Privacy Policy

Account information. When you sign up we collect your email address and, if you choose one, your name. Authentication and password storage are handled by our database provider, Supabase — we never see or store your raw password.

App Store data you submit. The App Store URL you paste, and the public listing data we fetch on your behalf from Apple's iTunes/App Store lookup APIs (app name, description, category, screenshots, rating, and a sample of public customer reviews).

Content you create or upload. Generated video concepts, scripts, captions, hashtags, and rendered reels; any media you upload to the clip library (operator accounts only); and reel captures produced in your browser when you export or schedule a post.

Instagram connection data. If you connect an Instagram account to schedule posts, we store the Instagram user ID, the connected account's username, and an access token issued by Meta — see Instagram / Meta data below.

Billing information. Your subscription plan, billing cycle, and transaction history. Card and payment details are collected and processed directly by our payment processor, Dodo Payments — Appzoku never receives or stores your full card number.

Usage data. Basic product usage such as how many videos you've downloaded in the current billing period (used only to enforce your plan's limits), and standard server logs (IP address, browser type, timestamps) generated by our hosting providers.

• To create and secure your account, and authenticate you when you sign in.
• To generate marketing content for your app: we send your app's public listing data, review excerpts, and (when relevant) publicly available competitor advertising data to our AI provider, Anthropic, to produce scripts, captions, and video concepts.
• To render and store the videos and text content the Service produces for you.
• To publish content to Instagram on your behalf, only when you explicitly connect an account and schedule a post.
• To process payments, manage your subscription, and send billing-related notices.
• To enforce plan limits (e.g., monthly download caps) and prevent abuse.
• To provide customer support and respond to your requests.
• To maintain the security, integrity, and reliability of the Service.

We do not sell your personal information, and we do not use your account data to train third-party AI models beyond the ordinary processing needed to generate your own content in the moment you request it.

We share data only with service providers who process it on our behalf to run the Service, under their own privacy and security commitments:

• Supabase — database, authentication, and file storage for your account and content.
• Anthropic (Claude) — generates scripts, captions, and video concepts from your app's data and review language.
• Meta / Instagram — used only if you connect an Instagram account, to authenticate that connection and publish reels you schedule.
• Meta Ad Library API — used to look up publicly available competitor advertising; no personal data of yours is sent to this API beyond your search terms.
• Dodo Payments — processes subscription payments and stores your payment method directly; we receive only the billing status and transaction records needed to manage your plan.
• ElevenLabs and fal.ai — used only for the AI UGC studio feature, to synthesize voiceover audio and render presenter video from a script you generate.
• Hosting providers (Netlify and Railway) — run the application and its backend infrastructure.

We may also disclose information if required by law, to protect the rights, safety, or property of Appzoku or others, or in connection with a merger, acquisition, or sale of assets (with notice to you).

If you choose to connect an Instagram Business or Creator account, Appzoku requests only the permissions needed to identify that account and publish content you explicitly schedule (Instagram's instagram_business_basic and instagram_business_content_publish permissions). We do not read your Instagram messages, followers, or other private data, and we never post anything you have not scheduled yourself.

We store your Instagram user ID, username, and an access token, encrypted at rest by our database provider and accessible only to the systems that publish your scheduled posts. You can disconnect your Instagram account at any time from the Schedule tab, which deletes the stored token immediately.

Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies.

We retain your account and content data for as long as your account is active, so your generated videos, connections, and history remain available to you. If you delete your account, we delete your profile, generated content, uploaded media, and any connected Instagram token within 30 days, except where we're required to retain billing records for legal or tax purposes.

To request deletion, email privacy@appzoku.com from your account's email address, or use the account deletion option in Settings once available.

We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS) for all traffic, encrypted storage of credentials and access tokens, and access controls that restrict our own staff's access to production data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Depending on where you live, you may have the right to:

• Access, correct, or export the personal data we hold about you.
• Request deletion of your account and associated data.
• Withdraw consent for a specific processing activity (e.g., disconnect Instagram).
• Object to or restrict certain processing, or lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@appzoku.com. We'll respond within 30 days.

We use a small number of strictly necessary cookies to keep you signed in (via Supabase's authentication session) and to remember short-lived state during the Instagram connection flow. We do not use third-party advertising or tracking cookies.

The Service is intended for app developers and businesses, and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy as the Service evolves. If we make material changes, we'll update the “Last updated” date above and, where appropriate, notify you by email or an in-app notice.

Questions about this policy or your data? Email privacy@appzoku.com or hello@appzoku.com.

See also our Terms of Service.