Privacy Policy

Splitcast ("we", "us") helps brands and creators turn one short-form video into several variations and publish them to their own Instagram professional accounts. This policy explains what we collect, why, who we share it with, and the choices you have.

What we collect

• Account details: your email address and, if you sign in with Google, your name and profile picture. We do not receive or store your Google password.
• Workspace details: workspace names, timezone, brand profile settings you enter, teammates you invite, and their roles.
• Content you upload or create: videos, transcripts generated from them, captions, hooks, hashtags, edit settings, rendered videos and schedules.
• Connected Instagram accounts: when you connect an Instagram professional account through Instagram's official login, we receive the account's ID, username, profile picture and access tokens that let us publish on your behalf and read performance insights. We never ask for or store your Instagram password. Tokens are encrypted before they are stored and are never sent to your browser.
• Post performance: metrics such as views, likes, comments, shares, saves and reach for posts published through Splitcast.
• Billing: your subscription plan and status. Payments are handled by Stripe; we never see or store your full card number.
• Technical data: sign-in records, error reports and an audit log of actions in your workspace (for example, who connected an account or published a post), used to keep the service secure and working.

How we use it

• To provide the service: sign you in, run your workspace, transcribe and edit your videos, generate copy, and publish and schedule posts you ask us to publish.
• To show you analytics about how your posts performed.
• To send you service emails such as teammate invites and alerts about failed posts.
• To keep the service secure, prevent abuse and fix problems.

We do not sell your personal information, we do not use it for advertising, and we do not use your videos or content to train AI models.

Google user data

If you sign in with Google, we only access your basic profile (name, email address and profile picture), and only to create and identify your Splitcast account. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not share Google user data with third parties except the service providers below that help us run Splitcast, and we never use it for advertising.

Who we share it with

We use trusted service providers who process data on our behalf, only as needed to run Splitcast:

• Supabase (database and sign-in), Vercel (website hosting), Railway (background processing) and Cloudflare (video storage).
• OpenAI (speech-to-text transcription of your videos) and Anthropic (writing caption and hook variations). Their API terms do not allow them to train models on this data.
• Meta / Instagram, when you ask us to publish a post or read its insights.
• Stripe (payments), Resend (email delivery) and Sentry (error monitoring).

We may also disclose information if required by law or to protect the rights and safety of our users.

How long we keep it

We keep your data while your account is active. When you disconnect an Instagram account, its access tokens are deleted immediately. When you delete content or your account, we delete the related data from our systems within 30 days, except where we must keep limited records (such as billing records) by law.

Your choices and rights

• You can disconnect Instagram accounts at any time from the Accounts page, and remove app access from your Instagram or Google account settings.
• You can delete a workspace, or your whole account, yourself under Settings → Delete. This takes effect immediately.
• You can ask us to access, correct, export or delete your personal data by contacting us at the contact address listed on our website.
• Depending on where you live (for example, the EU, UK or California), you may have additional rights under local law. We will honor them.

Security

We encrypt data in transit, encrypt connected-account tokens at rest with AES-256, restrict each workspace's data to its members, and log sensitive actions. No system is perfectly secure, but we work to protect your information and will notify you of any breach as required by law.

Children

Splitcast is for businesses and is not intended for anyone under 18.

Changes to this policy

If we make material changes, we will update the date above and notify account owners by email.

Contact

Questions or requests: the contact address listed on our website.