Privacy policy

What we collect

• Account email, used to sign you in and contact you. Authentication is handled through our hosting provider.
• Brand information you provide: brand name, description, keywords, subreddits, mention style, and related settings.
• Reddit thread data we fetch to do the work: public thread titles, bodies, and comments that we retrieve and pass to our scoring and reply drafting steps. This is public content from Reddit, fetched server side.
• Usage and billing metadata: which scans and generations ran, token and cost estimates for your account, and your plan and subscription status.

What we do not collect

We never ask for, store, or transmit your Reddit account credentials or password. There is no "connect your Reddit" step. We never log in as you and never post on your behalf. softshill only drafts; you post manually from your own account.

Why we process your data

We process your data to provide the service you signed up for (finding and drafting replies), to enforce plan limits and bill you, to keep the service secure, and to comply with legal obligations. Our legal bases under the GDPR are performance of our contract with you, our legitimate interests in running and securing the service, and consent where it applies.

Processors we use

We share data with a small set of providers only as needed to run softshill:

• Supabase, for database hosting and authentication.
• Anthropic, for AI scoring and reply generation.
• FetchLayer, to retrieve public Reddit thread content.
• DataForSEO, for Google search results used by Ranked Radar.
• Vercel, for application hosting.
• Our payment provider, to process subscriptions and store billing details.

These providers process data on our behalf under their own terms. Some may process data outside the European Economic Area, in which case we rely on appropriate safeguards such as standard contractual clauses.

Reddit content and AI

Reddit thread content is treated as untrusted data. We send relevant thread text to our AI provider so it can score the thread and draft a reply. We do not use your brand data or thread content to train any public model.

Retention

We keep your account and brand data while your account is active. Fetched thread content and generated drafts are kept so you can review your history, and are deleted within a reasonable period after you delete the related record or close your account. Billing records are kept as long as the law requires.

Your rights

If you are in the European Economic Area, you have the right to access, correct, export, and delete your personal data, and to object to or restrict certain processing. To make a request, email hello@softshill.com. You also have the right to complain to your local data protection authority.

Security

Secret keys are held server side only and are never exposed to your browser. Access to your data is restricted to your own account through row level security. No system is perfectly secure, but we take reasonable steps to protect your data.

Changes

We may update this policy. If we make a material change, we will update the date above and, where appropriate, notify you.