Privacy Policy

GRIDDY AI is a multi-tenant SaaS platform providing AI-assisted brand content creation, visual compositing, content calendar scheduling, Autopilot operations, and direct social publishing. This Privacy Policy details how we collect, use, process, and safeguard your information when you access our platform, APIs, dashboard, and connected Meta integrations.

We collect only the information necessary to provide, secure, and operate our service features:

• Account & Identity Data: Name, email address, username, cryptographically hashed passwords, workspace membership roles, and session tokens.
• Brand Identity & Content Memory: Brand profile details, visual design DNA, target tone of voice, content pillar weights, color palettes, and uploaded official brand logo assets.
• User-Uploaded Media & Assets: Image files and creative assets uploaded for post generation, logo compositing, campaign drafting, and visual grid planning.
• Instagram Connected Account Data: Instagram Professional account IDs, usernames, and granted OAuth authorization scopes. All OAuth access tokens are encrypted at rest in our database using industry-standard AES-256-GCM encryption.
• WhatsApp Assistant & Phone Number Data: International E.164 phone numbers linked by verified users, inbound images submitted for instant drafting, interactive button replies, transactional alert preferences, and one-time verification codes (OTP).
• Operational & Telemetry Data: Security audit logs, AI token usage metrics, scheduled job statuses, rate-limiting counters, and notification delivery receipts required for platform reliability and fraud prevention.

Your data is strictly used for the following operational and service delivery purposes:

• AI Content Creation & Visual Compositing: Drafting bilingual on-brand captions (Arabic & English), generating contextual hashtags, and compositing brand logos onto user-approved media.
• Direct & Scheduled Instagram Publishing: Publishing approved single-image posts directly to connected Instagram accounts via Meta Graph API container polling and automated worker queues in your local timezone.
• Conversational WhatsApp Assistant: Receiving incoming photos via WhatsApp, processing logo overlays, presenting AI captions for review, and scheduling or publishing posts directly via chat.
• Autopilot Operations & Approval Queues: Automated weekly content planning, generating drafts into your human-approval queue, and dispatching status summaries.
• Security & Account Protection: Authenticating user sessions, enforcing rate limits, preventing brute-force login attempts, and safeguarding cryptographic keys.

GRIDDY AI integrates with established technology providers solely to execute user-requested features:

• Meta Platforms (Instagram Graph API & WhatsApp Cloud API): Media files, captions, and account IDs are transmitted to Meta servers to publish Instagram posts, ingest webhook callbacks, and deliver WhatsApp messages.
• Artificial Intelligence Engines (OpenAI): AI models are utilized to generate on-brand marketing copy, bilingual captions, and generative visual concepts upon user request.
• Cloud Infrastructure & Managed Storage (Hostinger): Relational MySQL databases, encrypted secrets, and persistent media assets are hosted on secure enterprise cloud servers.

Notice: We never sell, rent, or monetize your personal data, uploaded photos, brand assets, or phone numbers to data brokers or third-party advertisers.

Account and workspace data is retained while your subscription is active. Upon cancellation, brand data remains accessible until a deletion request is made. Ephemeral state machine sessions (such as WhatsApp interactive flows) expire automatically after 24 hours.

We enforce HTTPS/TLS encryption in transit, AES-256-GCM encryption at rest for sensitive tokens, timing-safe cryptographic comparisons, and strict multi-tenant workspace isolation.

You retain full rights to access, modify, export, disconnect social accounts, and request permanent deletion of your user account and all associated data from our servers.

For any privacy-related questions, compliance inquiries, or data requests, contact our dedicated privacy and security team: