Sixtyposts

Privacy Policy

Last updated 17 September 2026

This explains what Sixtyposts collects, why, and who else touches it. Sixtyposts is the data controller. Questions: support@sixtyposts.com.

What we collect

Account

• Your email address, and a password hash (we never see your password in plain text).
• If you sign in with Google: your email, name and profile picture from that account.
• Your display name, handle, avatar and the niche/tone you choose during setup.

Your work

• Scripts and links you paste, carousels you create, photos you upload, and your brand kits.
• A small thumbnail image of each carousel, so your dashboard can show a preview.

Usage

• A record of each AI generation and AI graphic edit — how we count your plan’s monthly allowance.
• Standard server logs (IP address, browser, timestamps) for security and debugging.

We do not sell your data, and we don’t use your carousels to train AI models.

Who processes it

• Supabase — database, authentication and file storage.
• Anthropic — receives the text you submit in order to generate a draft carousel, caption or graphic. Not used to train their models via the API.
• Stripe — payments. Stripe handles your card details directly; we only store a customer ID and your plan.
• Google — only if you choose “Continue with Google”.

If you import from a video or post URL, that URL is fetched to obtain the transcript or caption. We store the resulting text with your carousel.

Why we’re allowed to

• Contract — to give you the Service you signed up for.
• Legitimate interests — security, preventing abuse, and improving the product.
• Legal obligation — tax and accounting records for payments.

Cookies

We use a session cookie to keep you signed in, and local browser storage for conveniences like your recent colours and an unsaved draft. No advertising or cross-site tracking cookies.

How long we keep it

• Account and content: until you delete them, or until your account is deleted.
• After account deletion: removed within 30 days, except records we must keep for tax purposes.
• Server logs: typically 30–90 days.

Your rights

Depending on where you live (including the UK/EU under GDPR and California under the CCPA), you can ask for a copy of your data, correct it, delete it, or object to certain processing. Email support@sixtyposts.com and we’ll respond within 30 days. You can also complain to your local data protection authority.

Security

Data is encrypted in transit, and access to your rows is enforced at the database level so one account cannot read another’s. No system is perfectly secure; if a breach affects you we’ll notify you and the relevant authority as required.

International transfers

Our providers may process data outside your country, including in the United States, under standard contractual clauses or equivalent safeguards.

Children

The Service isn’t for under-13s, and we don’t knowingly collect their data.

Changes

If we change this policy materially we’ll tell you by email or in the product before it takes effect.