Privacy Policy

PostingPilot is an AI social content studio operated by FC Studio. This page is maintained by us to explain, in plain language, what data the app handles and how you stay in control of it.

Account data: your email address, display name and authentication records, created when you sign up.

Workspace content: topics, drafts, posts, brand kits, voice samples, images, carousels and videos you create or upload.

Integration credentials: API keys you add for Publer and other services, stored server-side and used only to make requests on your behalf.

Usage data: AI generation counts, feature usage and plan limits, used to enforce entitlements and show your usage in-app.

Billing data: subscription status, plan and invoice references. Card details are handled by Stripe and are never stored by PostingPilot.

To operate the product: generate drafts in your voice, schedule posts through your Publer account, and render images, carousels and video.

To enforce plan limits, including the trial's daily and monthly AI generation caps.

To send transactional email such as sign-in, password reset and billing notifications.

To debug, secure and improve the service. We do not sell your data, and we do not use your content to train third-party foundation models beyond the processing needed to fulfil your own requests.

We rely on a small set of processors: our cloud platform for hosting, database, authentication and file storage; AI model providers used through our gateway for text, image and video generation; Replicate for AI video rendering; Publer for scheduling and publishing; Stripe for payments; and Resend for transactional email.

Each provider receives only the data needed for its function.

Workspace content is retained while your account is active. You can delete posts, workspaces and stored credentials at any time from within the app.

When you close your account we remove your workspace content within 30 days, except records we must keep for billing, tax or fraud-prevention purposes.

Access to your data is scoped per user and per workspace through row-level security rules, and integration secrets are stored server-side rather than in your browser. Traffic is encrypted in transit.

No system is perfectly secure. If you believe you have found a vulnerability, email privacy@fcstudio.us and we will respond.

You can request a copy of your data, ask us to correct it, or ask us to delete it. Email privacy@fcstudio.us from your account address and we will action the request.

We use cookies and local storage strictly to keep you signed in and to remember interface preferences. We do not run third-party advertising trackers.

If we make a material change we will update this page and, where the change affects how your data is used, notify you by email.