Privacy Policy

1. Who We Are

UniqueMe is a software service that helps small businesses create content suggestions for their social media. You review, edit, and schedule the posts you like, and they are published to your connected accounts only after you schedule them. Nothing is published without your action. The Service is operated by Bonbonica LLC. If you have questions about this policy or your data, contact us at info@uniqueme.app.

2. Information We Collect

2.1 Information You Provide

• Account data: your email address and password (passwords are stored in encrypted/hashed form, never in readable text).
• Business profile data: your business name, website, type of activity, tone/style preferences, and the platforms you select.
• Content you enter: themes, notes, and details you enter so that the Service can generate posts for you.
• Website analysis: if you enter your business’s web address, we use a third-party service (Firecrawl) to read the publicly available content of that site and artificial intelligence to summarize it, in order to personalize post suggestions. We store that summary; we do not store a full copy of your website.
• Images: images you upload yourself, as well as images the Service generates using artificial intelligence, that are associated with your posts.
• Payment data: processed by our payment processor, Polar. We do not store your full card details on our servers (see Section 4).

2.2 Information from Connected Social Accounts

When you connect a social media account (such as Facebook, Instagram, LinkedIn, Google Business Profile, or other social networks we may add later and notify you about), through each platform’s official authentication you authorize us to access only what is needed to publish content on your behalf. This may include identifiers for your account or page, basic profile data, and permission to create posts. We do not collect your social media password — access is granted through each platform’s secure authorization (OAuth).

We store the access tokens issued to us by each platform so that we can publish on your behalf. We keep these tokens only while the account is connected. When you disconnect a social account within the Service or revoke access through the platform’s own settings, we delete the corresponding tokens and stop accessing that account.

2.3 Information Collected Automatically

• Usage data: how you use the Service, which features you use, and what actions you take.
• Device and log data: IP address, browser type, device information, and timestamps.
• Cookies and similar technologies: used to keep you signed in and to operate the Service.

3. How We Use Your Information

• To provide, operate, and maintain the Service.
• To generate social media content based on your inputs.
• To schedule and publish posts to the accounts you connect, at your direction.
• To process payments and manage your subscription.
• To communicate with you about your account, updates, and support.
• To improve and develop the Service.
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with legal obligations.

4. How We Share Your Information

We do not sell your personal data. We share information only as described below:

Service providers: companies that help us operate the Service, such as hosting (Vercel), file and image storage (Vercel Blob), our database provider, the AI provider (Anthropic) used to generate post content, the AI provider for image generation (currently OpenAI; as a backup provider we may use Google Gemini / NanoBanana if the primary provider is unavailable), and a website analysis service (Firecrawl) that reads the publicly available content of the web address you enter. These providers process data on our behalf, under appropriate agreements.

Payment processor: Polar processes your payments. Your payment data is processed by Polar according to its privacy policy and security standards.

Social media platforms: when you direct us to publish, we send your content to the platforms you have connected (Facebook, Instagram, LinkedIn, Google Business Profile).

Legal and security reasons: when required by law, regulation, legal process, or to protect the rights, property, or safety of users or the public.

Business transfers: in connection with a merger, acquisition, or sale of assets, consistent with this policy.

5. AI-Generated Content

The Service uses third-party artificial intelligence to generate content from the inputs you provide: for post text we currently use Anthropic, and for images we currently use OpenAI (with the option to use Google Gemini / NanoBanana as a backup provider if the primary is unavailable). Your inputs are sent to the AI provider solely to create your content. We do not use your private business content to train AI models.

5.1 Google User Data

When you connect your Google Business Profile, we access data through Google APIs only to publish the content you have created and scheduled, and to show you the status of those posts within the Service. UniqueMe’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data solely to provide and improve the features you have requested. We do not sell Google user data, we do not use it for advertising or for any purpose unrelated to the Service, and we do not use it to train artificial intelligence models. We do not allow humans to read Google user data, except with your explicit consent, for security purposes such as investigating abuse, to comply with applicable law, or where the data has been aggregated and anonymized. We retain Google user data only for as long as your Google Business Profile is connected and we need it to provide the Service. You may disconnect your Google Business Profile at any time within the Service, which revokes our access and deletes the associated access tokens. You may also revoke access directly at myaccount.google.com/permissions, or request deletion by emailing info@uniqueme.app.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Deleted posts are kept in a recoverable state for up to 30 days before permanent deletion. If you would like to close your account, please email us at info@uniqueme.app and we shall close your account within 30 days. When your account is closed, we will delete or anonymize your personal data within a reasonable time, except where we must retain it for legal, accounting, or security obligations. Even after your account is closed and/or we delete your data, we may keep a limited minimized record (such as a one-way hashed identifier of a connected social page or email) to prevent repeated misuse of free trials and other abuse. To the extent we may keep a limited minimized record, this record does not contain personal data and is only used for fraud or abuse prevention, legal, accounting, or security obligations. Anonymized operational logs with the account identifier removed may be retained after deletion for platform compliance and abuse investigation. Encrypted backups may retain deleted data for up to 90 days (disaster recovery only) before being purged.

Images: we use image storage (Vercel Blob) as temporary working storage. Images that have been successfully published to your connected accounts are deleted from our working storage after publishing; after deletion, public links may briefly remain in browser cache before fully expiring. Website analysis: the service we use to read websites (Firecrawl) may retain a temporary copy of the read content for up to 24 hours in its cache, outside our direct control, for technical efficiency.

7. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and the right to object to or restrict certain processing. To exercise any of these rights, contact us at info@uniqueme.app. You may also disconnect any social account within the Service at any time, which revokes our access to that account.

7.1 Data Deletion Requests

You may request deletion of your personal data at any time by emailing info@uniqueme.app with the subject “Data Deletion Request.” We will verify your identity and process the request in accordance with applicable law, generally within 30 days. You may also, at any time, disconnect any connected social account within the Service, which revokes our access and triggers deletion of the associated access tokens.

Facebook and Instagram (Meta) users: in accordance with Meta platform requirements, you can request deletion of the data we obtained through your connected Meta page at uniqueme.app/data-deletion. Upon receiving a request, we delete the data associated with that Meta page and, where applicable, confirm deletion through Meta’s data deletion callback mechanism.

LinkedIn and Google Business Profile users: we delete data obtained through these platforms upon your request, and we delete access tokens immediately upon disconnection. In accordance with these platforms’ policies, we retain data obtained through their APIs only as long as needed to provide the Service and no longer than their policies permit.

8. Children’s Privacy

The Service is not intended for individuals under 18 years of age (or the age of majority in their state of residence). We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.

9. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and encrypted (hashed) password storage. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last modified” date and, where appropriate, notify you. Your continued use of the Service after the changes take effect means you accept the updated policy.

11. Contact

If you have questions or requests regarding this Privacy Policy or your personal data, contact us: