Privacy Policy
Last updated: October 2026
1. Who we are
TokCloner ("we", "us", "the Service") is operated by Ex Nihilo Development (Emri tregtar), Lagja Nr. 13, Plazh, Apartment Nr. 6, Durrës, Albania (Vendi i ushtrimit të aktivitetit). For privacy questions or to exercise your rights, contact [email protected].
2. Data we collect
- Account data: email address, password hash (handled by our auth provider), and account identifiers.
- Business profile: the information you enter — business name, description, audience, brand voice, product and industry.
- Content you provide: social post URLs you submit, media you upload to your library, captions and instructions, and the images and text generated for you.
- Derived content: extracted slides, text analysis, visual descriptions, adapted captions, prompts, rendered images and related metadata generated by the pipeline.
- API keys and usage: hashed API keys, tool calls, credit ledger entries, clone records, IP addresses and log data needed to run and secure the Service.
- Payment data: handled by Polar as merchant of record. We receive subscription status, plan, customer identifiers and limited billing metadata — we never receive full card numbers.
3. How we use data
We use data to provide the Service (including running the AI pipeline on the content you submit), process payments, enforce plans and credits, prevent abuse and fraud, secure and debug the Service, provide support, comply with law, and improve and develop our products. We may create aggregated or de-identified data and use it for analytics, benchmarking and product development without restriction.
4. Your content and the license you grant us
You keep ownership of content you upload. To operate the Service you grant us a worldwide, non-exclusive, royalty-free, transferable, sublicensable license to host, store, reproduce, modify, adapt, translate, process, display, distribute and otherwise use your content and the content generated for you — including by transmitting it to the third-party AI and infrastructure providers described below — for the purposes of providing, operating, securing, improving and promoting the Service. This license survives termination of your account to the extent necessary for backups, legal compliance, dispute resolution and records of transactions. You confirm you have all rights necessary to grant this license.
5. Public posts and third-party content
The Service processes publicly available posts from social platforms. We do not control that content and process it at your direction. You are responsible for ensuring you have the right to use any post you submit and any content you upload.
6. AI processing and third-party services
Running the Service requires sending content to service providers that act on our behalf, including: cloud hosting and storage (Cloudflare), database and authentication (Supabase), AI vision and reasoning (OpenAI), image generation (fal.ai and its model providers), social post extraction (ScrapeCreators), and payments (Polar). Their processing is governed by their own terms and privacy policies. We may add or change providers as the Service evolves.
7. Who we share data with
We share data with: (a) the service providers listed above; (b) professional advisers, auditors and insurers; (c) authorities, courts or third parties where required by law or necessary to establish, exercise or defend legal claims; (d) a buyer or successor in connection with a merger, acquisition, financing, reorganization or sale of assets; and (e) parties you direct us to share with. We do not sell your personal information for money.
8. International transfers
We and our providers may process data in countries other than yours, including the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
9. Retention
We keep data while your account is active and for as long as needed for the purposes above, including backups, legal compliance, accounting and dispute resolution. Deleted content may persist in backups for a limited period and in our records where retention is required. Aggregated and de-identified data may be kept indefinitely.
10. Security
We use encryption in transit, hashed credentials, access controls and other measures appropriate to the Service. No method of transmission or storage is completely secure; you use the Service at your own risk.
11. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal data, and to data portability. Contact [email protected] to exercise them. We will respond within the time required by applicable law. You may also lodge a complaint with your local supervisory authority. These rights cannot be waived by contract, and nothing in our Terms limits them.
12. Cookies and analytics
We use essential cookies for authentication and may use privacy-respecting analytics to understand product usage. You can control cookies in your browser; blocking essential cookies may prevent the Service from working.
13. Children
The Service is for users 18 and older. We do not knowingly collect data from children. Contact us if you believe a child has provided data and we will delete it.
14. Changes
We may update this policy. Material changes will be announced in the app or by email. Continued use after the effective date constitutes acceptance.