Aidelly Privacy Policy & Data Practices

What We Collect

We collect what we need to run Aidelly for you:

• Account details: your name, email, profile photo, time zone, language, and notification settings.
• Workspace and brand content: workspace names and members, invitations you send, brand profiles (business name, contact details, audience, voice, logos, fonts, and documents), posts, drafts, ideas, and the media you upload.
• AI chat history: the messages you send Aidelly's assistant, its replies, and voice notes you record. We also store brand memories and search embeddings, kept separately for each workspace, so the assistant remembers your brand.
• Billing details: your plan, subscription status, and Stripe customer and payment references. Card numbers go directly to Stripe. Aidelly never sees or stores them.
• Support requests: what you tell us when you contact support, including any attachments.

Social Account Data

When you connect a social account (for example Instagram, Facebook, LinkedIn, X, TikTok, YouTube, Pinterest, Threads, Google Business Profile, Bluesky, or Mastodon), we store:

• Access tokens: the credentials the platform gives us so we can post for you. We encrypt them before storing them.
• Profile info: the account's ID, username, display name, profile picture, and, where the platform shares it, the email on the account.
• Post content: the posts and media you publish or schedule through Aidelly, and the IDs the platform assigns them.
• Performance metrics: follower counts, audience breakdowns, and per-post stats like impressions, reach, likes, comments, shares, saves, and views.
• Inbox messages: if you use the inbox, the comments, mentions, direct messages, and reviews people send to your accounts, including their name, handle, and message, so you can read and reply in one place.

We use this data only to publish, reply, and report on your behalf. When you disconnect an account, we delete its tokens, profile details, inbox messages, and analytics. You can also revoke Aidelly's access from the platform's own settings.

Data From AI Assistants and Connected Apps

You can use Aidelly from AI assistants such as ChatGPT and Claude through our connector (an MCP server). Here's how that works:

• Signing in: you approve the connection by signing in to Aidelly. We then issue the assistant an access token that expires after 30 days. We store a hashed copy of the token, the assistant's client ID, and when it was last used.
• What we receive: only the details the assistant sends when it uses an Aidelly tool, such as post text, a scheduled time, a target account, an image or image link, a prompt to run, or a reply to an inbox message. We don't receive or read the rest of your conversation with the assistant.
• What we send back: the result of the tool you asked for, which can include your posts, drafts, analytics, brand profile, workspace members, and inbox messages. We remove secrets such as tokens and passwords, and fields like email addresses and phone numbers, before sending a result. After that, the assistant's own privacy policy covers what it does with the result.
• What we log: each request, including its content and our response, along with the time, the tool used, and the IP address it came from. See Data Retention below.

The same applies to the other ways you can connect to Aidelly:

• Public API, Zapier, Make, and n8n: we receive whatever your API key or automation sends, and log it the same way.
• Chrome extension: when you click it, it sends the current page's address, title, description, image, and text (or just the text you selected) so Aidelly can turn it into a post or idea. It doesn't read pages in the background.
• Slack, Telegram, and WhatsApp: if you chat with Aidelly there, we store those messages and the assistant's replies as AI chat history.
• Stores and other apps you connect: Shopify, Etsy, and similar store connections share your store and product details. Google Drive shares only the files you pick. Webhooks you set up send post and inbox events to the address you choose. HubSpot and GoHighLevel receive the names and handles of people who message or comment on your connected accounts, so you can follow them up as leads.

Usage Data

We also collect some data automatically when you use Aidelly:

• Activity and access logs: each workspace has an activity log showing who did what and when, along with their IP address and browser. We also log API and connector requests (see above) and media downloads.
• Product analytics: we use PostHog to see which features people use and where they get stuck. We also use Google Analytics in the app to measure how it is used, and Vercel Analytics to count visits to this website.
• Session replay: PostHog session replay is turned on, so PostHog may record how you use Aidelly, such as the pages you view, where you click, and what you scroll past, along with console logs from your browser. We keep these recordings for 30 days. PostHog also records your IP address.
• Error reports: when something breaks, Sentry records the error and the request it happened on. We have Sentry's automatic personal data collection turned off.
• Sign-up and referrals: how you first found us (for example, a campaign link) and, if you came through a partner, a referral cookie from our affiliate tool, Endorsely.
• Cookies: see our Cookie Policy for the full list.

How We Use Your Data

• Run the features you ask for: AI drafting, image and video generation, scheduling, publishing, inbox replies, and reports.
• Personalize content and recommendations for your brand.
• Bill you and manage your subscription.
• Keep Aidelly secure, prevent abuse and fraud, and fix bugs.
• Understand how the product is used so we can improve it.
• Contact you about account activity, support, and opt-in marketing.
• Meet our legal obligations.

We never sell or rent personal information.

