Privacy Policy

Plain-language summary

SuperFollow helps you create and read feeds based on Creators and content made available through services you connect or select. To do that, we process account and connection information, public content and metadata, your prompts and feed choices, and technical information about use of the Service. AI-assisted systems may classify or filter feed content, but their results are probabilistic and are not used to make legal or similarly significant decisions about people.

We disclose information only as described in this Policy, including to providers that help operate SuperFollow, at your direction, or when law, safety, or a corporate transaction requires it. We do not sell personal information or share it for cross-context behavioral advertising. Depending on where you live, you may have rights over your personal information. A SuperFollow Account is available only to people aged 18 or older.

This summary is nonbinding and does not replace the complete Policy. Please read the full Policy for important details, exceptions, and choices.

1. Who we are

SuperFollow is operated by the following company, which is responsible for the personal information covered by this Policy:

In this Policy, “SuperFollow,” “we,” “us,” “our,” “Operator,” and “Controller” refer to this company. You can contact us using the details in Section 17.

The current Privacy Policy is available at https://superfollow.ai/privacy/. The Terms of Use are available at https://superfollow.ai/terms/.

2. Scope and definitions

This Policy explains how SuperFollow handles personal information through its applications, websites, features, and related services. It does not govern how a Connected Platform independently handles information; the platform’s own notices and terms apply to its processing.

The following definitions apply throughout this Policy:

Selecting or following a public Creator does not, by itself, make that Creator’s profile a user-authorized Connected Channel, and it does not mean the user owns the Creator’s profile or content. A Connected Channel exists when a user connects a content source through an authorization or connection flow.

“Delete SuperFollow Account” means requesting deletion of the account and associated personal information, subject to the lawful exceptions and timing in this Policy. “Disconnect Connected Channel” means removing one external connection and its user-specific authorization from SuperFollow. Disconnecting does not delete the SuperFollow Account, revoke authorization at the Connected Platform, delete content held by the Connected Platform, or necessarily erase independently public or shared Creator and Connected Content records.

3. Information we collect

The information we collect depends on how you use SuperFollow.

Category Examples
SuperFollow Account, profile, and authentication information Email address, display name, avatar, authentication identifiers, sign-in information, session tokens, session status, and related security records.
Connected Channel and relationship information Channel identifiers and profile information; the fact, status, and scope of a user-authorized connection; authorization records; subscription, follow, and comparable relationship information; and Creator selections.
Connected Content and metadata Public posts, videos, audio, images, titles, captions, quoted material, hashtags, channel information, timestamps, identifiers, engagement or relationship metadata, and related public information.
Authorization credentials OAuth access and refresh tokens used to maintain authorized connections. These token columns receive the specific protection described in Section 10.
Feed and User Content information Feeds, prompts and prompt versions, filtering and classification results, read state, preferences, instructions, selected Creators, feed configurations, and shared or imported URLs.
Technical, usage, diagnostic, and security information IP address; device or installation identifiers; operating-system and application version; language; event timestamps; feature interactions; request, delivery, and synchronization events; crash and performance records; and request, anti-abuse, and security logs where generated.
Communications and request records General support messages, privacy and rights requests, copyright or content complaints, related evidence and responses, and records needed to handle or document those matters.
Feedback Suggestions or ideas you choose to provide specifically about improving SuperFollow.
Public Creator and non-user information Public Creator profiles, Connected Content, identifiers, names, biographies, and related metadata that may concern a person who does not use SuperFollow. Section 12 provides an indirect-collection notice for those people.

Some Connected Content may incidentally contain personal information, sensitive subject matter, or information about minors. We do not treat public availability as removing all privacy interests or legal obligations.

4. Sources of information and whether it is required

For creator feeds, SuperFollow collects publicly available social-media content and associated profile information and metadata from sources you select.

We receive information from these source categories:

Some information is necessary for a feature. Account identity and authentication information are needed to create and secure a SuperFollow Account. Connected Channel authorization, identifiers, and credentials are needed to establish and maintain that connection. Creator selections, Connected Content, feed configuration, and read state are needed to build and present requested feeds. A prompt and relevant content or context are needed when you request AI-assisted filtering.

