AIGNCY app: Privacy Policy
Effective date: October 14, 2026
1. Who we are
This policy explains how AIGNCY LLC ("AIGNCY", "we", "us"), 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA, collects and uses personal data when you use the AIGNCY app at app.gncy.ai, sign up on www.gncy.ai/app or www.gncy.ai/pricing, or join our early-access list.
AIGNCY Media and AIGNCY Talent are services run by a separate company, Noir Global LLC, and are not covered by this policy.
AIGNCY OS, our plan for agencies, will have its own agency terms. Where an agency uses the app to manage its clients, the agency decides how its clients' data is used, and we process it for the agency.
Questions or requests: privacy@gncy.ai.
2. The short version
- We collect what we need to run your account, post your content, bill you and keep the app safe.
- We don't sell your personal data.
- Your connected social accounts' access tokens are held by our posting provider, bundle.social, not by us. You can disconnect at any time.
- When we make a copy of your upload for each account, we strip private data from the file, such as GPS location, device details and edit history.
- You can ask to see, download or delete your data.
- You must be 18 or over to use the app.
3. What we collect
You give us:
- Account details: your email address, name if you give it, and your sign-in method.
- Early-access details: if you join the early-access list, your email, the platforms and plan you pick, where your content comes from, an optional note and an optional Telegram handle or number.
- Content: the photos, videos and captions you upload, schedule or post, and the files' own data (metadata) as they arrive. Content may show you or other people and may include adult material.
- Support messages: what you send us through support chat or email.
- Billing details: your plan and billing history. Card details are entered on Stripe's pages and held by Stripe. We don't see or store your full card number.
From your connected accounts (through bundle.social):
- Account details such as username, display name, profile picture and account ID.
- Information about your posts, such as whether a post went out, its link, and basic stats like views and followers, for the analytics features in your plan.
Automatically:
- Sign-in and security logs: IP address, browser and device type, and the time of each sign-in.
- Usage: when you were last active, and the actions you take in the app (for example scheduling or cancelling a post), so the app works and so we can fix problems.
- Cookies: see section 8.
Link pages. If you publish a link page on app.gncy.ai, we count visits and clicks on it for you: the date, which link, the app the visitor came from, their country (worked out from the IP address, which we don't store) and device type. We don't set cookies on link pages. To stop spam and double counting we keep a keyed hash of the visitor's IP address for up to 24 hours. You see totals only. You're responsible for your page's content and for any notice your own visitors need.
What we create:
- Per-account copies of your uploads (see section 4).
- Tags describing your content (for example scenes or whether a clip has on-screen text), and caption suggestions, made with AI.
We don't ask for sensitive information such as health, religion or sex life. Your content may still reveal it. We use it only to provide the app to you, never to profile or advertise to you.
4. How we use it
| What we do | Data used | Why we're allowed to (GDPR/UK) |
|---|---|---|
| Create and run your account, sign you in | Account details, sign-in logs | To perform our contract with you |
| Store your uploads and post them to your connected accounts at the times you choose | Content, connected account details | Contract |
| Make a unique copy of each upload for each account: strip private data from the file (GPS, device, edit history), re-encode it, and make small visual changes | Content | Contract |
| Tag your content and suggest captions (AI features) | Content, captions | Contract |
| Show you basic stats for your accounts | Connected account and post data | Contract |
| Bill you, apply your plan and any early-access price | Billing details, early-access details | Contract; legal obligation for tax records |
| Send account emails and notifications (sign-in links, receipts, failed posts, account health alerts) | Email, push subscription if you allow push | Contract |
| Answer support requests | Support messages, account details | Contract; legitimate interests |
| Keep the app secure, prevent abuse, enforce our terms (including content rules on minors and consent) | Sign-in logs, usage, content | Legitimate interests; legal obligation |
| Tell you about the app and early access | Email, early-access details | Consent where required, otherwise legitimate interests. You can unsubscribe at any time |
| Meet legal duties, including reporting suspected child sexual abuse material to the authorities | Any relevant data | Legal obligation |
We don't use your content to train AI models, and we use our AI providers under business terms that don't allow them to train their models on what we send.
5. Who we share it with
We share personal data only with the service providers that run parts of the app for us, under contracts that limit how they can use it:
| Provider | What they do for us | Data involved |
|---|---|---|
| Supabase | Database and sign-in (servers in the US East region) | Account details, sign-in logs, app data |
| Vercel | Hosts the app and website | Requests to the app, including IP address |
| Cloudflare (R2) | File storage for your uploads and per-account copies | Content |
| bundle.social | Posts to your connected social accounts and holds their access tokens. Its name appears on the platform's permission screen when you connect | Content you schedule, connected account details and tokens |
| Stripe | Payments and billing portal | Billing details, email |
| Resend | Sends our emails | Email address, email content |
| PostHog | Analytics on our marketing sites, including the sign-up pages at www.gncy.ai/app and www.gncy.ai/pricing. Not used in the app | Page views and actions on those sites; cookies only if you accept them |
| Anthropic and xAI | AI features only: caption suggestions, content tagging and AI reviews. Each feature uses one of them | The content or captions sent for that feature |
We also share data:
- with the social platforms, when we post to your accounts at your request. Once posted, the platform's own privacy policy applies;
- when the law requires it, or to protect people's safety, our rights, or to investigate abuse;
- in a business transfer, such as a merger or sale, under the same protections. We will tell you if this happens.
