is not sent to them as a photo, and nothing you tell us about your business during onboarding is. We do not sell your data, we do not use it to advertise to you, and we do not share what one platform gives us with any other platform.

Once a post is live, it is also governed by that platform’s own privacy policy — Meta’s for Instagram, TikTok’s for TikTok — and by your settings there, which are yours to change and outside our control.

Your likeness

The videos are AI-generated from your photo and are labelled as AI-generated on every post — Instagram’s AI-content label and TikTok’s AI-generated content disclosure. You can withdraw your consent at any time by deleting your account, which removes the photo and every video made from it.

Contact

Questions about any of this: [email protected].