Legal
Privacy policy.
What we collect, how we use it, and the choices you have. Plain English. The longer-form policy will replace this at GA.
Last updated · 28 May 2026
1. What we collect
Account information
Your email address, collected when you sign up via Supabase Auth. We use it to authenticate you and send essential service communications.
Content you create
Niche topics, voice profile inputs, selected stories and angles, and edits to generated captions. Stored so your pipeline sessions persist and your voice carries across runs.
Social account tokens
When you connect LinkedIn, X (Twitter), or Instagram, we store OAuth access tokens encrypted at rest with AES-256 (Fernet). We request only the minimum publish permissions — never read access to followers, DMs, or analytics.
Usage signals
Anonymised quality events (caption length, edit ratio, copy/download actions) routed through TelemetryDeck with hashed user IDs. We use these to improve generation quality.
2. How we use your data
- Run the pipeline: search, cluster, rank, and generate content for your chosen niche.
- Apply your voice profile and brand kit to generated copy.
- Publish content to social platforms on your explicit request.
- Authenticate and protect your account.
- Improve the service based on aggregate, anonymised usage patterns.
We do not sell your data. We do not use your content to train AI models. We do not share your data with third parties except as described in section 3.
3. Third-party processors
Running Niche requires passing data to these sub-processors:
Your niche topic and selected content are sent to Anthropic / OpenAI for processing. Both providers commit, under their enterprise-API terms, not to use API inputs to train models.
4. Social publishing
When you click Publish, Niche uses your stored access token to post on your behalf to the selected platform. We transmit only the caption, hashtags, and any rendered image you approved in the content review screen. We never post without your explicit action and we never store copies of what you publish beyond your active pipeline session.
You can revoke access at any time from Settings → Connected accounts or directly from the platform’s own security settings.
5. Data retention
- Pipeline sessions and generated content: retained until you delete your account.
- Social tokens: deleted immediately on disconnect or account deletion.
- Rendered assets (R2): retained for 30 days then automatically purged.
- Account data: deleted within 30 days of an account deletion request.
6. Your rights
You may request a copy of your data, correction of inaccurate data, or deletion of your account and all associated data by emailing privacy@nicheangle.com. We will respond within 30 days.
If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.
7. Security
Social access tokens are encrypted at rest with AES-256. Connections use TLS in transit. Access is restricted to authenticated sessions and server-side service roles — your tokens are never exposed to the browser.
8. Changes to this policy
We will post material changes here and, where appropriate, notify you by email. Continued use of Niche after changes take effect constitutes acceptance of the updated policy.
9. Contact
Questions about this policy? privacy@nicheangle.com