Privacy Policy

1. Who we are

Protegee is operated by Two Fingers LLC. Protegee ("Protegee," "we," "us," or "our") provides an AI service that learns a brand and then creates and publishes social media content to the accounts a user connects, on a schedule the user controls. This Privacy Policy explains what information we collect when you use our website at protegee.studio and our related products and services (together, the "Service"), how we use it, and the choices you have.

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Scope of this policy

This policy covers information we handle as the controller of your account and brand data. It does not cover the practices of the third-party platforms you connect to Protegee (such as TikTok, Instagram, Facebook, X, and YouTube) or the AI providers that help generate content. Those services are governed by their own privacy policies, and we encourage you to review them.

3. Information we collect

We collect the following categories of information:

Information you provide

• Account information. Your name, email address, and the credentials or sign-in identifiers you use to create and access your account.
• Brand profile. Information you give us to train the Service on your brand, such as your brand name, description, tone and voice guidance, website, and logos.
• Catalog and media. Product information, images, videos, and other files you upload or that you authorize us to import from connected sources (for example, a product catalog synced from your store).
• Communications. Messages you send us for support, feedback, or other requests, including the contents of those messages.

Information we collect automatically

• Usage data. Log data about how you interact with the Service, including the actions you take, content you schedule and publish, and timestamps.
• Device and connection data. IP address, browser type, device identifiers, and similar technical information.
• Cookies and similar technologies. We use strictly necessary cookies to keep you signed in and remember your choices, and, only with your consent, analytics cookies to understand how our website is used. See Cookies and analytics.

Information from third parties

When you connect a social account or another integration, we receive information from that provider as described below.

4. Cookies and analytics

Cookies are small files a website stores in your browser. "Similar technologies" include browser storage such as localStorage. We use two kinds:

Strictly necessary

These make the site and the Service work and do not need your consent.

• protegee_consent (localStorage, protegee.studio). Remembers whether you accepted or rejected analytics cookies, so we do not ask on every page. Kept for 180 days, after which we ask again.
• Sign-in cookies (app.protegee.studio). Keep you signed in to your Protegee account and protect it against forgery. Set only when you sign in to the app and removed when you sign out or the session ends.

Analytics (only with your consent)

If you click "Accept" in the cookie banner, we load Google Analytics 4, provided by Google Ireland Limited and Google LLC, to count visits and see which pages are useful. If you click "Reject" or ignore the banner, Google Analytics does not load and sets no cookies.

• _ga (Google Analytics). Distinguishes visitors with a random ID. Expires after 2 years.
• _ga_<ID> (Google Analytics). Keeps the state of your current visit. Expires after 2 years.

We do not use advertising, retargeting, or cross-site tracking cookies, and Google signals and ad personalization are off. Google may process analytics data in the United States; Google LLC is certified under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. Our legal basis for analytics is your consent (Article 6(1)(a) GDPR), and you can withdraw it at any time.

Your choices

• Change or withdraw consent at any time from Cookie settings, also linked in the footer of every page. Withdrawing deletes our analytics cookies from your browser.
• Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a rejection of analytics cookies and do not show the banner.
• Browser settings. You can also block or delete cookies in your browser. Blocking strictly necessary cookies may stop you from signing in.

Our website fonts are hosted on our own servers, so loading a page does not send your IP address to Google Fonts or any other font provider.

5. Data from connected social accounts

The Service works by connecting to your social media and content accounts. When you authorize a connection, you are redirected to the provider to sign in and grant permission, and the provider returns information to us. Depending on the platform and the permissions you grant, this may include:

• Authorization tokens. Access and refresh tokens that let the Service act on your behalf within the scope you approved. We store these securely and use them only to operate the features you enable.
• Account and profile information. Basic identifiers such as your account ID, username or handle, display name, and profile details for the connected account.
• Content and publishing data. The ability to publish content you create in Protegee to your connected account, and, where you enable it, limited information about content and its performance so we can report results back to you.

We currently support connections to TikTok, Instagram and Facebook (Meta), X, and YouTube (Google), and we may add others over time. We request only the permissions needed for the features you use, and you can disconnect any account at any time (see Disconnecting accounts and deleting data).

6. How we use information

We use the information we collect to:

• Provide, operate, and maintain the Service, including learning your brand and creating content on your behalf;
• Schedule and publish content to the accounts you connect, when you direct us to;
• Report back to you on what was published and, where available, how it performed;
• Authenticate you, secure your account, and prevent fraud, abuse, and violations of our Terms;
• Respond to your requests and provide customer support;
• Improve and develop the Service, including troubleshooting and analyzing usage;
• Send you service-related communications, and, where permitted, product updates (you can opt out of non-essential messages); and
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information, and we do not use the data we receive from connected social accounts for advertising or to build profiles unrelated to providing the Service.

7. AI processing and content generation

Protegee creates images, video, and text using artificial-intelligence models, some of which are operated by third-party providers. To generate content for your brand, we send relevant inputs (such as your brand profile, prompts, and catalog or media you provide) to these providers so they can return generated results. Our current providers include Google (Gemini), OpenAI, Anthropic, fal.ai, Runway, and Replicate, and this list may change as we improve the Service.

These providers process the inputs we send them to produce outputs and act as our service providers for that purpose. We do not authorize them to use your content to train their models for their own purposes except as permitted by their terms, and we aim to work with providers whose terms are consistent with this policy. AI-generated output can be inaccurate; you remain responsible for reviewing content before it is published.

