Privacy Policy

Joe learns about your business from information you give it, drafts social posts and outreach emails in your voice, and publishes or sends them only with your authorization. Everything we collect exists to make that work, nothing else.

Google profile. When you sign in with Google we receive your name, email address, and profile picture. That's how your account is identified.

Gmail send access, only if you connect it. If you use the outreach feature and connect a Gmail account, you grant Joepermission to send email from that account, and nothing else. We send only the outreach messages you initiate or approve. Joe does not ask for, and cannot use, access to read your mailbox; when someone replies, you tell Joe so it stops following up.

Social publishing tokens, only if you connect them. When you connect X, LinkedIn, or Meta accounts, we store the access tokens those platforms issue so Joe can publish the posts you authorize. Tokens are used for publishing on your behalf and nothing else.

Business information you provide. Your business name, website, positioning, voice notes, product facts, and any content sources you attach. This is the raw material your content is generated from.

Billing. Payments run through Stripe. We never see or store your card number, Stripe handles it and tells us your subscription status.

Photos and videos you send. Pictures and short clips you upload or share from your phone, so Joe can describe them and write a caption. If you run a photo booth, each picture carries the guest's own choice of whether it may be posted, and a picture marked not to post is never drafted into a post. Video from a venue camera is recorded without sound.

Comments on your own posts. The names and words of people who comment on or react to posts on your own Facebook Page or Instagram account, so you can see who reached back and answer them.

A few companies handle your data on our behalf, each only for the job listed, and none of them may use it for anything else:

• Anthropic, the AI model provider: your business facts, photos and drafts are sent to it to write and check posts. It does not train its models on this data.
• Supabase: the database and file storage where your account, facts, drafts and photos live.
• Vercel: hosting for the Joe website and app.
• Stripe: billing and subscriptions.
• Resend: sending account emails, such as your welcome and notification emails.
• Google, Meta, X and LinkedIn: sign-in, and publishing to the accounts you choose to connect.

We do not sell your data. We do not rent it, share it with advertisers, or use your business information to train models for anyone else's benefit. Your connected accounts are used solely to publish and send what you authorized.

Data is stored in our database hosted on managed cloud infrastructure. Access tokens for connected accounts are encrypted before they are stored, kept server-side, and never exposed to your browser or to other users. Generated content, drafts, and your approval history are stored so the product can function.

You can disconnect any connected account at any time from the connections page, which removes its stored token. You can cancel your subscription via the Stripe customer portal or by emailing martianclaw@gmail.com. If you want your account and its data deleted entirely, email us and we'll do it, confirmation included.

Joe's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail access is used only to send the messages you initiate or approve.

You can have everything we hold about you deleted. Email martianclaw@gmail.com from the address on your account, with the subject "Delete my data". No form, no retention call, no offer to talk you out of it.

We confirm within 7 days and complete it within 30. That removes your account, your business facts, your drafts and published post records, your contacts and outreach history, any photos you sent in, and the tokens for every connected account. Deleting those tokens ends our access to your Facebook, Instagram, LinkedIn, X, Google or GitHub accounts; it does not delete anything already published on those platforms, because those posts belong to your accounts and only you can remove them.

You can also disconnect any single account at any time from the connections screen inside Joe, without deleting anything else. If you remove Joefrom your Facebook settings instead, that revokes our access immediately and we delete the stored tokens for it.

Two things survive a deletion, both because the law requires it: billing and tax records held by our payment processor, and server logs, which age out on their own within 90 days.

If this policy changes in a way that matters, we'll email the address on your account before the change takes effect.

Martian Industries LLC · martianclaw@gmail.com