Privacy Policy

Who we are

GigaDrip ("we", "our", "us") is a subscription web application that helps creators generate, approve, and schedule social media posts. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

What we collect

• Account data: email address, name, and authentication identifiers (managed via Clerk).
• Billing data: handled by Stripe; we never see or store your full card number.
• Social platform tokens: OAuth access tokens for the accounts you connect — Instagram, Facebook, Threads, X, LinkedIn, TikTok and YouTube. Stored encrypted at rest.
• AI tool API keys: any image-generation API key you provide (BYOK model). Stored encrypted at rest and used only to make generations on your behalf.
• Canva connection: the OAuth access and refresh tokens you grant when you connect Canva, stored encrypted at rest. GigaDrip lists the designs in your Canva account, opens the ones you pick in Canva, creates a new blank design when you choose Start a fresh design, and exports the artwork you select. It never edits or deletes a design you already made.
• Content you create: brand voice profile, templates, drafts, scheduled posts, and uploaded media assets.
• Operational data: log entries, error reports, and basic usage metadata used to operate and improve the service.

How we use it

• Provide and operate the GigaDrip service.
• Generate copy and visuals at your request using your stored brand voice profile and the AI tool keys you supply.
• Send transactional email such as receipts and account notices.
• Process subscription payments through Stripe.
• Diagnose service issues and prevent abuse.

We do not sell your personal information, and we do not use your content to train models.

Third-party services we use

GigaDrip is built on the following providers, each with their own privacy practices:

• Clerk (authentication)
• Supabase (database and encrypted secret storage)
• Stripe (payments)
• Resend (transactional email)
• Cloudflare R2 (asset storage)
• Vercel (application hosting)
• Anthropic Claude API (text generation)
• Canva Connect API (listing your own designs and exporting the ones you choose, with your permission)
• Inngest (job scheduling)
• Meta (Instagram, Facebook and Threads), X, LinkedIn and TikTok (publishing the posts you authorize)
• Google (importing files you pick from Drive, and Gemini/Veo image and video generation)
• Twilio (SMS, if you use it)

Data retention

Photos you upload but never file or use are deleted 30 days after upload. Anything you file into a folder, or use in a post, is kept while your account is active. Items you move to Trash are deleted 30 days later unless a post still uses them. Delivery records for posts we published are kept for up to 10 years. When you delete your account, we remove your personal data within 30 days, except where law requires us to retain it (such as billing records).

Your rights

You can request access to, correction of, or deletion of your personal data at any time by emailing us at the address below. You can also disconnect any social platform or revoke any AI tool key directly from your account settings.

Security

Sensitive data such as social tokens and API keys are encrypted at rest. All traffic to and from GigaDrip is encrypted in transit (HTTPS). No system is perfectly secure, and we encourage you to choose a strong password.

Children

GigaDrip is not directed to children under 18, and we do not knowingly collect personal information from them.

Changes

We may update this policy as GigaDrip evolves. Material changes will be communicated via email or in-app notice.

Contact

Questions or requests: hello@gigadrip.com.