Privacy Policy

Last updated: March 27, 2026

1. Who We Are

Savvy Social is operated by Savvy Digital Studio LLC. This policy describes how we collect, use, and protect your personal information when you use our Service at savvysocial.app.

2. Information We Collect

Account information: Email address, password (hashed, never stored in plain text), business name, industry, location, target audience description.

Brand profile data: Answers to brand intake questions, uploaded brand documents (stored securely in Supabase Storage).

Usage data: Which features you use, request counts, generation history (for rate limiting only — we do not store generated content permanently).

Payment data: Processed by Stripe. We do not store credit card numbers. We store your Stripe customer ID for subscription management.

Feedback: Messages you submit through the feedback widget, including your email and the page you were on.

3. How We Use Your Information

We use your information to: provide and personalize the Service (your brand profile shapes AI-generated content); process payments and manage subscriptions; send transactional emails (account confirmation, password reset); improve the Service based on usage patterns and feedback; communicate with you about updates or changes.

4. Third-Party Services

We use the following third-party services that process your data:

• Supabase — authentication, database, file storage (hosted in the US)
• Anthropic (Claude AI) — AI content generation. Your brand profile and prompts are sent to Claude's API to generate content. Anthropic does not use your data to train their models.
• Stripe — payment processing
• Vercel — hosting and deployment
• Google Trends — anonymous trend data (no personal information sent)

5. Data Security

We implement security measures including: row-level security on all database tables (users can only access their own data); HTTPS encryption on all connections; API keys stored as environment variables (never in client code); Content Security Policy headers to prevent XSS attacks; secure session management via Supabase Auth.

6. Data Retention

Your account data is retained as long as your account is active. Usage tracking data is stored per-day for rate limiting and is not aggregated for analytics. Brand documents are stored in Supabase Storage and can be deleted by you at any time. If you delete your account, all associated data is removed within 30 days.

7. Your Rights

You have the right to: access your personal data; correct inaccurate data; delete your account and all associated data; export your data; opt out of non-essential communications. To exercise any of these rights, contact us at the email below.

8. Cookies

We use essential cookies for authentication (Supabase session tokens). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Children

The Service is not intended for users under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or in-app notification.

11. Contact

For privacy questions or data requests, contact: Savvy Digital Studio LLC — jo-anne@jo-annenewby.com