You do not have to provide optional information or grant optional consent. If you decline or withdraw information or authorization that a particular feature needs, we may be unable to provide that feature, but declining an optional choice does not by itself prevent use of unrelated features. Revoking a Connected Platform authorization or exercising applicable rights relating to AI processing has the effects described in Sections 6 and 9.

Applicable privacy laws require a legal basis for some processing. The basis depends on the information, purpose, context, and law that applies.

Purpose Typical legal basis where applicable
Create, authenticate, maintain, and secure a SuperFollow Account Performance of our contract with you; legitimate interests in account and Service security; legal obligations where applicable.
Connect and synchronize a Connected Channel at your request Performance of our contract with you and the authorization you choose to grant through the Connected Platform. Consent applies where the governing law specifically requires it.
Build, rank, present, and synchronize feeds apart from AI-assisted filtering or classification Performance of our contract with you and legitimate interests in operating and improving the requested Service, where permitted by applicable law.
Process prompts, prompt versions, normalized Connected Content, and Creator context through AI-assisted systems for filtering or classification Performance of our contract with you to provide requested filtering, where legally available; consent where applicable law requires it. Any additional permission required for sharing personal data with third-party AI must also be obtained, as explained in Section 6.
Maintain read state, preferences, sharing, imports, and cross-device functionality Performance of our contract with you and your direction when you initiate a sharing or import flow.
Diagnose failures, measure Service operation, improve reliability, and understand product use Legitimate interests in understanding how SuperFollow is used and improving its operation, where permitted by applicable law; consent where the law requires it for analytics processing. Section 7 describes the information shared with our analytics provider.
Prevent fraud, abuse, and security threats; protect users, rights, safety, and Service integrity Legitimate interests in safety and security; legal obligations where applicable.
Respond to support, privacy, copyright, and content complaints Performance of our contract; compliance with legal obligations; and legitimate interests in resolving requests, disputes, and misuse.
Comply with law, enforce the Terms, and establish, exercise, or defend legal claims Legal obligations and legitimate interests in legal compliance and the protection of rights.
Process public Creator and non-user information Legitimate interests in providing user-requested Creator feeds and related Service functions, subject to data minimization, a documented balancing assessment, and the right to object described in Section 12.

Where we rely on consent, acknowledgment of this Policy is not that consent. You may withdraw consent for future processing through the contact route in Section 17. Withdrawal does not retroactively make earlier lawful processing unlawful. Any explicit permission required by applicable law or platform rules is not replaced by acknowledgment of this Policy.

Where we rely on legitimate interests, we consider the purpose, necessity, reasonably expected use, likely effect on people, and safeguards such as minimization, access restrictions, retention limits, and objection rights. Public availability alone is not a sufficient answer to a valid objection.

6. AI-assisted processing and automated decisions

When you use AI-assisted feed filtering or classification, SuperFollow sends your filtering prompts and relevant content to third-party AI providers. This can include post text, titles, quoted material, hashtags, Creator names and biographies, related metadata, and feed or post identifiers used to associate the results with the right content. Prompts and content may contain personal information about you, Creators, or other people. These providers process this information to assess content against your instructions and return filtering or classification results for your feeds.

AI-assisted results are probabilistic. They can be incomplete, inaccurate, or inconsistent and should be treated as content-organization assistance rather than facts about a person. SuperFollow does not use this filtering or classification to make decisions that produce legal or similarly significant effects, and it must not be used to make employment, credit, housing, education, insurance, eligibility, law-enforcement, or other consequential decisions about anyone.

This sharing of personal information with a third-party AI provider is subject to applicable data-protection law and platform rules. Acknowledging this Policy, accepting the Terms, or connecting a Connected Channel does not replace any explicit permission those rules require. This disclosure does not itself constitute that permission.

You can contact us using the route in Section 17 about AI-related processing, including any applicable rights to withdraw consent or request deletion. The retention and deletion provisions in Section 9 apply to personal information processed for these features.

Automated security or anti-abuse controls may temporarily restrict activity. Where applicable law requires it, you may request human review or otherwise challenge a restriction through the support route in Section 17.

7. How we disclose information

We disclose only the information reasonably necessary for the following purposes and recipient categories. Providers that process information for us are subject to appropriate contractual, confidentiality, security, or legal restrictions where applicable.

