Privacy Policy

Intellicue Affair ("the Service", "we", "us", or "our") is a product of the Intellicue brand, owned and operated by Xoft Technologies Pvt Ltd, a company incorporated in India. This Privacy Policy explains how we collect, use, share, and protect information when you use our creator workspace, including our website, dashboard, and related services (the "Service"). By using the Service, you agree to the practices described in this policy.

1. Information we collect

We collect information you provide to us and information generated when you use the Service, including:

• Account and authentication data: your email address and authentication credentials, managed through Supabase Auth.
• Connected platform data: identifiers and content from social platforms you choose to connect, such as Instagram/Meta and YouTube/Google (described in detail below).
• Contacts and leads: contact records and lead information captured through your automations and orders.
• Payment and billing data: order and subscription records. Payments are processed by Razorpay; we do not store your card details.
• Scheduling data: booking and appointment details when you use scheduling powered by Cal.com.
• Usage and technical data: basic logs and technical information needed to operate, secure, and improve the Service.

2. How we use information

We use the information we collect to provide and operate the Service, run the automations you configure, process payments and payouts, manage your contacts and orders, communicate with you (including transactional emails sent via ZeptoMail), maintain security, and comply with legal obligations.

3. YouTube API Services

Intellicue Affair uses YouTube API Services. By connecting a YouTube channel, you agree to be bound by the YouTube Terms of Service. Intellicue Affair's use of information received from YouTube API Services adheres to the Google Privacy Policy.

What YouTube data we access and why

• Channel identity (channel id, handle, and title) — to identify the connected account and show you which channel is linked.
• Comment threads on your own videos — to detect new comments so your keyword-triggered automations can respond.
• Posting plain-text replies to those comments on your behalf — to publish the automated replies you configure.

These features use the youtube.readonly and youtube.force-ssl scopes. We store OAuth tokens encrypted at rest and server-side only; they are never exposed to the browser. We store minimal channel identifiers, and we do not store raw comment content beyond what is needed to avoid sending duplicate replies.

How to revoke access

You can revoke Intellicue Affair's access to your Google/YouTube data at any time through your Google security settings, and by disconnecting the channel in the Intellicue Affair dashboard.

4. Instagram / Meta data

When you connect an Instagram account, we access the connected account and the messages, comments, and contacts needed to run the Instagram automations you configure (such as auto-DM, comment replies, story replies, lead forms, and product cards). We use this data solely to operate those automations on your behalf.

5. Third-party service providers

We rely on trusted third parties to provide the Service. Their handling of your data is governed by their own terms and privacy policies:

• Google / YouTube — YouTube channel connection and automations.
• Meta / Instagram — Instagram account connection and automations.
• Razorpay — payment and payout processing.
• Cal.com — scheduling and bookings.
• Supabase — authentication and data storage.
• ZeptoMail — transactional email delivery.

6. Data retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we delete or anonymize it. As noted above, we do not retain raw YouTube comment content beyond what is necessary to prevent duplicate replies.

7. Data security

We use reasonable technical and organizational measures to protect your information. OAuth tokens for connected platforms are encrypted at rest and kept server-side only, and are never exposed to the browser. No method of transmission or storage is completely secure, but we work to protect your data against unauthorized access, alteration, and disclosure.

8. Your rights and data deletion

You may access, correct, or request deletion of your personal information. To request deletion of your data or to exercise any of your rights, email us at support@intellicue.ai. You can also disconnect any connected platform at any time, which stops further data access for that platform.

9. Children

The Service is not directed to children. It is intended for adults, and it is not intended for anyone under the age of 18 (and in no case anyone under 13). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

10. Governing law

This Privacy Policy and any dispute relating to it are governed by the laws of India, without regard to conflict-of-laws principles.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at support@intellicue.ai.