1. Information We Collect

We collect information to provide and improve our marketing automation services:

1.1 Account Information

• Name: Used to personalize your experience within the platform.
• Email Address: For account creation, login, authentication, and platform communications.
• Company/Business Information: Optional information about your business to tailor marketing recommendations.

1.2 Campaign and Marketing Data

• Reddit Campaign Data: Subreddit selections, target keywords, competitor names, draft messages, and campaign settings.
• Social Media Content: Scheduled posts, draft content, posting schedules, and platform-specific settings for X, Reddit, Instagram, and YouTube.
• Connected Accounts: OAuth tokens and connection information for your social media accounts (stored securely and encrypted).
• AI Writing Style Data: Sample text you provide to train our AI to match your writing style and tone preferences.

1.3 Invite Tracking Data

• Visitor Analytics: When someone clicks your tracked invite links, we collect IP addresses, approximate geographic location (city/country), device type, browser information, operating system, and referrer information.
• Session Data: Page views, time spent on pages, and interaction patterns with your invite links.
• Conversion Tracking: Information about whether visitors complete desired actions after clicking your invite links.

1.4 Usage Data

• Platform Usage: Features you use, campaigns you create, posts you schedule, and settings you configure.
• Device Information: Device type, operating system, browser type, and IP address when accessing our platform.
• Performance Data: Campaign performance metrics, engagement rates, and conversion statistics.

1.5 AI Interaction Data

When you interact with our AI-powered features (content generation, writing style adaptation, keyword suggestions), we collect and process your inputs to provide personalized responses and improve our AI models. This includes prompts for content generation, feedback on AI-generated content, and writing samples for style training.

1.6 Payment Information

Payment processing is handled by third-party payment processors (Razorpay). We store subscription status, plan information, and transaction history, but we do not store your complete credit card numbers or sensitive payment credentials.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide Marketing Services: Execute Reddit campaigns, schedule social media posts, track invite links, and provide analytics dashboards.
• To Personalize AI Features: Train AI models to match your writing style, generate relevant content suggestions, and provide targeted keyword recommendations.
• To Enable Social Media Integration: Post content to your connected social media accounts on your behalf according to your scheduled plans.
• To Track Campaign Performance: Collect and analyze data from invite links, measure engagement, and provide conversion tracking.
• To Improve Our Services: Analyze platform usage patterns, identify bugs, and develop new features based on user behavior (always in aggregated, anonymized form).
• To Communicate with You: Send account notifications, platform updates, marketing tips, and customer support responses.
• To Process Payments: Manage subscriptions, process billing, and handle payment-related communications.
• To Ensure Security: Detect and prevent fraud, unauthorized access, and abuse of our platform.
• To Comply with Legal Obligations: Meet regulatory requirements and respond to lawful requests from authorities.

3. Information Sharing and Disclosure

We share your information only in the following limited circumstances:

• Social Media Platforms: We share content with X, Reddit, Instagram, and YouTube when you authorize us to post on your behalf.
• Service Providers: We work with trusted third-party service providers (cloud hosting, payment processing, email delivery) who process data on our behalf under strict confidentiality agreements.
• AI Services: We use OpenAI's API for AI-powered features. Your content is processed according to OpenAI's data usage policies.
• Analytics Partners: We may share aggregated, anonymized data with analytics providers to understand platform usage trends.
• Legal Requirements: We may disclose information when required by law, court order, or to protect our rights and safety.

We do not sell your personal information to third parties. Your marketing data, campaigns, and customer lists remain private and are never shared with competitors or unrelated third parties.

4. Your Rights and Choices

4.1 Access and Update Information

You can access and update your account information, campaign settings, and connected social media accounts directly within the platform dashboard.

4.2 Data Portability

You can export your campaign data, scheduled posts, and analytics reports at any time from your dashboard. Contact us for a complete data export in machine-readable format.

4.3 Account Deletion

You can delete your account at any time from your account settings. Upon deletion, we will remove your personal information, campaign data, and scheduled posts. Some information may be retained for legal compliance or legitimate business purposes (e.g., billing records, abuse prevention).

4.4 Disconnect Social Media Accounts

You can disconnect any linked social media account from your OneUp Today settings, which will revoke our access to post on your behalf.

4.5 Opt-Out of Communications

You can unsubscribe from marketing emails using the unsubscribe link in any email. You will still receive essential account-related communications (billing, security alerts).

4.6 Do Not Track

Our invite tracking system respects user privacy. Visitors clicking your tracked links can see our privacy notice regarding data collection.

5. Data Security

We implement industry-standard security measures to protect your information:

• All data transmission is encrypted using SSL/TLS.
• Social media OAuth tokens are stored encrypted at rest.
• Access to user data is restricted to authorized personnel only.
• We conduct regular security audits and vulnerability assessments.
• Password requirements and multi-factor authentication options for account security.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Third-Party Services and Links

Our platform integrates with third-party services (Reddit, X, Instagram, YouTube, OpenAI, Razorpay) which have their own privacy policies. We are not responsible for the privacy practices of these third parties. When you connect your social media accounts or use AI features, you are also subject to those platforms' terms and privacy policies.

Invite links you create may direct visitors to external websites. We are not responsible for the privacy practices of those destination websites.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. After account deletion, we retain certain data as required by law (typically 7 years for financial records) and for fraud prevention. Analytics data and AI training data may be retained in aggregated, anonymized form indefinitely.

8. International Data Transfers

Our services are hosted on AWS infrastructure in the Asia Pacific (Mumbai) region. If you access our services from outside India, your information may be transferred to and processed in India. We ensure appropriate safeguards are in place for international data transfers.

9. Children's Privacy

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will delete it promptly.

10. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at hello@oneup.today.

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, restriction of processing, data portability, and objection. You also have the right to lodge a complaint with a supervisory authority. Contact us to exercise these rights.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email or through a prominent notice on our platform. Your continued use of our services after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: