Legal

Privacy Policy

Effective date: July 14, 2026

Podium AI ("Podium," "we," "us," or "our") is a product of GlassVault LLC, a Delaware limited liability company. This Privacy Policy explains what information we collect when you use our Service, how we use it, and how you can control or delete it.

1. Information We Collect

Account information. Your email address and a hashed (never plaintext) password when you sign up with email/password.

Connected platform data. When you connect an X or Reddit account via OAuth, we store:

  • Your OAuth access tokens, encrypted at rest (AES-256-GCM).
  • Basic profile information from that account — username/handle and, for X, your profile avatar image.
  • A cache of recent posts from your connected account and account timeline, used to build your agent's timeline view in the app and, where relevant, to seed voice analysis.

Content you provide. Your business description, sample posts, pasted reference material, and any plain-English guidance you give your agent to refine its voice or drafts.

Session and device data. We keep records of your login sessions (for authentication) and, separately, a lightweight, best-effort record of site visits — IP address, parsed browser/OS/device type, screen size, timezone, language, and coarse geolocation derived from your IP address — to understand traffic and secure the Service. This applies to visits to our public pages even before you sign in.

Billing data. Subscription plan, billing status, and your credit balance/ledger. Payment card details are handled directly by Stripe — we never see or store your raw card number.

Communications. If you use SMS or email approval, the content of the approval messages sent to and received from you is processed to run that conversational approval flow.

2. How We Use Information

  • To operate your agent: drafting, ranking, safety-checking, and (per your configuration) publishing content on your behalf.
  • To build and refine the voice, topic, and audience profile that makes your agent's drafts sound like you.
  • To send you approval requests and other agent-related notifications (SMS/email).
  • To measure engagement on posts your agent has published, shown back to you in your own account only.
  • To secure the Service, prevent abuse, and improve reliability.
  • To bill you and manage your subscription/credits.

3. What We Don't Do

  • We do not sell your personal data.
  • We do not share your content, connected-account data, or performance data with other Podium customers. Each account's data is isolated from every other account.
  • Where we surface information about how your own agent works, we show you a summary of its configuration rather than the full internal prompts and scoring details — this protects the integrity of the product for every customer, including you, and is not a withholding of anything about your own posts, drafts, or account activity.

4. Third-Party Service Providers

We share the minimum data necessary with the following categories of providers to operate the Service:

  • AI model providers (e.g. OpenAI, Anthropic/Bedrock) — process your business description, source material, and draft context to generate voice profiles and drafts.
  • X and Reddit — via their official OAuth and API surfaces, to read your connected account and publish on your behalf per your configuration.
  • Stripe — payment processing and subscription billing.
  • Twilio — SMS delivery for approval notifications.
  • SendGrid — email delivery for approval notifications and account communications.
  • IP geolocation lookup — a best-effort, keyless lookup service used only to derive an approximate (city-level) location from an IP address for site analytics; this lookup never receives your name, email, or account identity.

Each provider is contractually limited to using this data to provide their service to us, not for their own independent purposes.

5. Data Retention

We retain your account data, connected-platform credentials, cached posts, and agent history for as long as your account remains active. Site-visit/session tracking records are retained for a limited period for security and analytics purposes and are not linked to your identity unless you were logged in at the time. When you delete an agent, its context documents, sources, and stored credentials for that agent are removed. When you delete your account (see below), we delete or anonymize the data described in this policy, except where we're required to retain certain records (e.g., billing records) to comply with law.

6. Data Security

OAuth tokens and other credentials are encrypted at rest. All traffic to and from Podium is encrypted in transit (TLS). Access to customer data within Podium is limited to what's needed to operate and support the Service.

7. Your Rights and Data Deletion

You can request a full deletion of your Podium account and all associated data — connected-platform credentials, cached posts, context documents, drafts, and activity history — at any time by emailing hello@see.rest from your account's email address. We will confirm your identity, complete the deletion, and let you know once it's done, except where limited retention is required by law (for example, billing records we're obligated to keep). You can also disconnect a connected platform account or delete an individual agent yourself at any time from within the app, without needing to delete your whole account.

8. Children's Privacy

Podium is not directed at, and we do not knowingly collect information from, anyone under 13 — consistent with the minimum age required by the platforms Podium connects to.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will make reasonable efforts to notify you of material changes via the app or by email. Continued use of the Service after a change takes effect constitutes acceptance of the revised policy.

10. Contact

Podium AI is operated by GlassVault LLC, a Delaware company. Questions about this policy, or a data deletion request, can be sent to hello@see.rest.