Privacy Policy

Last updated: 10/28/2026

What we store

• Your account email and authentication tokens.
• Brand kit (practice name, colors, fonts, voice, optional logo).
• Content you generate: posts, captions, plans, carousels, and scheduled items.
• Provider profiles you create (name, specialty, optional bio, headshot).
• Optional service connections you previously authorized. Connection tokens are stored encrypted and used only for the action you explicitly request.

What we do NOT collect

• Patient health information (PHI). Do not paste PHI into the tool.
• Payment card data (handled by our billing processor, not stored here).

Sharing

Generated content is private to your account. Share links you create are tokenized and expire on demand. We do not sell account data to third parties.

AI processing & transparency

Drafts and images are produced via the Lovable AI Gateway. Prompts and outputs may transit through OpenAI or Google model providers under their respective enterprise privacy commitments (zero-retention / no-training where available). Your prompts and content are not used to train third-party AI models. Do not include PHI or patient-identifying details in prompts — our PHI scanner is a convenience, not a HIPAA safeguard.

AI-generated images are tagged with provenance metadata (per California SB 942) and visibly labeled "AI-assisted." Posts drafted with AI carry an "AI-assisted" disclosure on public review pages (per Utah SB 149 and California AI-transparency rules). AI output may be inaccurate; the practice owner reviews and is responsible for everything published.

Biometric notice (IL BIPA / TX CUBI)

If you upload provider or staff headshots, we store them only as brand assets for content generation. We do not run facial recognition, generate face geometry templates, or sell biometric identifiers. Do not upload patient photos without written authorization.

Meta (Facebook & Instagram) integration

Legacy connection tools can store a Facebook Page or Instagram Business account for an explicit owner-directed action. Automatic publication is not part of the current Studio launch experience. Specifically:

• What we request: the permissions pages_show_list, business_management, pages_read_engagement, pages_manage_posts, instagram_basic, and instagram_content_publish.
• What we store: the Page ID, Page name, linked Instagram Business account ID and username, and a long-lived Page access token. Tokens are encrypted at rest and used only server-side.
• What we do with it: retain the connection for an explicit action you initiate and display basic Page metadata so you can confirm the correct account. Current Create Station workflows stop at review and export.
• What we do NOT do: read your private messages, post without your explicit action, advertise on your behalf, modify Business Manager settings, share Meta-derived data with third parties, or use it for any purpose other than the publishing features you see in the app.
• Disconnection: you can disconnect a Page or Instagram account at any time from /connections. Disconnecting deletes the stored access token and Page/IG metadata from our database. You can also revoke our access directly in your Facebook settings under Business Integrations.
• Full deletion: you can permanently delete all account data, including all Meta connection data, at /data-deletion.

Your rights

You may export or delete your data at any time from your account. Deletion removes posts, plans, carousels, providers, brand assets, and all social platform connections (including Meta access tokens) associated with your account.

Contact

Direct privacy questions to the practice owner.

See also: Terms of Use · Medical Disclaimer