Privacy Policy

This policy explains what personal information Feedforce collects, why, who it goes to and what you can do about it. It covers the website at feedforce.ai and the Feedforce app (together, "Feedforce").

Who we are

Feedforce ("we", "us") is run from the United Kingdom, and we are the controller of the personal information described here. You can reach us about anything in this policy through the contact form on our website.

What we collect

• Account details. Your email address and password (stored as a hash), or your name, email and profile picture if you sign in with Google. We also record when you sign in.
• Your workspace. What you give us to learn your brand and make posts: your brand name, Instagram handle, descriptions, logos, fonts, images and video clips, and the templates, posts, captions and notes made in your workspace, including what the agent writes down about your brand.
• Connected accounts. If you connect Instagram, we receive access to your Instagram business account (profile, posts and insights) and the ability to publish posts you approve. If you connect Google Sheets, we receive access to the spreadsheets you use with Feedforce. We keep that access in a secure cookie in your browser that only our servers can read, and keep a copy of your Instagram connection on our servers so the agent can publish for you.
• Credentials you add. If you sign in with your Claude account or add API keys for outside services, we store them encrypted so the agent can use them on your behalf.
• Billing. If you subscribe, our payment provider Stripe collects your payment details. We never see your full card number. We keep your plan, subscription status and billing email.
• Demo requests. If you use the form on our website, your name, company, work email and expected posting volume.
• Activity and technical data. A record of changes made in a workspace and by whom, and the standard information our hosting providers log when you use Feedforce, such as your IP address, browser and the time of each request.

How we use it, and our legal basis

• To provide Feedforce: run your account and workspace, learn your brand, make and edit posts, and publish them when you ask. Legal basis: performing our contract with you.
• To bill you and keep the records the law requires. Legal basis: our contract, and our legal obligations.
• To keep Feedforce secure and working: prevent abuse, fix problems and keep track of changes. Legal basis: our legitimate interest in running a safe, reliable service.
• To reply to demo requests and messages. Legal basis: our legitimate interest in answering people who contact us.
• To tell you about important changes to your account or these terms. Legal basis: our contract with you.

We don't send marketing emails without your consent. We don't sell your personal information, we don't use it for advertising, and we don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

AI processing

Feedforce makes posts with AI. To do that, the content in your workspace and the requests you make are sent to the AI services listed below, which process them on our behalf and return a result. The Feedforce agent runs on your own Claude account, so what it does with Anthropic is also covered by Anthropic's terms and privacy policy for your account. We don't use your content to train AI models. Each AI provider handles what it receives under its own terms, which we choose with that in mind, and we only send what a task needs.

Information from Google

When you sign in with Google, we receive only your name, email address and profile picture, and use them only to create and run your account. When you connect Google Sheets, we use that access only to read and write the spreadsheets you use with Feedforce, at your request.

Feedforce's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't use information from Google APIs to develop, improve or train generalised AI or machine-learning models, and we don't sell it or use it for advertising.

Who we share it with

We share personal information only with the services that help us run Feedforce, and only what each one needs:

• Supabase: database, sign-in and file storage, hosted in the European Union (Ireland).
• Vercel: website and app hosting, and the machines the agent runs on.
• Stripe: payments and subscriptions.
• Anthropic: the Claude models behind the agent.
• Google: sign-in with Google, Gemini models for image tools, and the fonts on our website.
• OpenRouter and DeepSeek: AI models for writing and research features.
• Bria: image tools such as background removal and upscaling.
• Serper, SerpApi, NewsData and twitterapi.io: web, news and social search when the agent researches a post. These receive search terms, not your account details.
• Meta (Instagram) and Google (Sheets): only if you connect them, to do what you ask with those accounts.

We may also share information if the law requires it, to protect our rights or the safety of others, or as part of a sale or reorganisation of Feedforce, in which case this policy will continue to apply to it.

International transfers

Some of these services are based in, or process data in, the United States and other countries outside the UK and the European Economic Area. Where they do, we rely on the safeguards UK and EU law provide, such as adequacy regulations (including the UK–US data bridge), or the standard contractual clauses with the UK Addendum or the UK International Data Transfer Agreement.

How long we keep it

We keep your account and workspace data for as long as your account is open. If you ask us to delete your account, we delete your data within 30 days, except that copies in backups can last up to a further 90 days, and we keep billing records for as long as tax law requires (six years in the UK). Demo requests are kept for up to two years. Hosting logs are kept for a limited time by our providers under their own policies.

Your rights

Under UK and EU data protection law you can ask us to give you a copy of your personal information, correct it, delete it, restrict or object to how we use it, or send it to you or another service in a portable format. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, contact us through the contact form on our website. We'll reply within one month and may need to confirm your identity first.

You can also complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live. We'd appreciate the chance to sort it out with you first.

Deleting your data

To delete your account and its data, contact us through the contact form on our website using the email address on your account. You can disconnect Instagram or Google at any time in the app, or from your Instagram or Google account settings; when you do, we stop using that access, and we delete the stored access when you delete your account.

California residents

This section adds to the rest of this policy for California residents, under the California Consumer Privacy Act (as amended by the CPRA) and the California Online Privacy Protection Act.

• What we collect falls into these categories: identifiers (name, email, IP address), commercial information (your plan and subscription), internet activity (activity in your workspace and technical logs), professional information (your company and brand), and the content you upload. The sections above describe the sources, purposes and recipients.
• We do not sell or share your personal information, as the CCPA defines those terms, and we haven't in the past 12 months. We don't use sensitive personal information for anything beyond providing Feedforce.
• Your rights. You can ask to know what personal information we have about you and how we use it, and to have it deleted or corrected. Contact us through the contact form on our website. You can use an authorised agent, and we'll ask them for proof of authority. We won't treat you differently for using these rights.
• Do Not Track. We don't track you across other websites and don't allow others to, so Feedforce works the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.
• Reviewing and changing your information. You can review and change most of your information in the app, or ask us by email.

Cookies and local storage

We use only what Feedforce needs to work: your browser's local storage keeps you signed in and remembers interface choices such as the section you last opened, secure cookies keep you connected to Instagram (for up to 60 days) and Google (for up to 7 days), and 10-minute cookies protect the connection while you link them. We also remember that you've closed our cookie notice. All of these are needed for things you ask Feedforce to do, so we don't ask for consent to them. We don't use advertising or analytics cookies. Our website loads fonts from Google Fonts, which means your browser sends your IP address to Google when the page loads.

Children

Feedforce is for businesses and people aged 18 or over. We don't knowingly collect information from children. If you think a child has given us personal information, email us and we'll delete it.

Security

We protect your information with encryption in transit, encrypted storage of the credentials you add, and access rules that keep each workspace separate. No service is perfectly secure, so if you think your account has been compromised, tell us straight away.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you by email or in the app before it takes effect.

Contact

Feedforce, the United Kingdom. Contact us through the contact form on our website.