Privacy Policy

This policy explains how CloudSync Media (“we”) handles personal information in ShopFeed. We are the responsible party (data controller) for the information described here.

What we collect

• Account: your email address and a salted scrypt hash of your password. We never store the password itself.
• Reference photos and logo: images you upload, including your face. Face images are biometric-adjacent personal information and are treated as sensitive.
• Likeness consent: the consent statement you confirm and when you confirmed it.
• Content: your thoughts, transcripts, recordings you upload for transcription, links you import and the text we read from them, your quote bank, brand kits, content pillars, and the graphics and posts generated for you.
• Billing: subscription status, plan, renewal dates and the last four digits and brand of your card, received from Lemon Squeezy. We never receive full card numbers.
• Usage events: actions such as generating, exporting and repurposing, used to meter plan limits and keep an audit trail.
• Misuse reports: what you submit through the report form, including optional contact details.

How we use it

To provide the service you subscribe to (performance of a contract), to enforce plan limits and prevent abuse (legitimate interests), to generate images with your likeness (your explicit consent, which you can withdraw by deleting your photos), and to meet legal and tax obligations. We do not sell personal information, use it for advertising, or use your photos to train AI models.

Who we share it with

• OpenRouter, an AI gateway that routes generation requests to the model provider for your plan (Google Gemini image models or OpenAI image models). Your reference photos, brand details and text are sent with each generation request. Audio you upload for transcription is sent to an audio-capable model through the same gateway.
• Lemon Squeezy, our Merchant of Record, which processes payments and handles tax under its own privacy policy.
• The sites you import from. When you paste a link, our server requests that page (or, for YouTube, the video’s captions or audio) from the site directly. We send no personal information with that request.
• Our hosting provider, which stores encrypted data on our behalf.
• Authorities, where we are legally required to disclose information.

These providers may process data outside your country, under contractual safeguards.

How we protect it

Reference photos and logos are encrypted at rest with AES-256-GCM and stored separately from generated outputs. Images and exports are only served through short-lived signed links tied to your signed-in session. Sessions use a signed, httpOnly, secure cookie that expires after 30 days and is revoked when you sign out. Traffic is encrypted in transit with HTTPS.

Cookies and local storage

We set one strictly necessary cookie to keep you signed in. The app caches some of your own data in your browser’s session storage for speed; it is cleared when you sign out or close the tab. We use no advertising or third-party analytics cookies.

How long we keep it

We keep your data while your account is open. Deleting a photo, design or brand kit removes it immediately. Deleting your account from Your data permanently removes your photos, outputs, brand kits, consent records and account record, and cancels your subscription. Lemon Squeezy keeps transaction records as tax law requires. Misuse reports are kept for as long as needed to investigate and act on them.

Your rights

Depending on where you live (including under the GDPR, UK GDPR and South Africa’s POPIA), you can ask to access, correct, delete or export your personal information, object to or restrict processing, and withdraw consent. Most of this you can do yourself in the app. For anything else, contact us and we will respond within 30 days. You can also complain to your data protection authority, such as South Africa’s Information Regulator.

Children

ShopFeed is not intended for anyone under 18, and we do not knowingly collect their information.

Changes

We will email you about material changes before they take effect and update the date above.

Contact

Privacy questions or requests: our contact form. To report an image that misuses your likeness, use the report form.