Privacy Policy

At Agent Social, we take your privacy seriously. This Privacy Policy explains how Refrit Private Limited collects, uses, shares, and protects your personal information when you use our AI film and TV series studio.

1. Information We Collect

Account Information

• Email address
• Name (first and last)
• Profile picture (if you sign up with Google)
• Timezone preferences
• Password (stored securely using industry-standard encryption)

Social Media Account Connections

• Social media account handles and usernames
• Access tokens to enable posting to your accounts
• Account metadata (profile pictures, follower counts)
• Platform-specific identifiers

Content and Usage Data

• Posts you create and publish through our platform
• AI conversations and chat history
• Images and media files you upload
• Automated workflow (SocialFlows) configurations
• Credit usage and API call records
• Faces, voices, and other likenesses contained in photos, video, or audio you upload, which we use only to generate the content you ask for

Payment Information

• Payment information is processed by our payment partner Razorpay
• We store transaction records and subscription details
• We do not directly store credit card information

2. How We Collect Information

• Directly from you: When you register, connect social accounts, or create content
• Automatically: When you use our services, we collect usage data and technical information
• From third parties: Profile information from Google OAuth and social media platforms

3. How We Use Your Information

We use the information we collect to:

• Provide AI film and video creation and publishing services
• Authenticate your account and ensure security
• Post content to your connected social media accounts
• Track credit usage and billing
• Send important notifications (account verification, billing updates, service announcements)
• Prevent fraud and abuse
• Comply with legal obligations

4. Who We Share Your Information With

We share your information with the following third-party service providers to deliver our services:

AI Service Providers

We use the following AI providers to generate text, images, video, and audio from your prompts, conversations, and uploads. The content needed for each request is sent to the provider that handles it:

• OpenAI (chat and image generation)
• Google (Gemini chat, image generation, embeddings, and character voices)
• xAI (Grok chat and image generation)
• fal.ai (hosted image and video models, including models from MiniMax, ByteDance, and Alibaba)
• MiniMax (video generation)
• ElevenLabs (voices, narration, and sound)

Social Media Platforms

When you connect social media accounts and authorize us to post on your behalf, we share post content and use access tokens to publish to those platforms. Today these are X, YouTube, Instagram and Facebook; other platforms shown as "coming soon" receive nothing until you connect them.

Payment Processors

We use Razorpay to process payments and manage subscriptions. This service receives your payment and billing information.

Cloud Storage

We use Cloudflare R2 to store media files and images you upload to our platform.

Email Service

We use SendGrid to send transactional emails (verification codes, password resets, billing notifications).

Monitoring and Analytics

We use these services to find errors, measure performance, and understand how the platform is used:

• Sentry, for error reports
• LangSmith, which records AI requests and responses, including your prompts, so we can investigate failures
• Google Analytics and Microsoft Clarity, which measure page usage and record anonymised sessions, and load only if you allow analytics cookies

Where Your Data Is Stored

Refrit Private Limited is based in India. Our servers and database run in the United States (Railway), and media files are stored with Cloudflare. By using Agent Social, your data is transferred to and processed in those locations and by the providers listed above, each under its own privacy terms.

YouTube API Services

When you connect a YouTube channel, Agent Social uses YouTube API Services to upload videos and their details to your channel when you publish or schedule them. We store the access tokens Google gives us for that purpose only.

• Your use of YouTube features is subject to the YouTube Terms of Service
• Google's handling of your data is described in the Google Privacy Policy
• You can revoke Agent Social's access at any time from your Google security settings, or by disconnecting YouTube in your Agent Social account settings. When you disconnect or delete your account, we delete the stored Google tokens.

Instagram and Facebook (Meta)

When you connect an Instagram account or a Facebook Page, Meta gives us a few details so we can post there for you. We keep:

• The account or Page id
• Its name and username
• Its profile picture
• The access keys Meta gives us

We use them only to publish your posts there when you press Publish or Schedule. We do not read your messages, followers or other posts.

To delete this data, do either of these:

• Press Disconnect next to the account in your Agent Social settings. We delete the connection and its keys straight away.
• Remove Agent Social in your Instagram or Facebook settings (Apps and websites, or Business integrations). Meta tells us, and we delete your connection and its keys automatically. Meta then gives you a link where you can check that it is done.

Meta's own handling of your data is described in the Meta Privacy Policy.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encrypted password storage
• Secure authentication using JWT tokens
• Rate limiting to prevent abuse
• Regular security monitoring
• Secure data transmission (HTTPS)

6. Data Retention

We retain your data as follows:

• Account data and content are kept while your account is active
• When you delete your account, sign-in is disabled immediately, connected social accounts are disconnected and their tokens erased, and your name and photo are anonymised
• We keep an anonymised record of billing, usage, generated content, and security logs after deletion for tax, fraud, and abuse investigation, as described on our account deletion page

7. Your Rights and Choices

You have the right to:

• Access your data: View your account information
• Update your data: Edit your account details and preferences
• Disconnect social accounts: Remove connected social media accounts
• Cancel subscriptions: Stop recurring payments and subscriptions
• Delete your account: Request deletion of your Agent Social account and associated account data through our account deletion page
• Opt out of emails: Unsubscribe from marketing emails (transactional emails required for service operation will still be sent)

8. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in (session cookies)
• Remember your preferences
• Authenticate your identity (JWT tokens)
• Improve platform performance
• Measure usage with Google Analytics and Microsoft Clarity, only when you allow analytics cookies in the cookie banner

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through our platform. We encourage you to review this policy periodically to stay informed about how we protect your data.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: