Privacy Policy
Last updated: July 18, 2026 | Effective: July 18, 2026
1. Overview
Unool (“we,” “our,” “us”) respects your privacy. This Policy explains what personal data we collect, how we use it, and your rights.
By using Unool, you agree to this Policy. Contact us at connect@pixenox.com with questions.
2. Data We Collect
Account Data:
- Email address (for magic link authentication)
- Name, headline, bio, role, company (profile data you provide)
- Subdomain choice for your public profile
Usage Data:
- Posts you create, schedule, and publish
- Platform connections (OAuth tokens for LinkedIn, X, Threads)
- Profile views, link clicks, engagement metrics
- AI token usage for content adaptation
Technical Data:
- IP address, browser type, device info
- Access logs, error reports
- Referrers, timestamps
Third-Party Data (via OAuth):
- Profile info from LinkedIn, X, Threads when you connect accounts
- We only request permissions needed for publishing
3. How We Use Your Data
- Provide the Service: Authenticate you, host your profile, publish your content
- AI Content Adaptation: Transform your posts for LinkedIn, X, Threads (with your approval)
- Analytics: Show you profile views, link clicks, post performance
- Platform Publishing: Use OAuth tokens to post to connected platforms on your behalf
- Improve Service: Analyze usage patterns (aggregated, anonymized)
- Communications: Send magic links, security alerts, feature updates
- Legal/Compliance: Comply with laws, enforce Terms, detect fraud
4. Data Sharing & Disclosure
We do not sell your data. We share only in these cases:
- Platform Publishing: Content you approve is sent to LinkedIn, X, Threads via their APIs
- AI Providers: Anonymized prompts sent to Anthropic/OpenAI for content adaptation (no PII in prompts)
- Service Providers: Vercel (hosting), Supabase (database/auth), Upstash (rate limiting/queue), Resend (email)
- Legal Requirements: When required by law, court order, or to protect rights/safety
- Business Transfer: In a merger/acquisition, with notice and continued privacy protection
5. Data Retention
- Account data: Retained while account is active
- Published posts: Retained until you delete them
- OAuth tokens: Encrypted, retained while connection active
- Analytics: Aggregated data retained indefinitely; raw logs 90 days
- Deleted accounts: Data purged within 30 days (backups up to 90 days)
6. Security
- Encryption in transit (TLS 1.2+) and at rest (AES-256 via Supabase)
- OAuth tokens encrypted with rotating keys before storage
- No passwords stored (magic link authentication only)
- Rate limiting, CSP, HSTS, security headers on all responses
- Regular dependency updates and vulnerability scanning
No internet transmission is 100% secure. We cannot guarantee absolute security.
7. Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data (“right to be forgotten”)
- Restrict or object to processing
- Data portability (export your data)
- Withdraw consent (where consent is the basis)
- Opt out of marketing communications
To exercise these rights, email connect@pixenox.com or use Settings → Danger Zone → Delete Account.
8. Cookies & Tracking
- Essential: Session/auth cookies (via Supabase SSR)
- No tracking cookies: We do not use Google Analytics, Meta Pixel, or ad tracking
- LocalStorage: Theme preference, onboarding progress
- You can disable cookies in your browser (auth may not work)
9. International Data Transfers
Our infrastructure is hosted in the US (Vercel, Supabase, Upstash). AI processing uses Anthropic (US) and OpenAI (US). By using Unool, you consent to US data processing with standard contractual clauses where applicable.
10. Children's Privacy
Unool is not directed to children under 18. We do not knowingly collect data from minors. If you believe a child provided data, contact us for deletion.
11. Changes to This Policy
We may update this Policy. Material changes will be posted here with a new “Last updated” date. Continued use constitutes acceptance.
12. Contact Us
Privacy questions or requests:
Email: connect@pixenox.com
Data Protection Officer: Available upon request
