🛡 PRIVACY POLICY — EchoHub

1. Who We Are

2. Age Requirements

EchoHub is intended for users 16 years or older. If you are under 18, you must have parental/guardian consent where required by law. We do not knowingly collect data from children under 16.

3. Information We Collect

We may collect the following categories of information:

A) Personal Information

• Name
• Email address
• Password
• Phone number (if provided)
• Location (if provided or required for scheduling or local content)

B) Account & Authentication

• OAuth tokens from connected platforms (e.g., TikTok, Instagram, YouTube, etc.)
• API keys required for publishing or scheduling content
• Social platform usernames (when needed for integration)

C) User Content

• Uploaded media (photos, videos, scripts, captions)
• AI-generated content
• Drafts and scheduled content

D) Payment & Billing

Processed via Stripe:

• Billing details
• Subscription status
• Transaction history

(We do not store full credit card numbers.)

E) Usage & Analytics Data

• Device info (browser, OS, screen size)
• IP address
• Log data and time stamps
• Clicks, page views, navigation patterns
• Feature usage metrics

F) Cookies & Tracking

We use:

• Essential cookies (login, security)
• Analytics cookies (performance)
• Preference cookies (theme, language)

You may disable cookies in your browser, but some features may break.

4. How We Use Information

We use information to:

• Provide and operate the EchoHub platform
• Authenticate users and secure accounts
• Enable publishing and scheduling features
• Improve and optimize product performance
• Send onboarding, support, and service-related communications
• Process payments (via Stripe)
• Provide customer support
• Comply with laws

5. AI & Data Usage

EchoHub uses artificial intelligence to generate content. To improve the Service, we may use user content for:

• Product improvement
• Marketing/showcasing (examples, templates, feature demos)
• AI model training
• Internal QA and debugging

By using the Service, you grant us the necessary rights to process content for these purposes. Users maintain ownership of their content (see Terms).

6. How We Share Information

We do not sell personal information. We share data only with:

A) Service Providers

Including but not limited to:

• Stripe (payments)
• Metricool (scheduling/analytics)
• HeyGen (video generation)
• Sora
• CapCut
• Captions
• VidIQ
• Analytics platforms
• AI APIs (e.g., OpenAI, Anthropic)

These providers process data on our behalf under contractual agreements.

B) Legal Requirements

We may disclose data to comply with:

• Applicable laws
• Law enforcement requests
• Fraud prevention
• Tax/financial regulations

7. Third-Party Integrations

EchoHub may integrate with social platforms for OAuth, publishing, or scheduling. Your use of those services is governed by their own privacy policies. We do not control third-party data practices.

Users may revoke authentication tokens at any time through the connected platform.

8. Payments

Payments are processed by Stripe. Stripe may collect personal information such as:

• Cardholder details
• Billing address
• Transaction history

Stripe's Privacy Policy applies to their handling of financial data.

9. Data Retention & Deletion

We follow these retention rules:

• Personal data is retained while your account is active.
• Billing and audit records are retained as required by law.
• Aggregated analytics may be retained after deletion (non-identifiable).

Users may request data deletion at any time by contacting support. Upon account closure, we will delete personal data except for legally required records.

10. Security

We use administrative, technical, and organizational measures to protect data. However, no system is 100% secure. You are responsible for safeguarding your login credentials.

11. International Transfers

Data may be processed in regions outside your jurisdiction (e.g., Canada, U.S., EU). We rely on lawful transfer mechanisms such as SCCs (Standard Contractual Clauses) where required by GDPR.

12. Your Rights (GDPR — EU Residents)

If you are located in the EU, you have rights to:

• Access personal data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Object to processing
• Request portability
• Withdraw consent (where applicable)

Contact us to exercise these rights.

13. Your Rights (CCPA — California Residents)

If you are a California resident, you may:

• Request access to personal information collected about you
• Request deletion of personal information
• Request disclosure of categories of data collected
• Exercise rights without discrimination

We do not "sell" personal information under CCPA definitions.

14. Do Not Track

EchoHub does not respond to Do Not Track signals because there is no universal DNT standard.

15. Children's Privacy

EchoHub is not intended for children under 16. We do not knowingly collect personal data from children under 16. If we discover such data, we will delete it promptly.

16. Changes to This Policy

We may update this Privacy Policy as the Service evolves. If changes are material, we will notify users via email or in-app. Continued use constitutes acceptance of the updated Policy.

17. Contact Information

For questions, requests, or legal matters, contact us at: