Privacy Policy

1.1 Account & Identity Information

When you sign up we collect your name, email address, and profile photo via Google OAuth (managed by Supabase Auth). This information is used to create and maintain your account.

1.2 Connected Social Platform Credentials

To power AfterGlow’s core features you may optionally connect third-party accounts. When you do, we store OAuth access tokens and refresh tokens for:

• YouTube — for reading channel analytics, comment management, and video uploads
• LinkedIn — for reading organisation page content, comments, and publishing posts
• Instagram — for reading media, comments, and publishing content via the Instagram Graph API
• Canva — for accessing and exporting designs you choose to connect

These tokens are stored securely in our database and are used exclusively to perform actions you explicitly initiate. We do not access your connected accounts beyond what is required to fulfil your requests.

1.3 Usage & Analytics Data

We collect information about how you interact with AfterGlow, including pages visited, features used, actions taken (e.g. content generated, posts scheduled), and error logs. This data is used to improve reliability and user experience.

1.4 Payment Information

Subscription payments are processed by Razorpay. We do not store your card number, CVV, or full payment credentials. We receive only a transaction ID and subscription status from Razorpay. Razorpay’s privacy practices are governed by their own policy.

1.5 AI-Generated Content

Content you generate through AfterGlow (scripts, captions, images, video prompts) may be temporarily processed by our AI providers. We do not permanently retain generated content on our AI providers’ infrastructure beyond what is required to return the result.

1.6 Device & Technical Data

We may collect IP address, browser type, operating system, and device identifiers for security, fraud prevention, and service optimisation purposes.

We use the information we collect to:

• Create and manage your AfterGlow account
• Provide, operate, and improve our platform and features
• Fetch content from your connected social platforms and display it within AfterGlow
• Publish, schedule, and manage content on your behalf when you instruct us to
• Generate AI-powered content including scripts, images, and video outlines
• Process payments and manage your subscription and credit balance
• Send transactional emails (account confirmations, billing receipts)
• Detect, investigate, and prevent fraudulent or unauthorised activity
• Comply with applicable legal obligations

We do not use your data for advertising purposes and we do not sell, rent, or trade your personal information to third parties.

To deliver AfterGlow’s functionality we share data with the following categories of third-party providers under strict data-processing agreements or API terms:

Infrastructure & Database

• Supabase — secure database storage for account data and social tokens
• Vercel — frontend hosting and edge delivery
• Render — backend API hosting

AI & Content Generation

• Groq (LLaMA models) — text generation for scripts, captions, and replies
• Replicate (Flux, Wan) — image and video generation
• Google Imagen 3 — image generation
• Minimax — video generation
• Anthropic (Claude) — advanced AI analysis and content workflows

Authentication

• Supabase Auth — user authentication and session management via Google OAuth

Payments

• Razorpay — payment processing for subscriptions

We may also disclose your information if required by law, court order, or government authority, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of Infernite, our users, or the public.

We retain your personal data for as long as your account is active or as necessary to provide our services. Specifically:

• Account data is retained until you delete your account
• Social tokens are retained until you disconnect the platform or delete your account
• Payment records are retained for 7 years in compliance with applicable financial regulations
• Generated content & queue history is retained until you delete it or close your account
• Usage logs are retained for up to 90 days for security and debugging purposes

Upon account deletion we will purge your personal data from our primary systems within 30 days, excluding data we are legally required to retain.

We implement industry-standard technical and organisational measures to protect your data, including:

• Encryption of data in transit via TLS 1.2+
• Encryption of sensitive credentials (OAuth tokens) at rest
• Row-level security (RLS) policies on our database
• Access controls limiting employee access to production data
• Regular security reviews and dependency audits

No method of transmission or storage is 100% secure. In the event of a data breach we will notify affected users and applicable authorities in accordance with our legal obligations.

Depending on your jurisdiction you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your personal data (“right to be forgotten”)
• Portability — request your data in a machine-readable format
• Restriction — request that we limit processing of your data
• Objection — object to processing based on legitimate interests
• Withdraw consent — revoke previously granted permissions at any time

To exercise any of these rights, contact us at cbo@infernite.co.in. We will respond within 30 days.

AfterGlow uses cookies and similar technologies to maintain your session, remember preferences, and measure platform performance. We use:

• Strictly necessary cookies — required for authentication and session management (Clerk)
• Functional cookies — to remember your settings and preferences

We do not use third-party advertising or tracking cookies. You can control cookie behaviour through your browser settings, though disabling necessary cookies will impair platform functionality.

AfterGlow is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a minor has provided us with personal information, please contact us immediately at cbo@infernite.co.in and we will take steps to delete such data.

Our infrastructure and third-party service providers may process your data in jurisdictions outside your country of residence, including the United States and the European Union. When we transfer data internationally we do so in accordance with applicable data protection laws and rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) where required.

Our platform may contain links to third-party websites or services. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party services you visit. We have no control over, and assume no responsibility for, their content or privacy practices.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes we will update the effective date at the top of this page and, where appropriate, notify you via email or an in-app notice. Your continued use of AfterGlow after the revised policy becomes effective constitutes your acceptance of the changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: