Privacy policy

Who we are

EarnPlayMax (“we”, “us”) provides a service for planning, approving and publishing social media content. This policy explains how we handle information when you visit our website or use the service. You can reach us at contact@earnplaymax.com.

Information we collect

• Account details: your name, email address and password (stored only as a secure hash by our authentication provider), or your Google profile if you sign in with Google.
• Workspace content: posts, captions, brand profiles, comments, uploaded images and videos, posting schedules and settings that you and your team create.
• Connected accounts: when you connect YouTube, Facebook or Instagram, we receive account names, profile images, identifiers and access tokens from those platforms. Tokens are encrypted before they're stored and are used only to publish what your team schedules and to read back results for posts published through us.
• Usage records: publishing outcomes, notifications and records of AI assistant requests (task, model and token counts — used for limits and usage reporting).
• Contact messages: what you send through our contact form. To limit spam we keep a one-way hash of your IP address, not the address itself.
• Technical data: standard server logs (such as request paths and error details) kept to operate and secure the service. We don't use advertising trackers.

How we use information

• To provide the service: authenticate you, store your content, publish scheduled posts and show analytics.
• To run features you choose to use, such as the AI writing assistant.
• To keep the service secure, prevent abuse and fix problems.
• To reply to your messages and send essential service emails (for example, sign-in and password reset).

We don't sell your personal information, and we don't use your content to train AI models.

Service providers

We rely on carefully chosen providers who process data on our behalf:

• Supabase, for authentication, database and file storage.
• Our hosting provider, to run the application.
• Google (YouTube), Meta (Facebook and Instagram), when you connect those accounts and ask us to publish to them.
• Anthropic, when you use the AI assistant. The text and images you submit for a suggestion are sent to generate it.

Retention and deletion

We keep your information for as long as your account is active. Deleting a post, file, brand profile or connected account removes it from the service. Disconnecting an account deletes its stored tokens. To delete your account and workspace data entirely, contact us and we'll do so, except where we must keep limited records to meet legal obligations.

Security

Data is encrypted in transit. Access tokens and workspace AI keys are additionally encrypted at rest. Each workspace's data is isolated at the database level, and team roles control who can view, edit, approve or change settings. No system is perfectly secure, but we work to protect your information and will notify you of any breach as required by law.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to certain processing. Use the contact form with the “Privacy or data request” topic, or email us. We'll respond within the time the law requires.

Children

The service isn't directed to children under 16, and we don't knowingly collect their information.

Changes

If we make significant changes to this policy, we'll update the date above and, where appropriate, let account owners know in advance.