Privacy Policy

Glitch in the Sky (“Glitch,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our website (glitchinthesky.com) and our AI content automation platform and related services (collectively, the “Service”), including when we access third-party social media platforms on your behalf via their official APIs.

We operate as a California-based business and comply with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), the EU General Data Protection Regulation (GDPR) to the extent applicable to our EU/EEA users, and other applicable privacy laws. We do not sell your personal information.

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide Directly

• Account information: full name, email address, password (stored in hashed form), and billing information.
• Profile information: display name, profile photo, bio, and social media handles (if voluntarily provided).
• Content and prompts: AI generation prompts, uploaded files, content settings, and metadata you provide when creating or scheduling content.
• Communications: messages and inquiries submitted to our support team.

1.2 Third-Party Platform Data (API Data)

When you connect a third-party social media account (such as a Meta, YouTube, TikTok, LinkedIn, or Snapchat account) to the Service via OAuth authorization, we receive and temporarily process data from those platforms necessary to provide the Service. Specifically:

• OAuth access tokens: We store encrypted OAuth access tokens and, where applicable, refresh tokens, solely to publish content to the connected platform on your behalf. These tokens are not your account password and are scoped to specific permissions you grant.
• Platform account identifiers: Basic account metadata such as platform user ID, username, and profile URL, used to identify the target account for publishing.
• Publishing confirmations: Post IDs, publish timestamps, and basic performance data (e.g., view counts, engagement metrics) returned by platform APIs after successful publication, used to display your analytics dashboard.

Important: Limitations on third-party platform data use. We use data received via third-party platform APIs solely to operate the Service as described above. We do not:

• Use platform API data (including Meta, YouTube, TikTok, LinkedIn, or Snapchat data) for advertising targeting, profiling for advertising, or cross-context behavioral advertising.
• Sell, rent, or share platform API data with any third party for their independent use.
• Use platform API data to train AI models without explicit user consent.
• Retain platform API data beyond what is necessary for the Service’s operational purposes or as required by applicable platform API terms (e.g., YouTube API data is handled in accordance with Google API Services User Data Policy).

1.3 Automatically Collected Information

• Device and browser information: IP address, browser type, device type, operating system, pages visited, and time spent on the Service.
• Cookies and similar technologies: Session cookies and authentication tokens for essential Service functionality. Analytics cookies (e.g., Google Analytics) for aggregate usage analysis. See Section 4 for details.
• Log data: Server logs, error reports, and API call records for security, debugging, and operational reliability.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including AI content generation, scheduling, and automated publishing to connected third-party platforms on your behalf.
• Authenticate your identity and maintain the security of your account.
• Process payments and manage subscriptions via our payment processors.
• Send transactional communications (e.g., account confirmations, publishing status notifications, security alerts) and support responses.
• Generate aggregate analytics and performance reports within your dashboard.
• Detect, prevent, and investigate fraud, abuse, security incidents, and violations of our Terms of Service or applicable platform policies.
• Comply with legal obligations and respond to lawful requests.
• Improve the Service through aggregate, anonymized usage analysis. We will not use your individual content or prompts to train AI models without your explicit, separate consent.
• With your consent: send promotional communications about the Service. You may opt out at any time.

3. How We Share Your Information

We do not sell your personal information. We share data only in these limited circumstances:

• Third-party platforms (by your instruction): When you use the Service to publish content, that content and associated metadata are transmitted to the selected platform (e.g., YouTube, TikTok, Meta, LinkedIn, Snapchat) via their official APIs. This transmission is at your explicit direction and is governed by those platforms’ own privacy policies and terms of service.
• Service providers: With trusted vendors who help us operate the Service, including: cloud hosting providers, payment processors (e.g., Stripe), email delivery services, and analytics providers (e.g., Google Analytics). These providers are contractually prohibited from using your data for any purpose other than providing services to us.
• Legal requirements: If required by law, regulation, court order, or governmental authority, or to protect the rights, safety, and property of Glitch in the Sky, its users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of all or substantially all of our assets, with appropriate confidentiality protections. We will notify you before your personal data becomes subject to a different privacy policy.

4. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential cookies: Required for authentication, session management, and core Service functionality. These cannot be disabled without impairing your use of the Service.
• Analytics cookies: We use Google Analytics (with IP anonymization enabled) to understand aggregate usage patterns. Google Analytics data is processed in accordance with Google’s Privacy Policy. You may opt out via Google’s opt-out browser add-on.

You can manage non-essential cookies through your browser settings. Note that disabling cookies may affect Service functionality.

5. Google / YouTube API Data

Our use of information received from Google APIs (including YouTube Data API) complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We access Google/YouTube user data only to enable features the user explicitly requests (uploading and managing videos on their YouTube channel via the Service).
• We do not use Google/YouTube data to serve advertising or for any purpose unrelated to the features visible and described to the user.
• We do not allow humans to read Google/YouTube user data unless required for security, legal compliance, or explicit user permission.
• We do not transfer Google/YouTube user data to third parties except as necessary to provide and improve our Service, with appropriate confidentiality.

You may revoke the Service’s access to your YouTube account at any time via Google security settings. Revoking access will disconnect your YouTube account from the Service. Our handling of Google user data is also subject to Google’s Privacy Policy.

6. Meta (Facebook and Instagram) API Data

When you connect Facebook or Instagram accounts via Meta’s APIs, we use only the permissions you explicitly authorize during the OAuth flow. Our use of Meta platform data complies with Meta’s Platform Terms and Developer Policies. Specifically, we process Meta platform data only to enable the features visible and described to you, and we process your data for these clearly stated purposes: publishing content to your connected pages or accounts on your behalf, and displaying basic analytics returned by Meta’s API. No Meta platform data is used for advertising targeting or profile building. In compliance with Meta’s platform policies:

• We use Meta platform data only to operate features you request and that are described in this policy.
• We do not use Meta platform data for advertising targeting or to build profiles for advertising purposes.
• We retain Meta platform data only as long as necessary to provide the Service or as required by applicable law.
• User data deletion: You may request deletion of all data we hold that was obtained via Meta platform APIs at any time by deleting your account or disconnecting your Meta account and submitting a deletion request to privacy@glitchinthesky.com. We will process such requests within 30 days in compliance with Meta’s platform data deletion requirements.
• You may disconnect your Meta accounts from the Service at any time via your account settings or through Facebook/Instagram account settings under “Apps and Websites.”

7. TikTok, LinkedIn, and Snapchat API Data

We treat data received via TikTok, LinkedIn, and Snapchat APIs consistently with the principles above: we use platform-specific data only to publish content at your explicit direction, do not sell or misuse it, retain it only as long as operationally necessary, and comply with each platform’s respective developer terms and data policies. You may disconnect any connected platform account from the Service at any time via your dashboard settings.

LinkedIn: LinkedIn API access through the Service is provided only to registered legal organizations for legitimate commercial use cases, in compliance with LinkedIn’s API terms. We process LinkedIn member data only as necessary to publish content you authorize, and we honor LinkedIn member data consent and deletion obligations. You may request deletion of LinkedIn-sourced data by contacting us at privacy@glitchinthesky.com.

Snapchat: Our Snap Kit (Creative Kit) integration enables a user-initiated “Share to Snapchat” feature. It does not support automated or background posting — every share to Snapchat requires real-time user interaction within the Snapchat app. We do not collect or retain Snapchat user data beyond the duration of the share session. We do not use Snap Kit to facilitate deceptive behavior, send unsolicited messages, create fake users, or operate bots, in compliance with Snap’s Developer Policy.

8. Data Storage, Security, and International Transfers

Your data is primarily stored in the United States. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your data may be transferred to and processed in the United States. Such transfers rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) where applicable.

We implement reasonable technical, administrative, and physical security measures to protect your information, including encryption of data in transit (TLS) and at rest, access controls, and regular security assessments. No system is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Platform API data (OAuth tokens, publishing records) is retained only as long as your account remains connected to the relevant platform or as required to fulfill your requests. If you delete your account or disconnect a platform, we will delete or anonymize associated personal data within 90 days, except where retention is required by law.

10. Your Privacy Rights

Depending on where you reside, you may have the following rights:

• Right to Access / Know: Request a copy of the personal information we hold about you and details about how we use it.
• Right to Deletion: Request that we delete your personal information, subject to legal exceptions (e.g., ongoing legal obligations or fraud prevention).
• Right to Correction: Request that we correct inaccurate personal information.
• Right to Data Portability: Request a machine-readable copy of your personal data (where technically feasible).
• Right to Opt Out: Opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• GDPR Rights (EEA/UK users): The right to object to processing, the right to restrict processing, and the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, email us at privacy@glitchinthesky.com with your request. We will verify your identity and respond within 45 days (or 30 days for GDPR requests), extendable as permitted by law.

11. Children’s Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected personal information from a person under 18, we will delete it promptly. If you believe we have inadvertently collected such data, please contact us at privacy@glitchinthesky.com.

12. Do Not Track

Our Service does not currently respond to Do Not Track (DNT) browser signals, as there is no universally accepted standard for DNT. We provide opt-out mechanisms for analytics as described in Section 4.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised version on the Service and update the “Last Updated” date. For material changes, we will notify you by email or through a prominent notice on the Service at least 30 days before the change takes effect.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your privacy rights, please contact us:

Email: privacy@glitchinthesky.com

General inquiries: hello@glitchinthesky.com

This Privacy Policy is governed by the laws of the State of California, United States.