CoveDeck

Privacy Policy

Effective June 26, 2026

This Privacy Policy explains how Joe Hughes, the operator of CoveDeck, collects, uses, and shares information when you use the Service. By using CoveDeck, you agree to this policy.

1. Information we collect

  • Account information you provide, such as your name, email address, password, and profile image.
  • Your content, such as projects, scripts, captions, tasks, calendar entries, and media files you upload.
  • Connected accounts. When you connect a social account, we and our publishing provider receive access tokens and the data needed to publish on your behalf and retrieve analytics (such as follower counts and engagement).
  • Payment information. Subscriptions are handled by Stripe. We do not store full card numbers; Stripe processes payments and shares limited billing details (such as plan, status, and the last four digits) with us.
  • Usage and device data, such as log data, approximate location from IP address, and basic analytics about how you use the Service.
  • Cookies for sign-in sessions, preferences (such as theme), and, if you arrive through a referral link, attribution.

2. How we use information

  • to provide, operate, secure, and improve the Service;
  • to publish your content to platforms you connect and show analytics;
  • to process payments, manage subscriptions, and prevent fraud;
  • to communicate with you about your account and the Service; and
  • to comply with legal obligations.

Where required by law, our legal bases are performance of our contract with you, your consent, our legitimate interests in operating the Service, and compliance with legal obligations.

3. AI features

When you use the AI assistant, relevant content (such as your prompt and related project information) is sent to our AI provider, Google, to generate a response. We do not use Your Content to train our own models. See Subprocessors for details.

4. How we share information

We do not sell your personal information. We share it only:

  • with the service providers (subprocessors) that help us run the Service, listed on our Subprocessors page;
  • with social platforms you choose to connect and publish to;
  • when required by law, or to protect our rights, users, or the public; and
  • in connection with a merger, acquisition, or sale of assets, subject to this policy.

5. Data retention and deletion

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we deactivate it and then permanently delete your data, including stored media, within approximately 30 days, except where we must retain limited records to comply with law (for example, tax and payment records). You can request deletion at any time from Settings or by contacting us.

6. Security and storage

We use technical and organizational measures to protect your information. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Where your files and data are stored

Your media files (such as videos, images, and other uploads) are kept in cloud object storage provided by Cloudflare (R2). Your account details and other application data are stored with our database provider, Supabase, and payments are handled by Stripe. See our Subprocessors page for the full list of providers and what each one processes. Because we rely on these third-party providers, the availability and durability of your files also depend on them; please keep your own backup copies of anything important (see our Terms of Service).

7. International transfers

We and our providers may process your information in countries other than yours. Where required, we use appropriate safeguards for such transfers.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of the EEA and UK have rights under the GDPR; residents of California have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of sale or sharing (we do not sell or share personal information for cross-context behavioral advertising). To exercise any right, contact joehughes196@gmail.com. We will not discriminate against you for exercising your rights.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will provide notice. The “Effective” date above shows when this policy was last updated.

11. Contact

For privacy questions or requests, contact joehughes196@gmail.com.