privacy policy.

babyg is where creators and brands connect and collaborate, with an ai manager by their side. this privacy policy explains what information we collect, how we use it, who can access it, how connected accounts work, how location sharing works, how the ai agent works, and how you can request deletion of your data.

by using babyg, you agree to the collection and use of information described in this policy.

what we collect

account information

we collect your email address, account type, account status, sign-in method, connected account status, and timestamps for when your account is created, updated, and last signed in.

we use this information to create your account, keep you signed in, manage access, verify your identity, and protect the platform.

profile information

we collect information you choose to add to your creator profile, such as your name, creator name, social handles, primary platform, location, niche, content formats, public bio, writing preferences, creator limits, and other profile details you choose to provide.

if your niche is not listed, you may enter a custom niche.

onboarding answers

we collect answers you provide during onboarding, including your creator goals, content preferences, tone preferences, writing samples, task preferences, and any instructions you give babyg about how you want the assistant or ai agent to support you.

we use this information to personalize your experience and help babyg draft content, replies, plans, recommendations, and next steps that match your style.

location information

babyg may ask for permission to access your location during sign-up or while using certain location-based features.

depending on the permission you approve and the feature you choose to use, babyg may collect a manually entered city or region, or a one-time browser location you choose to share.

we may use location information to personalize your creator profile, support local creator discovery, suggest nearby opportunities, improve booking workflows, help match users with relevant local content or creators, and support location-based features inside babyg.

location sharing is optional. if you do not allow browser location access, you can still enter a city or region manually.

babyg does not sell location data.

babyg does not use location data for third-party advertising.

babyg does not use location data to train ai models.

babyg does not share your precise location with other users.

public profile or directory features may show general location information you choose to provide, such as city, region, country, or market.

you can turn off location access through your browser, device settings, or account settings where available.

after location access is turned off, babyg will stop collecting new location data unless you grant permission again.

previously collected location information may remain in your account records until deleted under this policy or through a verified deletion request.

connected accounts

you may choose to connect third-party accounts, currently instagram, gmail, and google calendar. connecting an account is optional unless a specific feature clearly requires it.

when you connect a third-party account, babyg may collect and use information made available by that platform depending on the permissions you approve.

this may include account identifiers, usernames, profile information, connected account status, content information, calendar information, email information, and performance or analytics data where authorized.

babyg only uses connected account data to provide the features you choose to use inside babyg.

babyg does not sell connected account data.

babyg does not use connected account data for third-party advertising.

babyg does not use connected account data to train ai models.

instagram data

if you connect an instagram account through meta, babyg accesses the information made available by meta's instagram apis under the read-only permissions you approve on meta's consent screen.

today this is limited to your instagram account id, username or handle, basic profile information, and recent post insights (per-post engagement, reach, impressions, saves, likes, comments) fetched on demand when you view stats inside babyg.

we use instagram data to detect and display your creator handle, show recent post performance inside babyg, and give the babyg ai agent context when drafting content or replies you request. babyg does not post to instagram, send instagram direct messages, or take any action on your instagram account.

you can disconnect your instagram account at any time from profile settings. you should also remove babyg from your meta permissions at accounts.meta.com/apps to complete revocation on meta's side.

gmail data

if you connect gmail, babyg may access email information made available through google's apis, depending on the permissions you approve.

this may include your email address, email metadata, sender and recipient information, subject lines, message snippets, message bodies, attachments, labels, and timestamps where authorized.

we use gmail data only to provide the gmail-connected features you choose to use, such as helping you review messages, draft responses, summarize communication, organize creator-related emails, manage workflow tasks, and support user-requested ai agent actions.

babyg does not sell gmail data, use gmail data for advertising, use gmail data to train ai models, or allow humans to read gmail data unless necessary to provide support you request, investigate abuse or security issues, comply with law, or protect the service.

if you ask babyg to use gmail context in an ai feature, relevant gmail information may be processed by our ai service provider only to provide the user-facing feature you requested.

babyg's use and transfer of information received from google apis will adhere to the google api services user data policy, including the limited use requirements.

google calendar data

if you connect google calendar, babyg may access calendar information made available through google's apis, depending on the permissions you approve.