AI Processing

When you use an AI feature, the prompt and the content needed for it (such as your brand profile or an image you upload) go to an AI model provider to produce the result. Most requests pass through the Vercel AI Gateway to providers including OpenAI, Anthropic, Google, xAI, Moonshot AI, ByteDance, and Kuaishou. Which provider handles a request depends on the feature. Voice notes go directly to OpenAI to be transcribed.

Each provider handles these requests under its API terms. How long it keeps request data depends on those terms and our account settings with it. The API terms of OpenAI, Anthropic, and Google don't allow them to use this data to train their models by default. Other providers, such as xAI, Moonshot AI, ByteDance, and Kuaishou, handle requests under their terms with the Vercel AI Gateway.

Supabase is our database provider. It stores your data for as long as described under Data Retention, not just while a task runs.

Vector embeddings are stored privately per workspace so the agent remembers your brand context while keeping it secure.

Who We Share Data With

We share personal data only with the following kinds of recipients, and only what each one needs. Our sub-processors page names every vendor.

• Hosting, database, and infrastructure: Vercel (hosting), Supabase (database, sign-in, and file storage), Inngest (background jobs), Redis (caching), and Cloudflare (bot protection on sign-up forms).
• AI model providers: the Vercel AI Gateway and the providers behind it, including OpenAI, Anthropic, Google, xAI, Moonshot AI, ByteDance, and Kuaishou, plus Replicate (image and video), Supadata (video transcripts), and web search providers. If you add your own API key, requests go to the provider it belongs to, such as OpenRouter.
• Analytics and monitoring: PostHog, Google Analytics, Vercel Analytics, and Sentry.
• Referrals: Endorsely, our affiliate tool, if you came through a partner's link.
• Payments: Stripe.
• Email: Resend for account and notification emails, and Loops for marketing emails.
• Support: GitHub, where we track support tickets in a private repository.
• Social platforms you connect: we send each platform the posts, media, and replies you publish through it.
• Apps and AI assistants you connect: ChatGPT, Claude, Slack, Telegram, WhatsApp, HubSpot, GoHighLevel, Shopify, Etsy, Google Drive, Zapier, Make, webhooks, and similar tools get the data you ask them to send or retrieve.
• People you share with: teammates in your workspace, and clients you send a review, report, or calendar link to.
• Legal and business transfers: authorities when the law requires it, and a successor company if Aidelly is merged or sold, under equivalent protections.

Data Retention

We keep personal data only as long as we need it to run Aidelly for you, or as the law requires. Here are the specifics:

Service providers keep data they hold for us under their own terms. Data you sent to a social platform or AI assistant stays there under that service's policy, even after you delete it from Aidelly.

Google User Data: Sharing, Transfer, and Disclosure

If you connect Google services, we access Google user data only within the scopes you approve and only to provide or improve the user-facing features you requested.

We may share, transfer, or disclose Google user data only with:

• Service providers that process data on our behalf under contract (such as hosting, storage, and infrastructure providers).
• Third-party services you explicitly direct us to interact with (for example, when you choose to publish or sync content).
• Legal authorities when disclosure is required to comply with applicable law or valid legal process.
• A successor organization in the event of a merger, acquisition, or asset transfer, subject to equivalent data protection commitments.

We do not sell Google user data. We do not transfer Google user data for advertising, data brokerage, creditworthiness, or lending. We do not use Google user data to train generalized AI models.

Your Rights and Controls

• Access and export: ask us for a copy of your personal data, or export your content and analytics through our public API.
• Correct: update your details in the app or ask support to.
• Delete: delete individual posts, media, and AI conversations, or a whole workspace, in the app. To delete your account, send a request from your account settings or email us. We'll delete your account and the workspaces you own within 30 days. When we delete your account, we also remove your data from our service providers (including Stripe, Loops, PostHog, and Resend) within the same 30 days, except records the law requires us to keep, such as billing records.
• Disconnect accounts: disconnect any social account in the app. That deletes its tokens and the data we pulled from it.
• Revoke AI assistant and API access: ChatGPT, Claude, and other connected assistants show up in your API keys settings, where you can revoke them at any time. You can also remove the Aidelly connector from the assistant's own settings.
• Email: unsubscribe from marketing emails with the link in any of them, and manage product notifications in settings.
• Cookies: block or clear cookies in your browser, as described in our Cookie Policy.

To use any of these rights, email us at the address below. We don't treat you differently for using them.

Security & Compliance

Aidelly encrypts data in transit and at rest, limits staff access, and monitors infrastructure for threats. We follow U.S. and international privacy requirements and notify you of any incident.

Changes to This Policy

When we change this policy, we'll post the new version here and update the date at the top.

Contact Us

Email privacy@aidelly.com with privacy questions or requests.