Privacy Policy

Effective March 1, 2026

1. What we collect

When you use Grofly, we collect:

  • Account info — name, email address, business name, city, and business type.
  • Content — photos and videos you upload for posting.
  • Social media connections — platform usernames and OAuth tokens for connected accounts (Instagram, TikTok, Facebook, etc.).
  • Usage data — which features you use, posting history, and engagement metrics from your social accounts.
  • Payment info — processed and stored by Stripe. We never see or store your full card number.

2. How we use your data

Everything we collect is used to run the service:

  • AI scoring and enhancement of your uploaded photos (via Anthropic Claude and fal.ai)
  • Generating captions matched to your brand voice
  • Publishing content to your connected social media accounts (via Zernio)
  • Discovering your online profiles during onboarding (via Google Places API)
  • Processing payments (via Stripe)
  • Improving the service based on aggregate usage patterns

3. Third-party services

We use the following services to operate Grofly:

  • Supabase — database and file storage
  • Stripe — payment processing
  • Zernio — social media publishing API
  • Anthropic (Claude) — AI content scoring and caption generation
  • fal.ai — image enhancement and video processing
  • Google Places API — business discovery during onboarding

Each provider has their own privacy policy. We only share the minimum data needed for each service to function.

4. We don't sell your data

We do not sell, rent, or trade your personal information or content to anyone. Period.

5. Data retention

Your content and account data are stored as long as your account is active. If you cancel your subscription, your data is retained for 30 days so you can download your content library. After 30 days, we delete your content from our servers. Account records (email, name) are retained for billing and legal purposes unless you request full deletion.

6. Cookies

We use session cookies for authentication only. No tracking cookies, no analytics cookies, no ad cookies. That's it.

7. California residents (CCPA)

If you're in California, you have the right to know what data we collect, request deletion of your data, and opt out of any data sales (we don't sell data, so there's nothing to opt out of). Contact support@grofly.ai for any data requests.

8. Contact

For privacy questions or data requests, email support@grofly.ai. We respond within 5 business days.

Grofly is operated by Danny Meza, San Diego, CA.