this may include calendar names, event titles, event times, event locations, event descriptions, attendees, reminders, availability information, and calendar identifiers.

we use calendar data to help you view upcoming events, create calendar items, organize creator bookings, avoid scheduling conflicts, manage your workflow inside babyg, and support user-requested ai agent actions.

babyg does not sell calendar data, use calendar data for advertising, use calendar data to train ai models, or share calendar data with third parties except as needed to provide the service, comply with legal obligations, or protect the service.

if you ask babyg to use calendar context in an ai feature, relevant calendar information may be processed by our ai service provider only to provide the user-facing feature you requested.

babyg's use and transfer of information received from google apis will adhere to the google api services user data policy, including the limited use requirements.

messages and platform communication

babyg may collect messages sent or received inside the babyg platform, including message body, sender, recipient, timestamps, attachments, and related metadata.

messages are visible to the sender and recipient.

babyg team members may access messages only when necessary to provide support, investigate abuse reports, enforce safety rules, fix technical issues, comply with legal obligations, or protect the service.

bot conversations

babyg may collect your conversations with the babyg ai assistant, including your prompts, uploaded context, assistant responses, drafts, task requests, and related timestamps.

we use ai assistant conversations to help you complete creator-related tasks inside the website and, when authorized, across connected accounts — maintaining context during your session, personalizing your experience, drafting content and replies, summarizing information, recommending next steps, and completing tasks you ask babyg to perform.

depending on the features you choose to use, the babyg ai assistant may use information from your profile, onboarding answers, prior assistant conversations, connected instagram account, connected gmail account, connected google calendar account, your profile photo, bookings, content receipts, performance snapshots, and location information.

examples of ai assistant tasks may include drafting a reply, summarizing a message, preparing a content idea, organizing a booking, creating a calendar item, helping review email context, suggesting a next move, or reviewing content performance.

babyg may generate drafts, summaries, recommendations, or task outputs, but you are responsible for reviewing and approving important outputs before sending, posting, publishing, or relying on them.

babyg does not sell ai assistant data.

babyg does not use ai assistant data for third-party advertising.

babyg does not use ai assistant conversations to train ai models.

babyg does not intentionally make high-impact decisions about employment, credit, housing, insurance, healthcare, legal rights, or similar matters through the ai assistant.

ai processing

babyg uses ai service providers to power the ai assistant. today the primary ai service provider is anthropic (the claude family of models). babyg may also use other narrow-purpose providers for tasks such as web search, transcription, or embeddings; where an additional provider processes user content, we update this section.

when you use the ai assistant, relevant information may be processed by these providers so babyg can generate useful drafts, summaries, recommendations, actions, and next steps.

this may include your prompts, profile details, connected workflow context, message context, email context (when gmail is connected), calendar context (when google calendar is connected), instagram context (when instagram is connected), profile photo you have uploaded, content notes, performance information, and location-based context.

ai providers process this content only to return a response to babyg on our behalf. under our agreements with these providers, your content is not used to train their foundation models, is not used for third-party advertising, and is retained by the provider only as long as needed to operate the api (typically no more than 30 days for abuse-monitoring, then deleted).

babyg limits ai processing to the information reasonably needed to provide the user-facing feature you choose to use.

bookings and calendar items

we collect bookings and calendar items created inside babyg, including titles, times, locations, attendees, notes, and related timestamps.

if you connect google calendar, babyg may sync calendar information as described above.

content receipts and performance snapshots

babyg may collect content-related information you enter manually or sync from connected platforms, depending on the permissions you approve.

this may include post titles, links, captions, views, likes, comments, shares, saves, engagement metrics, notes, and performance snapshots.

we use this information to help you understand content performance, organize creator work, and improve your content planning.

uploaded media

babyg currently accepts one type of user upload: your profile photo. uploaded photos are resized to a single 512x512 rendering, re-encoded as jpeg, and have exif metadata stripped before storage in a public profile-photos bucket.

we do not currently accept general file uploads (videos, documents, audio, or arbitrary attachments).

public profile and directory information

babyg may allow you to create a creator profile or appear in a creator directory.

