Privacy Policy

Urbicode Services LLC is the controller of personal data processed through the Service. For the third-party processors we use, see Section 5.

• Account information: your email address, password (stored hashed by our authentication provider), and profile details.
• Brand & project data: brand memory, logos, avatars, product and reference images, colors, tone, services, website URLs and other materials you provide.
• Generated content: the campaigns, copy, images and videos created through the Service, and related metadata.
• Connected-account data: tokens and identifiers needed to publish to social networks you connect (e.g., Instagram, Facebook, LinkedIn). Access tokens are stored encrypted.
• Billing data: subscription and plan information. Card details are collected and processed directly by Stripe; we do not store full card numbers.
• Usage & technical data: log data, device and browser information, IP address, and product analytics (e.g., features used, generation counts).
• Cookies: essential cookies for authentication and session management (see Section 11).

• To provide, operate, secure and improve the Service, including generating and publishing content you request.
• To process payments, manage subscriptions and enforce plan limits.
• To authenticate you and protect against fraud, abuse and security incidents.
• To communicate with you about your account, security, and important Service changes.
• To comply with legal obligations and enforce our Terms.

We do not sell your personal data, and we do not use your private brand assets to train our own foundation models.

Where applicable, we process personal data on the bases of: performance of our contract with you, our legitimate interests (operating and securing the Service), your consent (where required), and compliance with legal obligations.

To deliver the Service, we share the minimum necessary data with trusted providers that process it on our behalf, including:

• OpenAI — text and image generation (your prompts, brand text, and relevant images are sent to generate content).
• kie.ai — AI video generation (your design image and script are sent to produce videos).
• Supabase — database, authentication and storage.
• Cloudflare R2 — storage and delivery of generated images, videos and audio.
• Stripe — payment processing.
• Meta (Instagram/Facebook) and LinkedIn — publishing content to accounts you connect.

Each provider processes data under its own terms and security commitments. We may also disclose information to comply with law, enforce our Terms, protect rights and safety, or in connection with a merger, acquisition or asset sale (with notice where required).

We are based in the United States and our providers may process data in the U.S. and other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

We retain your data for as long as your account is active and as needed to provide the Service. You may delete projects, campaigns and assets at any time. After account termination, we delete or anonymize personal data within a reasonable period, except where retention is required for legal, tax, security or dispute-resolution purposes.

We use reasonable technical and organizational measures to protect your data, including encryption in transit, encrypted social tokens, and database row-level security that scopes data to your account. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.

Depending on your location (including under GDPR and the CCPA/CPRA), you may have rights to access, correct, delete, port, or restrict processing of your personal data, to object to certain processing, and to withdraw consent. California residents have the right to know, delete, correct, and to opt out of “sale” or “sharing” of personal information — we do not sell or share personal information as those terms are defined. To exercise any right, contact us at hi@clonpilot.com. We will respond as required by applicable law and will not discriminate against you for exercising your rights.

Content generated by AI may include inaccuracies and is provided for your review. You control what is published. Please avoid submitting sensitive personal data you do not want processed by the third-party AI providers listed above.

We use strictly necessary cookies to keep you signed in and to operate the Service. We do not use advertising cookies. You can control cookies through your browser, but disabling essential cookies may prevent the Service from working.

The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, for material changes, provide additional notice where appropriate. Your continued use after changes take effect constitutes acceptance.

For privacy questions or requests, contact hi@clonpilot.com, +1 929-399-7011, or Urbicode Services LLC, Miami Beach, FL 33141.