Privacy Policy

1. What we collect

• Account data. Your email address and authentication identifiers, managed through Supabase. If you sign in with a magic link, we send it via our email provider. If you sign in with Google, we also receive your name, email address and profile picture from Google.
• Brand and creative-profile information you provide. Your industry, target audience, and any website URL you ask us to read to build your brand profile.
• Creative content. Reference images and videos you upload, the prompts you write, and the videos Flute generates for you, organized per Space.
• Connected ad-platform credentials. When you connect an ad platform (such as Meta), we store the access token and ad-account IDs needed to fetch your metrics, along with the read-only performance data they return — spend, impressions, conversions, and similar aggregate figures.
• Basic technical logs. Standard server logs (IP address, browser type, timestamps, request paths) used for security, debugging, and abuse prevention.

2. How we use your data

We use your data for one purpose: operating Flute. That means generating your creatives from your references and brand profile, showing your own ad metrics back to you, and storing your work per Space so you can return to it. We do not sell your data, and we do not use your content to advertise to others. Ad-platform metrics are displayed only to the account that connected them.

3. AI processing

Flute is an AI product, and we want to be precise about what that means. When you request a generation, the references you uploaded and the prompts you wrote are sent to AI providers to produce your content: video generation is performed by ByteDance/Volcengine (Seedance), and text and vision drafting — such as turning your brand profile and references into a creative brief — is performed by Anthropic (Claude). Content is sent to these processors solely to fulfil your generation requests.

4. Subprocessors

These providers process data on our behalf to run Flute. They operate in various countries, including the United States and China, so using Flute involves transferring your data outside your own country. We may add or replace providers as the product changes, and will keep this list current.

5. Meta platform data

When you connect a Meta ad account, Flute requests read-only insights access (the ads_read permission) for the specific ad account you choose. We never post on your behalf, never create or modify ads, and never access personal profiles. Disconnecting the platform in Settings removes our access and deletes the stored connection, including its access token.

We do not sell Meta ad data, and it is shown only to the account that connected it. The only provider that receives it is Anthropic, which we use to analyse your best-performing ads and suggest creative changes. It is never sent to our video-generation provider.

6. Retention and deletion

• Renders. Deleting a render removes its files from storage.
• Spaces. Deleting a Space permanently purges all of its content and connections.
• Platform connections. Disconnecting a platform deletes its stored token.
• Your account. For full account deletion, email support@flute.ink and we will remove your account and associated data.

7. Cookies

Flute uses only essential and functional cookies — no advertising or tracking cookies. See our Cookie Policy for the full list.

8. Changes and contact

If we make material changes to this policy, we will update this page and revise the date at the top. Questions, requests, or concerns: email support@flute.ink.