Privacy Policy

1. Introduction

FlyingToast ("we", "us", "our") operates the FlyingToast platform, an AI-powered social media automation service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By using FlyingToast, you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

Account Information

When you register, we collect your name, email address, and password. If you sign in with Google, we receive your name, email, and profile picture from Google.

Organization & Team Data

We store your organization name, team member details, and role assignments to provide multi-tenant access to the platform.

Brand Data Uploads

You may upload brand materials including PDF documents, website URLs, text descriptions, and logo images. These are stored securely and used exclusively to train your organization's brand voice profile. Brand data is never shared across organizations.

Social Media Connections

When you connect social media accounts (LinkedIn, Instagram, Facebook, X/Twitter, etc.), we store the account identifiers and access tokens provided by the social platform through our publishing partner. We do not store your social media passwords.

Generated Content

We store all AI-generated posts, images, and associated metadata (schedules, status, platform variants) within your organization's account.

Usage Data

We collect anonymized usage analytics including page views, feature usage, and platform interaction events to improve our product.

3. AI Processing

FlyingToast uses artificial intelligence to analyze your brand data and generate content. Here is how your data is processed:

• Brand Voice Analysis - Your uploaded documents and text are sent to our AI provider to analyze writing style, tone, and vocabulary. This data is processed under our provider's data processing terms and is not used to train their models.
• Content Generation - Post text is generated using our AI provider based on your brand voice profile. Your brand data provides context but is not permanently stored by the provider.
• Image Generation - Post images are generated using our image generation service. Text prompts derived from your post content are sent to generate matching visuals. No personal data is included in image prompts.
• Embeddings - Text embeddings (numerical representations of your brand content) are generated via our embedding service for semantic search. These embeddings cannot be reverse-engineered into the original text.

4. Third-Party Services

We use the following third-party services to operate FlyingToast. Each processes data only as needed for its specific function:

5. Data Retention

We retain your data as follows:

• Active accounts - All data is retained for the duration of your subscription.
• Cancelled subscriptions - Your data remains accessible for 30 days after cancellation (soft delete period).
• Permanent deletion - 90 days after cancellation, all organization data (brand materials, posts, images, social connections) is permanently and irreversibly deleted from our systems.
• Temporary files - AI-generated temporary images are automatically cleaned daily.

6. Your Rights

You have the following rights regarding your data:

• Access & Export - You can request a full export of your organization's data at any time. We provide this as a downloadable JSON file via a time-limited secure link (valid for 24 hours).
• Correction - You can update your account information, brand data, and content at any time through the platform.
• Deletion - You can request complete deletion of your account and all associated data. This will be processed within 30 days, with permanent deletion within 90 days.
• Portability - Your exported data is provided in a standard, machine-readable format (JSON).
• Objection - You can disconnect social accounts, delete brand documents, or close your account at any time.

To exercise any of these rights, contact us at [email protected].

7. Cookies & Tracking

FlyingToast uses a minimal set of cookies:

• Session cookies - Essential for authentication and maintaining your login state. These are strictly necessary and cannot be disabled.
• CSRF token - Essential for security, preventing cross-site request forgery attacks.
• Analytics cookies - Used to collect anonymized product usage data. These cookies help us understand feature usage and improve the platform. You can opt out via the cookie banner or by contacting us.

We do not use advertising cookies or sell your data to advertisers. For full details, see our Cookie Policy.

8. Data Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit (TLS/HTTPS) and at rest.
• All uploaded files are stored privately with access-controlled private storage.
• Multi-tenant data isolation ensures your organization's data is never accessible to other organizations.
• Two-factor authentication is available for all accounts.
• Passwords are hashed using industry-standard algorithms and never stored in plain text.

9. Children's Privacy

FlyingToast is designed for business use and is not intended for individuals under the age of 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting the updated policy on this page with a revised "Last updated" date. Your continued use of FlyingToast after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at [email protected].