Using Protegee from an AI app

You can connect Protegee to an AI app such as ChatGPT, Claude, Gemini, Grok, or Cursor (see Connect Protegee to your AI app). When you do, you sign in to Protegee and approve the connection on a Protegee page; the AI app receives an access token, never your password. When you ask it to, the app can read and change your Protegee brand data (ideas, storyboards, library, and schedule) and start renders on your plan. It cannot approve your content or delete it, and the scheduling connector can only schedule content you have already approved in Protegee.

For each request the app makes, we receive the tool it called and the inputs it sent, and we log the call to operate, secure, and improve the Service. We do not receive your conversation history with the AI app or your account with its provider. Access tokens expire after one hour and refresh tokens after 30 days, and we store them only as one-way hashes. You can disconnect any app at any time in Protegee under Settings, Connect an AI app, which revokes its tokens immediately. Your use of the AI app itself is governed by its provider's terms and privacy policy.

8. How we share information

We share information only as described here:

• With connected platforms, at your direction. When you schedule or publish content, we transmit that content and the necessary instructions to the platform you selected (for example, TikTok or Instagram).
• With service providers and subprocessors. We rely on vendors to run the Service, including the AI providers listed above, cloud storage and content delivery (Cloudflare), application hosting (Railway), and email delivery. They may process information only to perform services for us and under obligations of confidentiality.
• For legal and safety reasons. We may disclose information if required by law, legal process, or government request, or to protect the rights, property, or safety of Protegee, our users, or others.
• In a business transfer. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

9. TikTok-specific disclosures

When you connect a TikTok account, you authorize Protegee to access certain TikTok data and to publish content to your account through TikTok's APIs. We access and use this data solely to provide the features you request, for example, confirming your account and publishing videos you create in Protegee.

• Protegee's access to, and use and transfer of, information received from TikTok APIs adheres to the TikTok Developer Terms of Service and the TikTok Privacy Policy, including any applicable limited-use requirements.
• We do not sell TikTok data, and we do not use it for advertising, ad targeting, or to build independent profiles.
• We store TikTok authorization tokens and basic account identifiers only for as long as your TikTok account is connected and we need them to run the Service.
• You can revoke Protegee's access at any time from your TikTok account settings, or by disconnecting TikTok inside Protegee. When access is revoked, we delete the associated tokens and stop accessing your TikTok data.

10. Google and YouTube disclosures

When you connect a YouTube channel, you authorize Protegee to access certain Google account data and to publish to your channel through the YouTube Data API. You are redirected to Google to sign in and approve the specific permissions ("scopes") the Service requests. We request only these YouTube scopes:

• https://www.googleapis.com/auth/youtube.upload. Used to publish videos you create in Protegee to your connected YouTube channel, on your behalf and at your direction.
• https://www.googleapis.com/auth/youtube.readonly. Used to read back your channel and video data, such as whether a video posted and basic performance metrics, so we can confirm publishing and show you analytics inside Protegee.

Protegee's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google and YouTube data only to provide and improve the features described above (publishing your content and reporting results back to you), and only within the scopes you approved.
• We do not sell Google or YouTube data, and we do not use it for advertising, ad targeting, or to build independent profiles unrelated to the Service.
• We do not transfer Google or YouTube data to others except as needed to provide or improve the Service, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
• We do not allow humans to read this data unless we have your consent for specific messages, it is necessary for security or to comply with applicable law, or the data has been aggregated and anonymized.
• We store Google authorization tokens and basic channel identifiers only for as long as your YouTube channel is connected and we need them to run the Service.
• You can revoke Protegee's access at any time from the Google account permissions page, or by disconnecting YouTube inside Protegee. When access is revoked, we delete the associated tokens and stop accessing your Google and YouTube data.

11. Data retention

We keep information for as long as your account is active and as needed to provide the Service. When you disconnect an integration, we delete the related authorization tokens. When you close your account or request deletion, we delete or de-identify your personal information within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Backups are purged on a rolling schedule.

12. How we protect information

We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit, access controls, and secure storage of authorization tokens. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you and the relevant authorities as required by law.

13. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, contact us at contact@protegee.studio. We will respond as required by applicable law and will not discriminate against you for exercising your rights.

If you are in the European Economic Area or the United Kingdom, our legal bases for processing are performing our contract with you, your consent (which you can withdraw), our legitimate interests in operating and improving the Service, and compliance with legal obligations. If you are a California resident, you have the rights described under the California Consumer Privacy Act, including the right to know, delete, and correct your information and to not be discriminated against for exercising those rights.

14. Disconnecting accounts and deleting data

You are in control of your connections and your data:

• Disconnect a platform at any time within Protegee, or by removing Protegee's access from that platform's own settings (for example, TikTok's "Manage app permissions"). We delete the related tokens when you do.
• Delete your account and data by emailing contact@protegee.studio from the address on your account, or using any in-product deletion option we provide. We will delete your personal information as described in Data retention.

15. Children's privacy

The Service is intended for users who are at least 18 years old and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

16. International users and transfers

We operate from the United States, and the information we collect may be processed in the United States and in other countries where our service providers operate. These countries may have data-protection laws different from those in your country. Where required, we use appropriate safeguards for international transfers.

17. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service or by email. Your continued use of the Service after an update means you accept the revised policy.

18. Contact us

If you have questions about this policy or how we handle your information, contact us at:

Protegee
Email: contact@protegee.studio