Privacy Policy

1. What UniBeing does

UniBeing (“we”, “us”) is a social media operating system. It learns about your brand, generates social media content, and, with your explicit approval, publishes posts to the accounts you connect, Instagram, Facebook Pages, Threads, LinkedIn, X, YouTube and TikTok, each through that platform's own official API.

2. Data we collect

• Account data: your email address and display name (via Firebase Authentication or Google).
• Brand data you provide: brand name, industry, audience, tone of voice, content topics, and preferences you enter during onboarding or in Settings.
• Connected account data: the username, profile picture, and account type of each social account you connect, obtained only after you grant permission on that platform's own consent screen.
• YouTube account data: when you connect YouTube, we read your channel name, channel ID and thumbnail (via the youtube.readonly scope) solely to show you which channel is connected, and we upload videos you approve (via the youtube.upload scope). We do not read your watch history, subscriptions, comments, or analytics.
• Audio and video you upload: files you add to your Brand Brain are transcribed to text. The transcript is shown to you for review and is only stored if you choose to save it.
• Content you create: captions, hashtags, generated images, schedules, and publishing statuses.

3. How connected account data is used

Each connection is used exclusively to (a) display the connected account so you know where content will go, and (b) publish the posts you approve or schedule. We never see or store your password for any platform, you sign in on that platform's own page. Access tokens are encrypted (AES-256-GCM) at rest in a server-only database that no client, browser, or third party can read. We do not sell connected-account data, use it for advertising, or share it with anyone beyond the processors listed below.

YouTube specifically. UniBeing uses YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service, and Google's Privacy Policy applies to Google's handling of your data. You can revoke UniBeing's access to your Google account at any time via the Google security settings page. Data obtained through YouTube API Services is used only for the features described above, is not transferred to third parties except the processors listed below, and is deleted when you disconnect the account or delete your UniBeing account.

4. Third-party processing

• AI providers: brand content is sent to an AI model provider to generate captions and images. Providers receive only the text needed for generation and never receive your access tokens or credentials for any platform.
• Speech-to-text: audio and video you upload for transcription is processed by a speech-recognition provider and is not used to train their models.
• Social platforms: posts are published through each platform's official API (Meta Graph API, LinkedIn, Threads, X, YouTube Data API, TikTok) under that platform's own terms.
• Infrastructure: authentication and database services are provided by Firebase (Google Cloud); media storage by Supabase.

5. Data retention & deletion

You can disconnect any account at any time from Settings. Its token is deleted immediately. For Google/YouTube you can additionally revoke access from your Google account permissions page. You can delete your entire account from Settings → Account → Danger zone; we then delete your profile, brand data, content, media, notifications, and connected-account credentials. To request deletion, export, or to ask anything about your data, email privacy@unibeing.app.

6. Cookies & analytics

We use strictly necessary cookies for authentication sessions. We may collect anonymous aggregate usage analytics to improve the product. We do not sell personal data, ever.

7. Contact

Questions about this policy: privacy@unibeing.app.