1. Introduction

Ship Poster ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI marketing platform.

Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide

Account Information: Email address, password, and profile details when you create an account
Brand Information: Brand names, descriptions, voice preferences, target audiences, and brand assets you upload
Campaign Data: Campaign names, goals, content preferences, and scheduling details
Generated Content: Text prompts, AI-generated posts, and images you create
Payment Information: Billing details processed securely through Stripe (we do not store full payment card numbers)
Communications: Information you provide when contacting support

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, actions taken, and time spent on the Service
Device Information: Browser type, operating system, device type, and screen resolution
Log Data: IP address, access times, and referring URLs
Cookies and Similar Technologies: Session cookies for authentication and analytics cookies for service improvement

2.3 Information from Third Parties

Social Media Platforms: When you connect social accounts, we receive basic profile information and access tokens needed for publishing
Payment Processor: Stripe provides us with transaction confirmations and subscription status

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Process transactions and manage your subscription
Generate AI content tailored to your brand and preferences
Schedule and publish posts to your connected social media accounts
Send you service-related communications (account updates, security alerts)
Respond to your support requests and inquiries
Analyze usage patterns to improve user experience
Detect, prevent, and address technical issues and security threats
Comply with legal obligations

4. Third-Party Services

We share information with the following third-party services to provide our features. For a complete list of subprocessors with details on data processed and locations, please see our Subprocessors page.

4.1 AI Providers

We use OpenAI (GPT-4) and Google (Gemini) to generate text and images. Your prompts and brand information are sent to these services to generate content. Please review their privacy policies:

4.2 Infrastructure and Authentication

We use Supabase for database hosting, authentication, and file storage. Your data is stored securely with row-level security policies.

Supabase Privacy Policy

4.3 Payment Processing

We use Stripe to process payments. Your payment information is handled directly by Stripe and is subject to their privacy policy. We receive only transaction confirmations and do not store your full payment card details.

Stripe Privacy Policy

4.4 Social Media Publishing

We use the LATE API to publish content to your connected social media accounts. When you connect a social account, we store the necessary access tokens to post on your behalf.

4.5 Analytics

We use Google Analytics 4 to understand how users interact with the Service. This helps us improve features and user experience. Google Analytics collects anonymized usage data.

Google Privacy Policy

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Essential Cookies: Maintain your logged-in session and security
Preference Cookies: Remember your settings (e.g., theme preference)
Analytics Cookies: Understand usage patterns and improve the Service

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

Account Data: Retained until you delete your account
Generated Content: Retained until you delete it or your account
Usage Logs: Retained for up to 90 days
Billing Records: Retained as required by tax and accounting regulations (typically 7 years)

After account deletion, we may retain anonymized, aggregated data for analytics purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit (TLS/SSL) and at rest
Row-level security policies to ensure data isolation
Regular security assessments and monitoring
Access controls limiting employee access to user data

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

Access: Request a copy of your personal information
Correction: Update or correct inaccurate information
Deletion: Request deletion of your personal information
Portability: Receive your data in a portable format
Opt-out: Unsubscribe from marketing communications
Withdraw Consent: Where we rely on consent, withdraw it at any time

To exercise these rights, please contact us at support@ship-poster.com. We will respond within 30 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for any international transfers, including standard contractual clauses where applicable.

10. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@ship-poster.com

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information we collect, use, and disclose
Right to request deletion of your personal information
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising your privacy rights

14. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

Right to access, rectify, or erase your personal data
Right to restrict or object to processing
Right to data portability
Right to lodge a complaint with a supervisory authority

Our legal bases for processing include: contract performance (providing the Service), legitimate interests (improving the Service), and consent (where applicable).