← Back to ClipStackr

Privacy Policy

Last updated: May 9, 2026

Who we are

ClipStackr ("we", "our", "us") is a subscription web application that helps creators generate, approve, and schedule social media posts. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

What we collect

  • Account data: email address, name, and authentication identifiers (managed via Clerk).
  • Billing data: handled by Stripe; we never see or store your full card number.
  • Social platform tokens: OAuth access tokens for Instagram and X that you grant during connection. Stored encrypted at rest.
  • AI tool API keys: the Canva API key you provide (BYOK model). Stored encrypted at rest and used only to make generations on your behalf.
  • Content you create: brand voice profile, templates, drafts, scheduled posts, and uploaded media assets.
  • Operational data: log entries, error reports, and basic usage metadata used to operate and improve the service.

How we use it

  • Provide and operate the ClipStackr service.
  • Generate copy and visuals at your request using your stored brand voice profile and the AI tool keys you supply.
  • Send transactional email such as approval links and receipts.
  • Process subscription payments through Stripe.
  • Diagnose service issues and prevent abuse.

We do not sell your personal information, and we do not use your content to train models.

Third-party services we use

ClipStackr is built on the following providers, each with their own privacy practices:

  • Clerk (authentication)
  • Supabase (database and encrypted secret storage)
  • Stripe (payments)
  • Resend (transactional email)
  • Cloudflare R2 (asset storage)
  • Vercel (application hosting)
  • Anthropic Claude API (text generation)
  • Canva API (image generation, using your BYOK key)
  • Inngest (job scheduling)
  • Meta Graph API and X API (publishing posts you authorize)

Data retention

Uploaded media assets are automatically deleted 60 days after upload. Account data, brand voice profiles, and post history are retained for as long as your account is active. When you delete your account, we remove your personal data within 30 days, except where law requires us to retain it (such as billing records).

Your rights

You can request access to, correction of, or deletion of your personal data at any time by emailing us at the address below. You can also disconnect any social platform or revoke any AI tool key directly from your account settings.

Security

Sensitive data such as social tokens and API keys are encrypted at rest. All traffic to and from ClipStackr is encrypted in transit (HTTPS). No system is perfectly secure, and we encourage you to choose a strong password.

Children

ClipStackr is not directed to children under 18, and we do not knowingly collect personal information from them.

Changes

We may update this policy as ClipStackr evolves. Material changes will be communicated via email or in-app notice.

Contact

Questions or requests: hello@clipstackr.com.