Privacy Policy

Last updated 25 July 2026

The short version: we collect what the service needs to run — your email, your brand materials, your billing state — and nothing else. No ads, no analytics trackers, no selling data, no training AI models on your content. One essential cookie, and only after you sign in.

1. What we collect, and why

• Waitlist: your email and join time, to invite you in order and honour the founder deal. Nothing else is sent to that address, and you can leave the list any time by emailing us.
• Account: email, sign-in method (password hash or your Google account id — never your Google password), session tokens, and your plan/billing state.
• Your workspace: the brand materials you provide (voice, facts, competitor handles, your own channel handles) and the drafts generated from them.
• Server logs: standard request logs (IP, path, time) kept briefly for security and debugging. The waitlist also records IP temporarily for rate-limiting.

We don't collect anything from your visitors, and we don't build profiles of you from other sources.

2. Cookies

The public site sets no cookies. Signing in sets one essential session cookie so you stay signed in; it isn't used for tracking and there are no third-party or advertising cookies anywhere. Because everything is strictly necessary, there's no cookie banner — if we ever add analytics, this policy changes first and we'll ask properly.

3. Who processes data for us

ICS runs on a small set of processors, each doing one job:

• Amazon Web Services — hosting (servers in the United States).
• Postmark (ActiveCampaign) — sends account and digest email.
• Anthropic — the AI API that turns your brand materials into drafts. Sent only when you generate; API data is not used to train models.
• Google — sign-in, only if you choose "continue with Google".
• Lemon Squeezy — merchant of record for paid plans. Card details go directly to them; we never see or store them, only your subscription state.
• Apify — optional fetching of public competitor posts, where enabled.

Competitor monitoring reads public pages and feeds of accounts you configure; we don't access anyone's private data.

4. Where your data lives, and for how long

• Workspace and account data: on our US servers (with operator-controlled backups) while your account is active.
• Closed accounts: workspace data deleted within 30 days of a deletion request; minimal billing records kept as long as tax law requires (that retention is Lemon Squeezy's, mostly).
• Waitlist entries: kept until you join, ask to be removed, or the list is retired.

5. Your rights

Email support@infinitecontent.studio to access, correct, export, or delete your data — whether or not GDPR/CCPA-style rights formally apply to you, we honour these requests for everyone. Deletion requests are actioned within 30 days. If you're in the EU/UK and unhappy with our answer, you can complain to your local supervisory authority.

6. Changes

If this policy changes materially, account holders get an email before the change takes effect. The date at the top always tells you when it last moved.