Privacy Policy

What we collect

• Your account details: the email you sign up with, your business name, category, website, and time zone.
• A photo of you: the portrait your videos are built from, together with a record of when you consented to us using it and which consent wording you were shown.
• Your connected accounts: for each account you connect, the identifier that platform gives us (your Instagram account id, your Facebook Page id and the app-scoped id of the Facebook user who connected it, your TikTok open id), your username or Page name on it, and the permissions you granted. For Facebook we connect exactly one Page you choose, and hold that Page’s access token, never a token for your personal profile. The access token is stored separately from everything else, in a part of our database that is not reachable from any browser. We ask for the narrowest permissions that let us publish and read back how a post did; nothing we hold lets us read your private messages, your followers’ details, or anything you did not post through us.
• What we made and posted: the scripts, captions, videos, and the identifiers of the posts we published for you.
• How your posts performed: views or plays, reach, watch time, likes or reactions, comments, shares, saves, and follows, read back from Instagram, Facebook, and TikTok at several points after each post (the exact figures each platform offers differ). We read these figures only for posts we published for you, and we use them for one thing: showing you which kinds of video work, and choosing what to make next.
• What you enter into our free tools: if you use a free writing tool or make a free video without an account, what you type into it (for the free video: a business name, category, offer, customer, and optionally a website) and a one-way hash of your IP address, used only to limit how many free videos one visitor can make. The writing tools keep a count of requests per IP address in memory for a day and store nothing else.
• How you use our websites: through Google Analytics, unless you turn it off; see Cookies and analytics below.

Cookies and analytics

We use two kinds of cookies on www.unibasal.com and app.unibasal.com.

Essential cookies, always on:

• Sign-in cookies that keep you signed in to the app and protect your session. They last until you sign out or the session expires.
• free_video_run: remembers the free video you made so you can get back to it, for 90 days.
• unibasal_consent: remembers your cookie choice, for 12 months.

Analytics cookies, which you can turn on or off:

We use Google Analytics, provided by Google, to see how people find and use our websites so we can improve them. It sets the _ga and _ga_* cookies, which last up to two years, and records the pages you visit, how you arrived (the referring site or campaign), your device type, browser, operating system, screen size, and language, and your approximate location (country and city, worked out from your IP address; Google Analytics does not store the IP address itself). It also records a few actions: pressing a sign-up, pricing, or contact button, using a free tool, starting or finishing a free video, signing in or signing up, finishing onboarding, and buying a plan (the plan and its price, never your card details).

We do not send Google your name, your email, what you type into our tools, or anything about your videos. We do not use Google Analytics for advertising: Google signals and ad personalization are off, and we do not share this data with Google for its own advertising. Google Analytics keeps the data for 14 months, and Google may process it outside Canada, including in the United States.

If your device is set to a European time zone (covering the EU, the EEA, the United Kingdom, and Switzerland), analytics stays off until you accept it in the cookie banner. Everywhere else it is on unless you turn it off.

You can change your choice at any time with the Cookie Settings link in the footer of www.unibasal.com, or on the app’s sign-in page. Your choice applies to both sites. Turning it off stops Google Analytics loading and deletes its cookies from your browser. You can also install Google’s opt-out browser add-on or block cookies in your browser settings.

How long we keep performance data

Performance data retrieved from Instagram, Facebook, and TikTok is kept for 24 months from the date of the post it belongs to, and is then deleted. We keep it that long because comparing this year against last year is the point of collecting it at all; beyond that it stops being useful and we do not want it.

If you delete your account before that, it goes immediately. See below.

What a deletion request removes, and what it does not

You can ask us to delete your data from your account settings, or through Instagram, Facebook, or TikTok if you connected there. Meta sends us your deletion request through its data deletion callback. Either way we act on it the same day.

You can also disconnect a single account without closing your Unibasal account, from your settings here, or by removing our access in Instagram’s, Facebook’s, or TikTok’s own app settings. Either way we delete that platform’s access token and stop posting there. Revoking access on the platform ends our ability to post there immediately; we record the connection as revoked and delete the token we were holding.

Removed completely:

• Your access tokens for every connected platform (Instagram, Facebook, and TikTok), deleted first, before anything else.
• Your photo, and every video made from it.
• The consent record attached to that photo.
• Your Instagram, Facebook, and TikTok connections, the account and Page identifiers, and your usernames and Page names on them.
• Every performance figure read back from Instagram, Facebook, and TikTok.
• The identifiers of the posts we published, and their captions.
• Your account and your email address.

Kept, with everything identifying removed:

• What kind of video each one was (the opening style, the format, the length, the call to action), with the scripts, captions, and headlines erased.
• What each video cost us to make, how long it was, and whether it succeeded.

We keep that second list because it is how we know what our product costs to run and which kinds of video work. None of it names you, names your business, or can be traced back to either. The text that would have is deleted along with everything else, and the remaining rows are moved off your account entirely.

Who else sees it

We use a small number of providers to run the service: Supabase (database and file storage), our server hosting provider (running the app), Stripe (taking payments; your card details go to Stripe, never to us), Google (Google Analytics, as described above), Cloudflare (storing and delivering the finished videos), Anthropic (writing scripts and captions, and helping decide what to make next from how your videos performed), fal.ai (generating the videos), Meta (posting to Instagram and Facebook and reading performance back), and TikTok (posting to TikTok and reading performance back). Each of them only receives what that job needs.

What goes to Instagram, Facebook, and TikTok is the video, its caption, the AI-content disclosure where the platform offers one, and the schedule: the same things you would send if you posted it yourself. Your photo is not sent to them as a photo, and nothing you tell us about your business during onboarding is. We do not sell your data, we do not use it to advertise to you, and we do not share what one platform gives us with any other platform.

Once a post is live, it is also governed by that platform’s own privacy policy (Meta’s for Instagram and Facebook, TikTok’s for TikTok) and by your settings there, which are yours to change and outside our control.

Your likeness

The videos are AI-generated from your photo. Where the platform lets us, we label them as AI-generated: Instagram’s AI-content label and TikTok’s AI-generated content disclosure. Facebook does not currently offer an AI-content label for Reels published this way, so on Facebook no label is set by us. You can withdraw your consent at any time by deleting your account, which removes the photo and every video made from it.

Contact

Questions about any of this: [email protected].

CompetiTech Inc., Ontario, Canada.