privacy policy

Antwork ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media management platform.

By using Antwork, you agree to the collection and use of information in accordance with this policy.

2.1 Personal Information

• ›Name and email address
• ›Profile information and preferences
• ›Payment and billing information (processed securely through Stripe)
• ›Account credentials and authentication data

2.2 Social Media Account Information

• ›Social media account credentials for LinkedIn, X (Twitter), YouTube, Facebook, Instagram, Pinterest, Threads, and TikTok
• ›Access tokens for social media platforms (encrypted and securely stored)
• ›Social media profile information (name, handle, profile images)
• ›Content you create, schedule, or publish through our platform

2.3 Brand Profile and Knowledge Base Data

• ›Brand identity information (brand name, tagline, tone of voice)
• ›Target audience demographics and psychographics
• ›Content guidelines and brand preferences
• ›Branding assets (logos, colors, fonts, typography)
• ›Knowledge base content (products, case studies, metrics, recent news, content assets)
• ›Campaign information and settings

2.4 AI-Generated Content and Usage Data

• ›AI-generated content created using our AI features
• ›AI credit usage and token consumption data
• ›Content generation requests and prompts
• ›Campaign planning data and post scheduling information

2.5 Usage Data

• ›Platform usage patterns and analytics
• ›Device information and IP addresses
• ›Browser type and version
• ›Log files and error reports
• ›Workspace and team collaboration data
• ›Media uploads and storage usage

We use your information (Antwork account data, brand profiles, knowledge base) to:

• ›Generate AI-powered content: Use your brand profile and knowledge base data to create personalized content for your campaigns
• ›Enable collaboration: Support workspace and team management features
• ›Communicate with you: Send service-related notifications, respond to support requests, and (with your consent) send marketing communications using only your Antwork account information
• ›Improve our platform: Analyze usage patterns to enhance features, ensure security, and prevent fraud

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

• ›Google Cloud Platform (hosting, infrastructure, and Cloud Tasks for scheduled publishing)
• ›Firebase (authentication and database)
• ›Google Gemini API (AI content generation)
• ›Stripe (payment processing)
• ›Social media platforms (LinkedIn, X, YouTube, Facebook, Instagram, Pinterest, Threads, and TikTok APIs)

When we use third-party AI services, your brand profile data is sent to these services to generate personalized content. We ensure that data is processed securely and in accordance with our privacy commitments.

4.2 Legal Requirements

• ›Comply with legal obligations or court orders
• ›Protect our rights, property, or safety
• ›Prevent fraud or security threats

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. However, social media platform data will only be transferred in compliance with the applicable platform's policies and user consent requirements.

We implement appropriate technical and organizational measures to protect your personal information:

• ›Encryption of sensitive data in transit and at rest
• ›Secure authentication and access controls
• ›Regular security audits and monitoring
• ›Compliance with industry security standards
• ›Secure cloud infrastructure through Google Cloud Platform
• ›Encrypted storage of OAuth tokens and social media credentials
• ›Access controls for workspace and team collaboration features

You have the following rights regarding your personal information:

• ›Access: Request a copy of your personal information, brand profile data, and usage statistics
• ›Correction: Update or correct inaccurate information, including brand profile and knowledge base data
• ›Deletion: Request deletion of your personal information, brand profile, and associated content
• ›Portability: Export your data in a portable format, including posts, campaigns, and brand information
• ›Opt-out: Unsubscribe from marketing communications
• ›Account Deletion: Delete your Antwork account and associated data, including workspaces, campaigns, and posts
• ›Disconnect Social Accounts: Remove social media account connections at any time through your account settings

6.1 Data Deletion Request

You have the right to request deletion of your social media account data stored in Antwork. We provide a dedicated Data Deletion Request page that allows you to request deletion of your connected social media account data.

To exercise these rights or for other privacy-related requests, please contact us at iker.gonzalez@antwork.io. You can also manage many of these settings directly through your account dashboard.

We retain your personal information for as long as necessary to:

• ›Provide our services to you
• ›Comply with legal obligations
• ›Resolve disputes and enforce agreements
• ›Improve our services and user experience

When you delete your account, we will delete your personal information, brand profile data, knowledge base content, campaigns, and scheduled posts within 30 days, except where retention is required by law. Published posts on social media platforms will remain on those platforms unless you delete them directly through the platform.

Our platform integrates with third-party services. Please review their privacy policies:

• ›LinkedIn: privacy policy
• ›X (Twitter): privacy policy
• ›YouTube: privacy policy
• ›Facebook: privacy policy
• ›Instagram: privacy policy
• ›Pinterest: privacy policy
• ›Threads: privacy policy
• ›TikTok: privacy policy
• ›Google Cloud (Gemini API): privacy policy
• ›Stripe: privacy policy

When you use our AI content generation features, your brand profile data is processed by Google Gemini API. Please review Google's privacy policy to understand how they handle your data.

Antwork can be connected to AI assistants (Claude, ChatGPT, Cursor, and other clients that support the Model Context Protocol) so you can manage posts, brand strategy, analytics, and media from inside the chat. This section explains how that integration handles your data.

Data accessed via the connector

• ›Posts you create, update, or list (drafts, scheduled, published, failed)
• ›Brand DNA: brand identity, content guidelines, voice profiles
• ›Connected social-account metadata (platform, account name, handle) — never the underlying access tokens
• ›Workspace settings, posting schedule, daily and per-post engagement metrics
• ›Items in your media library (URLs, names, types) and the binary content you upload through the connector
• ›Your basic profile (user ID, email, plan) for the whoami tool

Permission scopes

OAuth tokens are scoped per category. Each tool enforces the minimum scope it needs on every request.

• ›read: List and inspect posts, media, brand DNA, analytics, voice profiles.
• ›write: Create and update drafts, brand guidelines, workspace settings, attach media.
• ›publish: Publish or schedule posts to social platforms; retry failed publishes; delete posts.
• ›media: Upload and delete items in the media library.

Conversation data

Antwork does not collect or store any chat history, prompts, or AI conversation content. The connector only sees the explicit tool calls the AI assistant makes on your behalf (e.g. "create a draft post with this text") and the structured responses we send back. The chat itself stays inside the AI host (Claude.ai, ChatGPT, etc.).

OAuth tokens

• ›Access tokens are short-lived JWTs verified locally on every request — no Firestore lookup per call.
• ›Refresh tokens are stored encrypted at rest in our backend and are bound to the originating OAuth client.
• ›Tokens are revoked immediately when you disconnect the connector (in the AI host or in Antwork → Settings → Connected apps).

Retention

Data accessed through the connector follows the same retention policy as your regular Antwork account — see "Data retention" above. Disconnecting the connector does not delete your underlying workspace data; for full data removal use the data deletion request page.

Revoking access

You can revoke at any time:

• ›In the AI host: Settings → Connectors → Antwork → Disconnect.
• ›In Antwork: Settings → Connected apps.
• ›For full data deletion: submit a request at /data-deletion-request.

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:

• ›Standard contractual clauses
• ›Adequacy decisions by relevant authorities
• ›Certification schemes and codes of conduct

Antwork is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• ›Posting the new Privacy Policy on this page
• ›Sending you an email notification
• ›Displaying a notice in our platform

Your continued use of Antwork after any changes constitutes acceptance of the updated Privacy Policy.

Antwork is operated by: