Privacy Policy

• Your account. Your email address, name and sign-in, handled by Google Firebase Authentication, and your plan and credit balance. We never see your Google or Apple password.
• Connected social accounts. When you connect X, TikTok, Instagram, YouTube or LinkedIn, the platform gives us, with your consent, an access token and basic profile details (ID, username, display name, picture). Tokens are sealed on our server (AES-256-GCM, bound to your account) and opened only to post or refresh access. They never reach your browser.
• What you make. Your creators and brands: their details, pictures, voices, videos, life story, brand kit, products, calendars, drafts and posts, and the replies, messages and follows done on your behalf. For brand accounts, the tracked links in posts and how many people clicked them (we count clicks; we don't identify who clicked).
• What you upload. Reference photos, product pictures, logos, voice recordings for cloning (with your confirmation that you may use the voice) and other files.
• Cost and usage logs. For each request to an AI provider: what it was for, the model, its cost and credits, and the prompt and output, so we can bill fairly, fix problems and prevent abuse.
• Technical data. Server logs (IP address, browser, pages, errors) and analytics events about which pages and studio screens are used.

• LinkedIn: with your consent, your basic profile (member ID, name and picture) and permission to publish the posts, pictures, videos, documents and polls you send or schedule, on your own profile or, when you choose one, on a company Page you administer. If Mitsushiro has LinkedIn's Community Management access and you grant it, we also read which Pages you administer (to let you choose one), each Page's follower count and its recent posts with their impressions, likes, comments and reposts, and your own posts' totals; we show these only to you in the studio and keep only the numbers, never the names or comments of the people who engage. We do not read your feed, your messages or your connections, and we never comment, react or message on your behalf. Your token is sealed like every other; LinkedIn tokens last 60 days. When you disconnect LinkedIn we delete the stored token and that account's numbers; you can also remove Mitsushiro from your LinkedIn settings (Data privacy, Permitted services). LinkedIn's handling of the data is covered by the LinkedIn Privacy Policy.
• X: reading your profile and posts and the public posts in your feed, writing posts and replies, uploading media, following, reading and answering direct messages if you turn that on, and staying signed in so scheduled posts can go out.
• TikTok: your basic profile (ID, display name, picture, username), the posting options TikTok gives your account (who can see posts, whether comments, Duets and Stitches are allowed), permission to publish the photo and video posts you send or schedule, and, if you allow it, your account's numbers (followers, likes, post count) and your recent posts with their views, likes, comments and shares, shown back to you in the studio. When you disconnect TikTok we revoke our access with TikTok and delete the stored token.
• Instagram: your professional account's basic profile (ID, username, picture), permission to publish the pictures, carousels and Reels you send or schedule, and, when you turn on “first comment with hashtags”, to post your hashtags as the first comment on each post. We also read the numbers Instagram gives for your account and recent posts, including the insights (views, reach and shares), and show them only to you, the account's owner, in the studio. When you disconnect Instagram we delete the stored token.
• YouTube: Mitsushiro uses the YouTube API Services. With your consent we read your channel's basic details (ID, title, picture) and your videos' public numbers (views, likes, comments) to show them back to you, and upload the Shorts you send or schedule to your channel. When you turn on comment replies, we also read the comments on your own channel's videos and post the replies you approve, or that you have set to go out automatically; commenters' public names and comment text are kept only to show those comments to you and answer them, and are deleted with the channel's data. By connecting YouTube you agree to the YouTube Terms of Service, and Google's handling of the data is covered by the Google Privacy Policy. You can revoke our access at any time from the studio (Socials, Disconnect) or from your Google security settings. When you disconnect, or revoke access, we delete the stored token and the YouTube data we hold for that channel within 7 days; numbers we hold are refreshed at least every 30 days and deleted if they can't be refreshed.

We use this access only to run the accounts you connect, as you set them up. Public posts read from X are used to help write your account's own posts and replies; they are not republished, shared with other users or used to train AI. We do not sell or share platform data with advertisers or data brokers, and we do not use it to profile people or target advertising. We delete or update X content we hold when it is deleted or changed on X, as X requires, and all X data linked to an account when you disconnect it. You can also revoke our access from each platform's own settings.

• Google Firebase and Google Cloud: sign-in, database, file storage, analytics.
• Vercel: hosting of the website and its server functions.
• Stripe: payments and subscriptions. We never see your full card number.
• OpenAI: pictures and text (captions, calendars, scripts, replies).
• Anthropic: writing and checking posts, and creative direction.
• ElevenLabs: voices and voiceovers.
• Kling: talking video clips.
• xAI: pictures and video clips.
• Upstash: scheduling, so posts go out on time.
• X, TikTok, Meta (Instagram), Google (YouTube) and LinkedIn: to publish to, and read, the accounts you connect.

Each gets only what it needs for its part. Under their API terms the AI providers do not train their models on what we send. Some process data outside the UK; where they do, transfers are covered by the UK International Data Transfer Addendum, standard contractual clauses or an adequacy decision.

• To provide the service you signed up for (contract).
• To keep it secure, prevent abuse, bill correctly and improve it (legitimate interests).
• To connect social accounts (your consent, which you can withdraw by disconnecting).
• To meet legal duties such as keeping billing records (legal obligation).

• Sell your personal data or any data from X, TikTok, Instagram or YouTube.
• Post anything you didn't set up or approve.
• Use your uploads, creators or platform data to train AI models.
• Show your content to other customers.

• While your account is open, we keep what you make so the service works.
• Disconnecting a social account deletes its tokens and profile details straight away.
• Deleting a creator or brand deletes its pictures, voices, videos, posts and plans, and unlinks its tracked links from you (links already posted keep working).
• Deleting your account deletes everything above at once. Cost logs lose their prompts, outputs and any link to you; only anonymous cost totals remain.
• Billing records are kept, unlinked from your account, for as long as UK tax law requires (usually six years). Stripe keeps its own records.
• Server logs are kept for a short time for security, then expire on their own.

See Data deletion for how. If you can't sign in, email us and we'll delete it within 30 days.

Under the UK GDPR you can ask to access, correct, export or delete your data, to object to or restrict how we use it, and to withdraw consent. Settings → Your data → Download my data gives you a copy at any time. Write to fefeapphello@gmail.com and we will reply within a month. If you're unhappy with our answer you can complain to the Information Commissioner's Office (ico.org.uk). People in the EEA have the same rights under the GDPR; California residents have the rights the CCPA gives, and we do not sell or share personal information as it defines it.

• mitsu_access: a signed cookie set when you enter an invite code, so you can create an account. Lasts 90 days.
• Sign-in session: Firebase keeps you signed in using your browser's storage. Needed for the studio to work.
• Analytics: a random visitor ID in your browser's storage for our own page and screen counts, and Google Analytics cookies (_ga) where it's enabled. You can block or clear these in your browser without breaking the studio.

We use no advertising or cross-site tracking cookies.

Data travels over HTTPS. Access tokens are sealed, files are kept in private storage only your account can reach, and links we give platforms to fetch your media are signed and expire within an hour. No system is perfectly secure; if a breach affects your data, we will tell you and the ICO as the law requires.

Mitsushiro is for people aged 18 and over. We do not knowingly collect data from anyone younger, and delete it if we learn we have.

If we change this policy in a way that matters, we will update the date above and tell you by email or in the studio before the change applies.