1. Introduction
Clonepost ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.
2. Information We Collect
Information You Provide
- Account Information: Email address, name (if provided)
- Content: Sample posts you submit for voice analysis, topics you request
- Payment Information: Processed securely by Stripe; we do not store card details
Information Collected Automatically
- Usage Data: Features used, content generated, timestamps
- Device Information: Browser type, operating system, IP address
- Analytics: Page views, clicks, session duration (via PostHog)
3. How We Use Your Information
We use your information to:
- Provide and improve the Service
- Analyze your writing style and generate personalized content
- Process payments and manage subscriptions
- Send important service updates and notifications
- Analyze usage patterns to improve features
- Prevent fraud and ensure security
- Comply with legal obligations
4. AI Processing
Your sample posts are processed by AI (Anthropic Claude) to analyze your writing style. This processing:
- Is necessary to provide the core service functionality
- Creates a "voice fingerprint" stored in our database
- Does not use your content to train AI models (per Anthropic's API terms)
- Is subject to Anthropic's privacy practices for API usage
5. Data Sharing
We share your data only with:
- Anthropic: AI processing for content generation
- Stripe: Payment processing
- Supabase: Database and authentication hosting
- Vercel: Application hosting
- PostHog: Analytics (anonymized where possible)
We do NOT sell your personal information to third parties.
6. Data Retention
We retain your data as follows:
- Account data: Until you delete your account
- Generated content: Until you delete it or your account
- Voice profiles: Until you delete them or your account
- Payment records: As required by law (typically 7 years)
- Analytics: Aggregated data retained indefinitely; identifiable data for 2 years
7. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate information
- Deletion: Delete your account and associated data
- Portability: Export your data in a common format
- Objection: Opt out of certain data processing
To exercise these rights, contact us at hello@clonepost.io
8. Security
We implement industry-standard security measures including:
- Encryption in transit (HTTPS/TLS)
- Encryption at rest for sensitive data
- Secure authentication via Supabase Auth
- Regular security reviews
- Access controls and audit logging
9. Cookies
We use essential cookies for authentication and session management. We also use analytics cookies (PostHog) to understand how users interact with our service. You can disable non-essential cookies in your browser settings.
10. International Transfers
Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.
11. Children's Privacy
Clonepost is not intended for users under 18 years of age. We do not knowingly collect personal information from children.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or through the Service. Your continued use constitutes acceptance of the updated policy.
California Privacy Rights (CCPA)
California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete, and the right to opt-out of the sale of personal information. We do not sell personal information.
EU/UK Privacy Rights (GDPR)
If you are in the EU or UK, you have rights under GDPR including access, rectification, erasure, restriction, portability, and objection. Our legal basis for processing is contract performance (providing the service) and legitimate interests (improving the service).