Privacy Policy

Africore Lab ("we", "our", "us") operates Gliiz AI (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read it carefully. By using the Service, you consent to the practices described in this policy.

• To provide and operate the Service on your behalf
• To publish, schedule, and manage content on connected social platforms
• To generate AI-powered content, creatives, and automated replies
• To process payments and manage subscriptions
• To send transactional emails (account security, billing receipts, important product updates)
• To detect and prevent fraud, abuse, or unauthorized access
• To comply with legal obligations
• To improve the platform through aggregated, anonymized analytics

Gliiz AI integrates with Meta (Facebook & Instagram), TikTok, LinkedIn, YouTube (Google), and WhatsApp Business APIs. When you connect these platforms:

• We request only the permissions strictly necessary for the features you enable
• Access tokens are stored encrypted and scoped to your account only
• We act as a data processor on your behalf; you remain the data controller for your audience data
• Data fetched from these platforms (analytics, DMs, comments) is used exclusively to power your dashboard and automations
• You can disconnect any platform at any time from Settings → Accounts, which immediately revokes our access
• Each platform's own privacy policies govern how they handle the underlying data

Gliiz AI uses YouTube API Services to let you upload videos and read basic channel data on your own behalf when you connect your YouTube account.

• By connecting YouTube, you agree to be bound by the YouTube Terms of Service: https://www.youtube.com/t/terms
• Our access, use, and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy
• We only request the youtube.upload and youtube.readonly scopes needed to publish content and display your channel in Gliiz AI, never anything broader
• You can revoke Gliiz AI's access to your Google/YouTube account at any time from Google's security settings: https://security.google.com/settings/security/permissions

We share your data only in the following circumstances:

• Service Providers: payment provider, Supabase (database & auth), Vercel (hosting), Resend (transactional email), Google Gemini & Groq (AI generation: only the prompts you submit).
• Legal Requirements: If required by law, court order, or to protect the rights, property, or safety of our users or the public.
• Business Transfers: In the event of a merger or acquisition, your data may be transferred with prior notice.
• With Your Consent: Any other sharing requires your explicit, informed consent.

We retain your data for as long as your account is active or as necessary to provide the Service. Upon account deletion, your account is deactivated immediately and:

• Your personal data (profile details, connected social accounts and their access tokens, and any photo or audio message you personally uploaded or sent) is permanently erased within 30 days
• AI-generated visuals and videos (Studio and automated workflows) are retained as platform deliverables, except any generated visual that incorporates a personal reference photo you uploaded, which is erased along with the rest of your personal data
• The text of your VIBE conversations is retained (with any attached media removed)
• Billing records are retained for 7 years to comply with accounting regulations
• Anonymized aggregated statistics may be retained indefinitely

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) and at rest (AES-256) for all sensitive data
• OAuth token encryption with rotating keys
• Role-based access controls and least-privilege principles
• Regular security audits and dependency scanning
• Two-factor authentication available for all accounts

Depending on your location, you may have the following rights under GDPR, CCPA, or applicable laws:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ('right to be forgotten')
• Right to Portability: Receive your data in a structured, machine-readable format
• Right to Restriction: Limit how we process your data in certain circumstances
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: At any time, without affecting prior processing

We use essential cookies for authentication, session management, and security. We use analytics cookies (anonymized) to understand feature usage. We do not use advertising trackers or third-party behavioral tracking cookies.

• Essential cookies: Required for the Service to function; cannot be disabled
• Analytics cookies: Help us understand how the platform is used; can be disabled

The Service is not directed to children under 16. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, contact us immediately and we will delete it.

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice in the platform at least 14 days before taking effect. Continued use of the Service after changes constitutes acceptance.

For privacy-related questions, data requests, or to report a concern, contact the Africore Lab privacy team:

• Email: support@gliiz.com
• Response time: within 30 days for standard requests, 72 hours for urgent security matters