6. We don't sell your data
We don't sell personal data, and we don't share it for cross-context behavioural advertising (targeted ads based on your activity across other sites).
7. How long we keep it
| Data | How long |
|---|---|
| Account data | While your account is open, then up to 30 days |
| Uploaded content and per-account copies | Stored under your own storage folder while your account is open. Deleted when you delete it, when you ask, or within 30 days after your account closes |
| Connected account tokens | Held by bundle.social until you disconnect the account or close your account |
| Billing records | 7 years, for tax and accounting law |
| Sign-in and security logs | 12 months |
| Support messages | 2 years after the conversation ends |
| Early-access list | Until you become a customer, ask us to remove you, or 2 years after you joined |
| Backups | Up to 30 days, then overwritten |
Content already published to a social platform stays there until you remove it on that platform.
8. Cookies
We use cookies needed to keep you signed in and to keep the app secure. They are set on app.gncy.ai only. The app doesn't use analytics, advertising or tracking cookies, and link pages set no cookies (see Link pages in section 3).
Our marketing sites, including the sign-up pages at www.gncy.ai/app and www.gncy.ai/pricing, use PostHog analytics. You choose in the bar shown on your first visit: before you choose, page views are counted anonymously with no cookies; if you accept, PostHog remembers your browser with a first-party cookie and local storage across gncy.ai sites; if you decline, nothing is sent. Do Not Track and Global Privacy Control are honored. The full details are in the Cookies and analytics section of our sites' privacy policy at www.gncy.ai/legal. We don't use advertising or marketing pixels anywhere.
If you allow push notifications, your browser gives us a push subscription so we can send alerts. You can turn this off in your browser settings at any time.
9. Your choices and rights
Wherever you live, you can:
- See the personal data we hold about you;
- Download a copy of it in a common format;
- Correct it if it is wrong;
- Delete it, or close your account;
- Disconnect any social account at any time in the app, or from the platform's own settings;
- Unsubscribe from marketing emails using the link in any email.
To make a request, email privacy@gncy.ai from the email address on your account. We confirm it's you by replying to the email address on your account, and may ask for more if we can't. We answer within 30 days (45 days where California law applies), and tell you if we need longer where the law allows it. We won't treat you differently for using these rights.
We may keep some data after a deletion request where the law requires it (for example billing records) or to deal with a legal claim.
10. Age
The app is only for people 18 and over. We don't knowingly collect data from anyone under 18. If we learn that someone under 18 has an account, we close it and delete their data, except where the law requires us to keep or report it. Everyone confirms they are 18 or over when they sign up, and we may ask for proof of age at any time.
11. People in the EU, EEA and UK
- Controller: AIGNCY LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA.
- Legal bases: set out in the table in section 4.
- Sensitive data: your content may reveal special category data (for example about sex life). We process it only to provide the service you asked for, on the basis of your explicit consent, which you give by uploading the content and can withdraw by deleting it, and, for content you post publicly, because you have made it public.
- Transfers: we are based in the US and our providers store data in the US. We rely on the European Commission's Standard Contractual Clauses (and the UK addendum) in our providers' data processing terms for these transfers.
- Extra rights: you can also object to processing based on legitimate interests, ask us to restrict processing, and withdraw consent at any time.
- Contact: we have not appointed a data protection officer or an EU or UK representative. Contact us at privacy@gncy.ai.
- Complaints: you can complain to your local data protection authority, or in the UK to the Information Commissioner's Office. We'd appreciate the chance to fix it first.
12. California residents (CCPA/CPRA)
- Categories we collect (past 12 months): identifiers (email, IP address, account IDs); customer records (billing details held by Stripe); commercial information (plan and purchase history); internet activity (sign-in logs, app usage and, if you accept analytics, activity on our sites); audio and visual information (your uploads); inferences limited to content tags. Sources and purposes are in sections 3 and 4.
- Sensitive personal information: we may hold account login details, and your uploads may reveal information about sex life. We use it only to provide the app and do not use it to infer things about you.
- Disclosed for business purposes to the service providers in section 5.
- Sale and sharing: we don't sell personal information or share it for cross-context behavioural advertising, and haven't in the past 12 months. We don't knowingly sell or share data of anyone under 16.
- Your rights: to know, delete, correct, and not be discriminated against. You can use an authorised agent, who must show us your signed permission.
- Retention: see section 7.
13. Security
We use encryption in transit, access controls that limit each customer to their own data, restricted staff access, and regular backups. No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities where the law requires it.
14. Changes and contact
We may update this policy. If a change is material, we will tell you by email or in the app before it takes effect.
AIGNCY LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA. Email: privacy@gncy.ai.