Privacy Policy
Last updated October 9, 2026
Reddboss (“we”) is an AI marketing agent at reddboss.com. It reads your website and your search data, plans and writes content for your site, finds public Reddit threads where your product can help and drafts replies for you to post yourself, and emails you a daily report. This policy explains what we collect, why, who we share it with, and how to delete it.
What we collect
- Account: your name, email address and profile picture from Google Sign-In.
- Your website: public pages of the site you add (text, links, sitemap), and the marketing brief we generate and you edit.
- Google Search Console (read-only), if you connect it: search queries, pages, clicks, impressions and positions for the property you choose.
- Google Analytics (read-only), if you connect it: the list of properties you can access and session counts by traffic channel for the property you choose.
- GitHub, if you connect it: the ID of the Reddboss GitHub app installation on the repositories you choose (or, if you prefer, an access token you create, stored encrypted), and the pull requests we open there. We only ask for permission to read and write files and pull requests in those repositories.
- Content we produce: content calendars, articles, fact-check notes, Reddit reply drafts and a log of actions.
- Public Reddit posts: titles, text, links and vote counts of public threads that match your product, read through Reddit's API with Reddboss's own app credentials. We never connect to or post from your Reddit account; we store whether you marked a draft as posted or skipped.
- Billing: your plan and subscription status. Card details are handled by Stripe; we never see or store them.
- Technical: standard server logs (IP address, browser, time of request) kept by our hosting provider.
- Website analytics: we use Google Analytics to count visits to reddboss.com and see which pages and buttons are used. It sets cookies and collects device, browser, approximate location and pages viewed. We don't send it your name, email or Google data. You can opt out with Google's opt-out add-on.
- PostHog: product analytics to see how the app is used (pages viewed, buttons clicked, and session recordings with every typed field masked). When you're signed in, it's linked to your account id, email and plan so we can improve the product and help with support. We don't send it your Google, GitHub or Stripe data.
- Vercel Analytics: anonymous page-view and performance counts from our host, Vercel. It uses no cookies and doesn't identify you.
How we use it
- To provide the service you asked for: write your brief, plan and write articles for your site, open pull requests, find Reddit threads and draft replies, and send your daily report.
- To show you your search and traffic numbers inside Reddboss and in the report.
- To run your account, take payment, and contact you about the service.
We do not sell your data, use it for advertising, or use it to train AI models.
Google user data
Reddboss's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We request read-only access:
webmasters.readonly(Search Console) andanalytics.readonly(Google Analytics). We cannot change your Google settings or data. - We use this data only to plan your content, choose what to write about, and report results to you.
- To write content, relevant search data (for example queries and page addresses) is sent to Anthropic's Claude API, which processes it to produce your content and does not use it to train its models. We do not transfer Google user data to anyone else except as needed to provide the service, to comply with law, or with your consent.
- No person at Reddboss reads your Google data unless you ask us to (for example for support), it is needed for security or legal reasons, or it has been aggregated and anonymised for running the service.
- Google tokens are encrypted (AES-256) and only our servers can read them.
Who processes data for us
- Supabase (database and sign-in), Vercel (hosting and anonymous analytics), Google Analytics and PostHog (website and product analytics), Anthropic (AI writing), Stripe (payments), Resend (email), Google (sign-in, Search Console and Analytics APIs), GitHub (publishing, if you connect it), Reddit (reading public threads).
Each processes data only to provide its part of the service. Some of them store data outside your country, including in the United States.
Retention and deletion
- Disconnect Google or GitHub at any time under Connections. Disconnecting Google revokes our access at Google and deletes the stored tokens immediately. You can also remove access from your Google Account permissions.
- Search data is fetched when needed and is not stored beyond the content and reports built from it.
- To delete your account and everything in it, email support@reddboss.com. We delete it within 30 days, except billing records we must keep by law.
Security
Data is sent over HTTPS, access is limited per workspace by row-level security, and connection tokens are encrypted at rest.
Your rights
You can ask for a copy of your data, correct it, or delete it by emailing support@reddboss.com.
Changes
If we change this policy we will update the date above and, for important changes, email you.