What we collect, and why.

This Privacy Policy explains how Mesparo (“we”, “us”) collects, uses, and shares information when you use the Service. It applies to information processed through the Mesparo dashboard, API, and connected social integrations.

Information you provide

• Account information: email address, name, and authentication credentials handled by our identity provider (Clerk).
• Content: video files, images, captions, hashtags, voice samples, and AI-generation prompts you upload or create.
• Billing information: processed by our payment provider; we do not store full card numbers on our servers.

Information from connected platforms

When you connect TikTok, Instagram, YouTube, LinkedIn, or X, we receive — within the scopes you authorize — your platform user id, handle/username, display name, avatar URL, access and refresh tokens, and metadata about content you publish via the Service.

Information collected automatically

• Log data (IP address, user agent, request paths, timestamps).
• Product analytics (feature usage, error events).
• Cookies and similar technologies required to keep you signed in.

• To operate, maintain, and improve the Service.
• To publish, schedule, and analyze content on your behalf to the third-party platforms you connect.
• To process video and generate derivative assets (clips, AI videos, cloned voices) using third-party AI providers.
• To communicate service announcements, security alerts, and support.
• To detect and prevent fraud, abuse, and policy violations.

We share information with service providers under contractual data protection obligations, including (non-exhaustive):

• Hosting / infrastructure: Vercel, AWS S3.
• Authentication: Clerk.
• Database: Neon / Postgres.
• Background jobs: Inngest.
• AI providers: Anthropic, Replicate, Deepgram, ElevenLabs.
• Social platforms: TikTok, Meta (Instagram), Google (YouTube), LinkedIn, X.

TikTok

When you connect TikTok, we request the scopes user.info.basic, video.upload, and video.publish. We use TikTok's Content Posting API to publish videos you explicitly schedule. We do not access TikTok data for any purpose other than the features you initiate.

Meta / Instagram

We use Instagram Business Login with the scopes instagram_business_basic and instagram_business_content_publish. Meta data is used solely to publish Reels you schedule and to display basic profile info on your dashboard.

We retain account and content data for as long as your account is active. When you delete your account (/account/data-deletion), we remove your personal data and connected access tokens within approximately 5 minutes. Log data may be retained in backups for up to 30 days.

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. You can request deletion at /account/data-deletion, or by contacting us at the address below.

We process data in the United States and other regions where our providers operate. Where required, we rely on standard contractual clauses or equivalent safeguards.

We use encryption in transit (HTTPS) and at rest for stored content, scoped access tokens, and least-privilege infrastructure access. No system is perfectly secure; please use a strong, unique password.

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

We may update this Policy from time to time. Material changes will be announced in-product or by email. The “Last updated” date at the top reflects the latest version.

Questions about this Policy or your data? Contact privacy@mesparo.com.