1. Who We Are
Podluxe Marketing ("Podluxe", "we", "us") is a service operated by Steven Lawrence LLC, a U.S. limited liability company. We respect your privacy and are transparent about what data we collect and why.
This policy applies to podluxe.org and the Podluxe app.
2. What We Collect
Account information:
- Name and email address
- Password (stored as a salted hash, never in plaintext)
- Billing information (handled by Stripe — we never see your full card number)
Pod data:
- Business name, brand voice settings (tone, audience, keywords)
- Content you generate, schedule, or save as drafts
- Aggregated analytics from connected social platforms
Connected platform data:
- OAuth access and refresh tokens (encrypted at rest)
- Connected account username and basic profile info
- Public engagement metrics on your own posts (likes, shares, impressions)
Usage data:
- Pages visited, features used, errors encountered
- IP address and browser type for security and analytics
3. How We Use Data
- Operate, maintain, and improve Podluxe
- Authenticate you and protect your account
- Process payments via Stripe
- Send transactional emails (account, billing, important changes)
- Publish content to connected platforms on your explicit instruction
- Generate AI assistance using your brand voice and prompts
- Comply with legal obligations
4. Third-Party Services We Use
Podluxe works with these processors to deliver the service:
- Anthropic — AI content generation. Your prompts and brand voice are sent to Anthropic's Claude API.
- Stripe — Payment processing. Your card details go directly to Stripe.
- Namecheap — Hosting and email delivery.
- Meta, X, LinkedIn, TikTok — Social platforms you connect. We act on your behalf based on the permissions you grant.
Each of these has its own privacy policy. We recommend reviewing them.
5. What We Don't Do
- We don't sell your data. Ever.
- We don't share your data with advertisers.
- We don't scrape, resell, or redistribute data from connected social platforms.
- We don't read or store your direct messages on any connected platform.
- We don't train AI models on your content without explicit consent.
6. Data Security
- All connections to Podluxe use HTTPS encryption
- Passwords are stored as bcrypt salted hashes
- OAuth tokens for connected platforms are encrypted with AES-256-CBC at rest
- Database access is restricted and audited
- We use industry-standard security practices, but no system is 100% secure
7. Your Rights
You have the right to:
- Access — See what data we have about you
- Correct — Update inaccurate information
- Delete — Remove your account and associated data
- Export — Download your content and settings
- Disconnect — Revoke access to any connected platform at any time
To exercise these rights, email privacy@podluxe.org.
8. Data Retention
We keep your account data as long as your account is active. If you delete your account, we delete your data within 30 days. Some data may persist in encrypted backups for up to 90 days before being purged.
Anonymized aggregate analytics (no personal identifiers) may be retained longer to help us understand product usage trends.
9. International Users
Podluxe is operated from the United States. By using the service, you acknowledge that your data will be processed in the U.S.
10. Children's Privacy
Podluxe is not intended for users under 18. We don't knowingly collect data from minors. If you believe a minor has signed up, contact us immediately.
11. Changes to This Policy
We may update this policy over time. Material changes will be announced via email or in-app notice with at least 30 days' notice.
12. Contact
Privacy questions? Email privacy@podluxe.org.
Steven Lawrence LLC
Operator of Podluxe Marketing
podluxe.org