Privacy Policy

1. Who we are

Substance AI ("Substance", "we", "us") operates the platform at substance-ai.vercel.app providing identity-matched AI image and video generation, and optional publishing to connected social accounts. Contact: support@substanceai.com.

2. Information we collect

• Account data: email address, display name, hashed password or OAuth identifier.
• Content you upload: reference photos, source media, prompts, and generated outputs.
• Connected social accounts (Meta / Instagram / Facebook): when you connect an Instagram Business or Creator account via Facebook Login, we receive your Facebook user ID, the IDs and names of Pages you administer, the linked Instagram Business Account ID, a long-lived access token, and basic profile information you authorise.
• Usage data: log entries, IP address, device and browser metadata, feature interactions, and error reports.

3. How we use Meta Platform data

Data accessed via the Meta and Instagram Graph APIs is used solely to provide the features you have asked for, namely:

• publishing images, videos, captions, and related metadata to the Instagram account you connected;
• reading the list of Facebook Pages and Instagram Business Accounts you administer so you can choose where to post;
• refreshing the access token on your behalf so you do not have to re-authenticate every 60 days;
• showing post status, errors, and basic engagement metrics back to you inside Substance AI.

We do not sell Meta Platform data, use it for advertising, share it with data brokers, or merge it with data obtained from other sources for any purpose you have not authorised.

4. How we store and protect data

Tokens and other credentials are encrypted at rest. We host on Vercel and Supabase with TLS in transit. Access to production data is restricted to authorised maintainers. We retain access tokens only for as long as your account remains connected.

5. Sharing

We share data only with infrastructure providers strictly required to operate the service (hosting, database, model inference, error monitoring) under contract. We do not sell personal data.

6. Your rights and controls

• Disconnect Instagram / Facebook: revoke access at any time inside Substance AI under Settings → Connected Accounts, or directly at Meta Account Center → Apps and Websites. Disconnecting deletes the stored access token and account IDs immediately.
• Delete your account and all associated data: email support@substanceai.com from your registered address. We will action requests within 30 days.
• Export or correct data: contact us using the email above.

7. Data deletion request URL

To request deletion of data we hold about you, including any data obtained from Meta, email support@substanceai.com with the subject line "Data deletion request". We will confirm deletion within 30 days and provide a confirmation code on request.

8. Children

Substance AI is not intended for use by anyone under 18, and we do not knowingly collect data from minors.

9. Changes

We may update this policy. Material changes will be notified by email or in-app banner before they take effect.

10. Contact

Questions about this policy: support@substanceai.com.