Privacy Policy

This policy explains what Prismcast, operated by softBrane, collects, why, and the choices you have.

1. What we collect

• Your account: name, email address, a salted one-way hash of your password, timezone and preferences.
• Connected accounts: for each platform you connect (Facebook, Instagram, Threads, X, LinkedIn, Pinterest, Reddit, TikTok, YouTube, Bluesky, Mastodon, Telegram, Discord and Google Business Profile), the access and refresh tokens the platform issues, plus the account's name and ID. We never see or store your passwords for those platforms.
• Developer app credentials you choose to save (app IDs and secrets), and AI provider keys if you add your own.
• Your content: posts, schedules, brand descriptions, feeds you subscribe to, and the images and video you upload.
• Performance data the platforms report for your published posts (reactions, comments, shares, views), and comments shown in the engagement inbox.
• Billing and usage records: your plan, payments and monthly usage counts.
• Technical data: IP address and request logs, used to secure the service (for example to throttle repeated failed sign-ins) and kept for no more than 30 days.

2. How we use it

Only to run the service you asked for: drafting content with AI, publishing it to the accounts you choose at the times you choose, showing you how it performed, letting you reply to comments, keeping your account secure, and billing. We do not sell your data, and we do not use it for advertising.

3. AI providers

When you ask for a draft, your instructions and brand description are sent to an AI provider to write it — the provider you configured with your own key, or our default provider (such as Groq or Google Gemini). Images you choose to analyse may be sent with them. Providers process this data to return the draft.

4. Who we share data with

• The platforms you publish to, only when you publish or read engagement, and only for the accounts you connected.
• Infrastructure providers: Cloudflare hosts the application, database and media storage. A transactional email provider sends account email such as password resets.
• Authorities, only where the law requires it.

5. Google, YouTube and Meta data

Prismcast's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. YouTube features use YouTube API Services; by using them you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke our access at any time in your Google security settings, or for Facebook and Instagram under Settings → Apps and Websites.

6. Media you upload

Images and video are stored in our object storage at long, unguessable URLs so that the platforms you publish to can fetch them. Deleting an item from your media library, or deleting your account, removes it.

7. Security

Platform tokens, app secrets and AI keys are encrypted at rest with AES-256-GCM. Passwords are stored only as PBKDF2 hashes. All traffic uses HTTPS.

8. Retention and deletion

We keep your data while your account exists. Removing a connected account deletes its tokens immediately. Deleting your account in Settings → Account erases your profile, connections, posts, media and records immediately and permanently. See data deletion.

9. Your rights

You can see, export, correct and delete your data. Export everything we hold as a JSON file from Settings → Account. For any other request, or if you cannot sign in, email privacy@softbrane.com from your account's address.

10. Cookies and storage

Prismcast keeps you signed in using your browser's local storage. We use no advertising cookies and no third-party trackers.

11. Children

Prismcast is a business tool and is not directed at children under 16. We do not knowingly collect their data.

12. Changes and contact

We will post changes here and update the date below. Questions: privacy@softbrane.com.