information you choose to make public may be visible to other users, such as creator name, handle, niche, public bio, city, region, country, market, content formats, and public profile media.

do not add information to public profile fields that you do not want other users to see.

cookies and session data

babyg uses cookies and similar technologies to keep you signed in, protect forms from abuse, maintain account sessions, support secure authentication, remember preferences, and improve the service.

we do not currently use third-party advertising cookies.

device, usage, and log data

babyg may collect basic technical information such as browser type, device type, operating system, ip address, pages visited, actions taken, referring pages, error logs, timestamps, and server request data.

we use this information to operate the service, debug errors, protect against abuse, improve performance, understand product usage, and maintain platform security.

we do not intentionally log private message bodies, connected account message bodies, or bot prompts in server error logs. however, limited identifiers or technical details may appear in logs for security, debugging, or abuse prevention.

sensitive information

some information processed by babyg may be considered sensitive depending on where you live or how you use the service. this may include your location (city / region / country as you choose to set it), private messages between users on babyg, connected gmail content, connected google calendar content, or connected instagram data.

babyg uses sensitive information only to provide the features you choose to use, protect the service, comply with legal obligations, or complete actions you request.

babyg does not sell sensitive information.

babyg does not use sensitive information for third-party advertising.

babyg does not use sensitive information to train ai models.

how we use information

we use the information we collect to create and manage your account, authenticate sign-ins, connect third-party accounts you authorize, detect connected social handles, personalize your creator profile, draft content and replies, help manage messages, bookings, and content workflows, support location-based features, sync calendar information when authorized, support gmail-connected workflows when authorized, display instagram post performance information when authorized, provide customer support, investigate abuse or security issues, protect the platform, debug errors, improve reliability, comply with legal obligations, and improve the product using aggregated or non-identifying information.

aggregated and non-identifying information

babyg may use aggregated or non-identifying information to understand how the product is used, improve features, measure performance, debug issues, and plan future updates.

aggregated or non-identifying information does not identify you personally.

who can access your information

you can access information connected to your own account.

other users may see limited profile information that you choose to make visible, such as creator name, handle, niche, public bio, city, region, country, market, and other public directory fields.

message recipients can see messages sent to them.

babyg team members may access limited account information only when necessary to provide support, investigate abuse, enforce policies, fix technical issues, comply with legal obligations, or protect the service.

service providers may process information only as needed to help babyg operate and provide the features you choose to use.

service providers

babyg uses trusted service providers to operate the platform. these may include the providers below.

supabase

database, authentication (magic-link email), file storage for the profile-photos bucket, and account management.

railway

application hosting and deployment infrastructure.

anthropic

ai processing for the babyg ai assistant (drafts, replies, summaries, recommendations).

google

gmail access and google calendar access when authorized by the user.

meta

instagram account connection and read-only instagram post insights when authorized by the user.

tavily

web search results used by the babyg assistant to answer context questions when relevant.

other infrastructure providers

babyg may use additional vendors for security, monitoring, or technical support. any added provider will be used only to support the service, and this list will be updated before new categories of user data are processed by a new provider.

how we share information

we do not sell your personal information.

we do not rent your personal information.

we do not share your personal information with third parties for their own advertising or marketing purposes.

we may share information only when you ask us to, when you connect a third-party account and authorize data flow, when it is needed to provide the service, when it is needed for security, fraud prevention, or abuse investigation, when it is required by law, legal process, or government request, or when it is necessary to protect the rights, safety, or property of babyg, our users, or others.

business transfers

if babyg is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, user information may be transferred as part of that transaction.

if that happens, we will take reasonable steps to protect your information and notify users where appropriate.

data retention

we keep your information while your account is active or as long as needed to provide the service.

we may keep limited information longer when necessary for security, fraud prevention, legal compliance, dispute resolution, backup recovery, or enforcing our terms.

connected account tokens are kept only while your account remains connected or as otherwise needed to provide the connected feature.

if you disconnect an account, babyg will stop using that connection and will delete or disable related tokens where technically possible.

location data is kept only as long as needed for the location-based feature, account record, security purpose, legal purpose, or operational reason described in this policy.

google user data retention

we treat google user data more restrictively than the general categories above:

• gmail message content and calendar event content pulled from google's apis are used to render the feature you invoked (draft a reply, summarize a thread, plan a booking) and are not persisted to babyg's database as their own copy. transient copies held in memory or in short-lived processing queues are discarded once the response has been returned to you.
• gmail thread and message identifiers, event ids, and message metadata (subject line, sender, timestamps, calendar id) may be persisted in a summarized form so babyg can show "we last read this thread on…" or resume a conversation you asked us to draft. this summary is deleted when the underlying thread or event is deleted at google, when you disconnect the account, or on account deletion.
• oauth tokens (access and refresh) are stored encrypted at rest and are revoked at google's oauth2.googleapis.com/revoke endpoint when you disconnect gmail, disconnect calendar, or delete your account. babyg never exports google user data to any third party outside the ai processing described above.
• account deletion revokes all google grants at google, drops the tokens, and deletes every stored summary and identifier within our normal deletion window (see data deletion).

data deletion

you can request deletion of your account or personal data at any time.

to request deletion, visit the data deletion page or email babygaiagent@gmail.com from the email address tied to your babyg account.

we may ask you to verify your identity before completing the request.

after verification, we will take reasonable steps to delete your account data and connected account data from active systems, unless we need to keep limited information for security, legal, fraud prevention, backup, dispute resolution, or compliance reasons.

we aim to complete verified deletion requests within 30 days.

some deleted information may remain in backups for a limited period before being permanently removed through normal backup cycles.

disconnecting connected accounts

you may disconnect instagram, gmail, or google calendar from inside babyg at any time from profile settings.

you may also revoke access directly through the platform provider's account settings.

after disconnection, babyg will stop collecting new data from that connected account unless you reconnect it.

disconnecting a connected account does not automatically delete historical data already stored in babyg. you may request deletion of stored connected account data through the data deletion page or by emailing babygaiagent@gmail.com.

turning off location access

you may turn off location access through your browser, device settings, or account settings where available.

after location access is turned off, babyg will stop collecting new location data unless you grant permission again.

previously collected location information may remain in your account records until deleted under this policy or through a verified deletion request.

your privacy choices and rights

depending on where you live, you may have the right to request access to your personal information, correction of inaccurate information, deletion of personal information, a copy of certain personal information, restriction of certain processing, or information about how your data is shared.

you may also have the right to opt out of the sale of personal information, sharing of personal information for targeted advertising, or certain uses of sensitive information.

babyg does not sell personal information.

babyg does not use personal information for third-party advertising.

to make a privacy request, email babygaiagent@gmail.com from the email address tied to your babyg account.

we may ask you to verify your identity before completing a request.

security

babyg uses reasonable technical and organizational safeguards to protect user information.

these safeguards may include secure connections, authentication controls, database access controls, row-level security, restricted internal access, token protection practices, monitoring for abuse or errors, and other security measures appropriate for the service.

no internet service is completely secure. we cannot guarantee absolute security, but we work to protect user data and respond quickly to known issues.

children

babyg is intended for adults.

we do not knowingly collect personal information from anyone under 18.

if you believe a minor has created an account, contact babygaiagent@gmail.com and we will review the account.

international users

babyg may process and store information in the united states or other locations where our service providers operate.

by using babyg, you understand that your information may be processed in locations outside of your state, province, or country.

third-party links and services

babyg may include links to third-party websites, platforms, or services.

this privacy policy does not apply to third-party websites or services that babyg does not control.

when you connect or use a third-party service, that service may process your information under its own privacy policy and terms.

your choices

you can choose not to provide certain profile information.

you can choose not to connect third-party accounts.

you can disconnect connected accounts.

you can turn off location access.

you can request deletion of your account or data.

you can contact us with privacy questions at any time.

changes to this policy

we may update this privacy policy from time to time.

if we make material changes, we will update the "last updated" date above and, where appropriate, notify users in the app or by email.

continued use of babyg after an updated policy becomes effective means you accept the updated policy.

contact

questions, privacy requests, or deletion requests can be sent to:

babygaiagent@gmail.com