Privacy policy

Last updated October 22, 2026

This policy explains what Addy ("we") collects when you use use-addy.site and the Addy app, and what we do with it.

What we collect

  • Account data: name, email, password hash or OAuth identity, workspace membership.
  • Brand data you give us: website URLs, product images, past ads, tone notes.
  • Social account tokens: OAuth tokens for Instagram, TikTok and YouTube, stored encrypted and used only to publish what you schedule and read the metrics of those posts.
  • Generated content: concepts, scripts, images and videos created in your workspace.
  • Usage data: pages viewed, features used, device and browser, via PostHog. We do not sell this.
  • Payment data: handled by Stripe. We store the last four digits and the subscription state, never the card number.

Processors we use

  • Higgsfield (video and image generation): receives prompts and reference images. Outputs are kept by Higgsfield for up to 7 days and permanently by us.
  • Anthropic (Claude): receives brand data and public web content to write concepts. Not used to train their models.
  • ElevenLabs (voice), Firebase / Google Cloud (auth, database, storage), Vercel (hosting), Stripe (billing), Resend (email), PostHog (analytics), and a social publishing API provider for posting to Instagram, TikTok and YouTube.

How we use data

To run the service, to generate the content you ask for, to bill you, to send transactional and (if you opt in) marketing email, to prevent abuse, and to improve the product using aggregated usage data.

Public web data

Addy reads public web pages (your site, competitors' ads in public ad libraries, public Reddit and review pages) to write concepts. We do not log in to any third-party service on your behalf except the social accounts you connect.

Retention and deletion

Delete your workspace from Settings and everything in it is removed within 30 days, except invoices we must keep for tax law. Email hello@use-addy.site for a full export.

Your rights

Access, correction, export, deletion and objection, under GDPR, UK GDPR and CCPA. Email hello@use-addy.site. We do not sell personal information.

Cookies

Session cookies for login and a first-party analytics cookie. No third-party advertising cookies on the marketing site.

Children

Addy is for people 18 and older.

Changes

We will email account holders about material changes at least 14 days before they take effect.