Privacy policy

This policy explains what information AICMO ("AICMO", "we") collects when you use our website and the AICMO app, why we collect it, and the choices you have. We follow India's Digital Personal Data Protection Act, 2023.

What we collect

• Account details: your email address and a securely hashed password, and the name of your workspace.
• Brand information you give us: your website address and what we read from your public website, your Brand Brain (voice, audience, products, offers, notes), uploaded images, and the posts you create, edit or approve.
• Connected channels: when you connect Instagram, Facebook, LinkedIn, X or another channel, we store the access token that platform gives us, the account or Page name, and the IDs of posts we publish for you. We read the public engagement numbers (likes, comments, shares, saves, reach) of those posts.
• Store catalogue: if you connect a Shopify store, the public product names, prices, images and availability.
• Early-access requests: the email address you enter, the page you signed up from and campaign tags in the link you followed.
• Billing: when paid plans start, payments are handled by Razorpay or Stripe. We receive the status of your subscription, not your full card or UPI details.
• Technical data: basic server logs (IP address, browser, time of request) kept for security and troubleshooting.

How we use it

• To provide the service: learn your brand, plan and write content, create images, publish to the channels you connected, and show you how posts performed.
• To keep the service secure and working, and to answer your support requests.
• To email you about your account, your trial and important changes. Marketing emails only if you opted in, with an unsubscribe link in each.

We do not sell your personal data, and we do not use your private content to advertise to you.

AI processing

To write content and analyse your brand, relevant parts of your brand information are sent to our AI provider, Google, through the Gemini API, and processed under Google's API terms. We send only what is needed for the task.

Service providers

We use trusted providers to run AICMO. They process data only on our instructions:

• Supabase — database and sign-in (servers in Singapore)
• Render — application hosting (Singapore)
• Vercel and GitHub Pages — website hosting
• Google — AI processing (Gemini API)
• Meta, LinkedIn, X and the other channels you connect — to publish your posts and read their metrics
• Razorpay / Stripe — payments (when billing starts)

Data from Meta, LinkedIn and X

We use data from these platforms only to publish the content you approve and to show you how it performed. We do not sell it, share it with third parties for advertising, or use it for any other purpose. You can disconnect a channel at any time in the app, which deletes its access token from our servers, and you can revoke AICMO's access from the platform's own settings.

How long we keep data

We keep your workspace while your account is active. If you delete your account or ask us to, we delete your workspace, content, images and tokens within 30 days, except where the law requires us to keep billing records.

Your rights

You can access, correct or delete your data, withdraw consent and nominate someone to exercise your rights. Most of this you can do in the app; for anything else, email hello@aicmo.app. See also how to delete your data.

Cookies

The website uses no advertising cookies. The app uses essential storage to keep you signed in. If we add analytics, we will list it here.

Security

Data is encrypted in transit (HTTPS). Channel tokens stay on our servers and are never sent to your browser. Access to production systems is limited to the people who run the service.

Children

AICMO is a business tool and is not meant for anyone under 18.

Changes and contact

If we change this policy we will update the date above, and tell you by email for significant changes. Questions or complaints: hello@aicmo.app (AICMO, India).