Privacy Policy

We collect the following categories of information:

• Account information — name, email address, and authentication details when you sign up or sign in.
• Connected platform data — access tokens, profile details, posts, messages, comments, and analytics from the social accounts you connect (X, LinkedIn, Facebook, Instagram, TikTok, YouTube, Threads, Pinterest).
• Content you create — prompts, drafts, generated posts, images, and video, plus your Brand Brain settings.
• Billing information — plan and transaction metadata. Card and bank details are handled directly by our payment processors and are never stored on our servers.
• Usage & device data — log data, IP address, browser type, and interactions used to operate and improve the Service.

• Provide, operate, and maintain the Service.
• Generate, schedule, and publish content to your connected platforms on your behalf.
• Produce analytics and AI-driven recommendations.
• Process payments and manage subscriptions.
• Communicate with you about your account and support requests.
• Detect, prevent, and address security or technical issues.

We use strictly necessary cookies to keep you signed in via an encrypted session cookie and to secure the Service. We do not sell your data and do not use cookies for third-party advertising. You can clear cookies at any time through your browser, though this will sign you out.

We share data with trusted service providers only as needed to run the Service:

• Cloudflare — hosting, edge compute, storage, and security.
• OpenAI — AI generation of text, image, and video content.
• Stripe — international card payments and subscription billing.
• Billplz — Malaysian FPX online-banking payments.
• Brevo — transactional and account-related email.
• Connected social platforms — X, LinkedIn, Facebook, Instagram, TikTok, YouTube, Threads, and Pinterest, to publish and retrieve content and analytics you authorize.

Depending on your location, you may have the right to access, correct, export, or delete your personal data, object to or restrict certain processing, and withdraw consent. You can disconnect any social account at any time from your settings. To exercise these rights, contact us at support@itsthatapp.com.

We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time; we will delete or anonymize it within a reasonable period, except where retention is required for legal, accounting, or security purposes. Disconnecting a platform revokes our stored access tokens for that platform.

We protect your data with encryption in transit, encrypted sessions, least-privilege access to connected accounts, and infrastructure hosted on Cloudflare’s global network. No method of transmission or storage is completely secure, but we work continuously to safeguard your information.

itsThatApp is operated from Malaysia and serves customers internationally. By using the Service, you understand that your information may be processed in Malaysia and other countries where our subprocessors operate, which may have different data-protection laws than your own.

The Service is not directed to individuals under 16, and we do not knowingly collect their personal data. If you believe a child has provided us information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notifying you.

Questions about this policy? Email support@itsthatapp.com.