Privacy policy

Vitals makes short-form posts for your brand, finds people asking for your product on Reddit, and shows your revenue, traffic and social numbers in one place. This page explains what we collect to do that, why, who helps us, and what we never do with it.

What we collect

• Your account: email address, time zone, briefing preferences, plan and usage counts (for example, how many posts you've kept this month).
• Your businesses: the website and description you give each one, and the brand profile Vitals writes by reading that website, which you can edit.
• Connection credentials: sign-in tokens or read-only API keys for the services you connect. They are encrypted before they are stored.
• Daily totals from those services, such as revenue, new customers, visitors, signups, search clicks, views and followers. We do not store your customers' names, emails, payment details or individual events.
• Content: the posts and captions Vitals makes for you, what you keep or drop and any reason you type, your schedule, and the performance numbers of published posts.
• Files you upload: footage, photos and audio. Location, device and other embedded data are stripped from each file before it is used, and the unstripped upload is deleted.
• Signals: public Reddit threads that match your product, and the replies Vitals drafts for you.
• Questions you ask in Ask, and the answers.
• Billing status from PayPal, such as whether your subscription is active. PayPal handles your payment details; we never see them.
• Referral code: if you arrived through an affiliate's link, the code in that link, so the affiliate can be paid.

How we use it

• To make your posts, draft your Signals replies, answer your questions, and learn from your keeps and drops.
• To publish the posts you keep and schedule, and to show how they did.
• To show your dashboard, detect unusual changes and write your morning briefing, and to email it if you turn that on.
• To keep the service running, secure, within your plan's limits and billed correctly.

We do not sell your data, use it for advertising, or share it with anyone except the service providers listed below. We do not use your content or numbers to train AI models.

Publishing to your social accounts

When you connect TikTok, Instagram, YouTube, LinkedIn, X, Facebook, Threads, Pinterest or Bluesky, you sign in on that network's own page and grant permission to post. Vitals publishes only posts you kept and scheduled, and reads their views and engagement. It never posts anything you didn't approve. You can unlink an account in Settings at any time, or revoke access from the network's own settings.

Reddit

Signals reads public Reddit posts through a public archive. It never asks for your Reddit login and never posts, votes or messages on Reddit. You copy a draft and post it yourself, from your own account.

Revenue and analytics connections

Connections to Stripe, Polar, Paddle, PostHog and similar services are read-only. Vitals cannot move money, change subscriptions or edit anything in those accounts. Disconnecting a source deletes its stored credentials and history.

Access to Google data

If you connect Google Analytics, Google Search Console or YouTube, Vitals requests read-only access and uses it only to fetch daily totals for the property, site or channel you choose. Vitals' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to train AI models, and people at Vitals do not read it except with your permission, for security, or where the law requires.

AI

Vitals uses AI models to read your website, write posts, captions and replies, and write your briefing. The model provider receives what that task needs: text you gave us or that Vitals read (such as your website, product description, captions, daily totals and public Reddit threads) and, where a feature needs it, images. We never send your customers' personal details or your connection credentials to an AI provider.

Service providers

• Supabase (database, file storage and sign-in) and Vercel (hosting).
• Anthropic and Google (AI models).
• Ayrshare and Buffer (publishing to social networks and reading post stats), and Meta's APIs for Instagram and Facebook.
• PayPal (payments) and Resend (email).
• Pexels and Pixabay (stock footage). They receive search terms only.
• The Arctic Shift archive (public Reddit posts). It receives search terms only.
• Google Analytics: which pages are visited, from what kind of device and roughly where, to see how people find and use the site.
• Vaya (vayahq.com), which runs the startup challenge Vitals is part of: page views and an anonymous account ID, never your email or business data.

Some of these providers process data outside your country, including in the United States, under their own data protection terms.

Cookies

We use cookies to keep you signed in, remember which business you last opened, and remember an affiliate's referral code for 60 days. Google Analytics sets its own cookies to count visits. Your light or dark theme is kept in your browser's own storage. We don't use advertising cookies.

Retention and deletion

We keep your data while your account is open. When a trial ends without a plan, nothing is deleted, so you can pick up where you left off. Deleting a post, file or business, or disconnecting a source, deletes it right away. Usage counts are kept for billing even when the content is deleted. To delete your whole account, email contact.vitals.startup@gmail.com and we'll remove everything within 30 days.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by emailing contact.vitals.startup@gmail.com. Depending on where you live, you may also complain to your local data protection authority.

Security

Credentials are encrypted with AES-256-GCM, connections use HTTPS, and each account can only read its own data.

Children

Vitals is for businesses and is not meant for anyone under 16.

Changes

We'll update this page when what we collect or who helps us changes, and email you about material changes.

Contact

Questions about privacy: contact.vitals.startup@gmail.com.