Recipient category Purpose and information involved
Authentication providers Account identity, sign-in, session, and security information needed to authenticate and protect accounts.
Cloud hosting, storage, and delivery providers Information needed to host, store, back up, process, and deliver SuperFollow.
AI-processing providers Third-party AI providers receive filtering prompts, relevant Connected Content and metadata, Creator names and biographies, and feed or post identifiers to perform filtering or classification, as described in Section 6.
Analytics and product-operation providers Google (Firebase Analytics) receives information about app interactions, filtering prompts, Creator selections, and associated device and application information to help us understand use of SuperFollow and improve the Service, as described below.
Diagnostics and performance providers Crash, error, performance, device, request, and limited contextual information needed to diagnose and repair failures.
Support and communications providers Contact and request information needed to respond to support or send operational communications.
Security and anti-abuse providers Account, device, request, event, and security information needed to detect and address fraud, abuse, or threats.
Realtime-delivery providers Connection, account, event, and delivery information needed to synchronize or deliver requested updates.
Professional advisers Information reasonably necessary for lawyers, auditors, insurers, accountants, and similar advisers bound by appropriate duties.
Recipients you direct Information you ask us to disclose through a sharing, import, connection, or other user-directed feature.
Authorities and affected parties Information required by valid legal process or law, or reasonably necessary to protect users, rights, safety, security, or Service integrity.
Parties to a corporate transaction Information reasonably necessary to evaluate or complete a merger, financing, reorganization, sale, insolvency, or transfer of all or part of the Service, subject to confidentiality and legally required notice and choices before a materially different use.

Firebase Analytics. We use Google Firebase Analytics to understand how people use SuperFollow and to improve its features and reliability. We send information about actions taken in the app, including the full text of filtering prompts when you create or update them and identifiers of Creators added to or removed from a feed. These events may be associated with device or app-instance identifiers, event timestamps, and other application and usage information collected by the analytics service. Filtering prompts and Creator selections may contain or reveal personal information, including interests you express through your use of the Service.

When handling a privacy, copyright, safety, or content complaint, we may share a minimized copy of the notice or response with an affected user, rights holder, Connected Platform operator, professional adviser, or authority when reasonably necessary to investigate and resolve the matter. We do not use this permission to publish or disclose unnecessary contact or identity information. Please avoid including information that is not needed to understand your complaint.

We may use or disclose aggregated or de-identified information where it is not reasonably capable of identifying a person, and we do not deliberately reidentify it except to test or protect de-identification as permitted by law.

SuperFollow does not sell personal information and does not share personal information for cross-context behavioral advertising, as those terms are defined under applicable United States state privacy laws.

8. International transfers

SuperFollow and the providers described in Section 7 may process information outside the country where you live. Privacy and data-protection laws in those places may differ from those in your country.

International transfers are subject to the safeguards required by applicable law. Depending on the destination and recipient, these may include an adequacy decision or contractual safeguards, together with appropriate security measures. You can contact us at privacy@superfollow.ai for information about the safeguards applicable to your information and how to obtain a copy where you are entitled to one.

9. Retention, disconnection, revocation, and deletion

We keep personal information for the purposes described in this Policy. Retention depends on whether your account or connection is active, whether information is needed to provide a requested feature, and whether it is needed for recovery, security, legal obligations, or a particular complaint or dispute. The following rules apply; any stricter deadline in the Google-authorized data appendix takes priority.

Data or operation Retention approach
SuperFollow Account and user-specific Service data Kept while your account is active as needed to provide the Service. An accepted in-app deletion request immediately deactivates your account and schedules permanent deletion after a five-day grace period. Before the displayed deadline, you can sign in again and choose Restore Account. After restoration, you must sign in again to use the account. Permanent deletion removes your account and its user-owned Service data, subject to the limited exceptions explained below.
Restricted recovery copies Backup copies are kept separately for recovery and security. Retention depends on recovery needs and applicable legal and deletion requirements. They are not used for ordinary product access. If a backup is restored, deletion records are used to prevent deleted accounts from being reactivated and to reapply deletion to their data. The stricter deadlines in the Google-authorized data appendix also apply to covered data in recovery copies.
OAuth access and refresh tokens Retained only while needed for the authorized connection. Stored tokens are deleted when the connection is removed or account deletion is completed, subject to a short operational delay and legal exceptions. Deleting a stored token is not provider-side revocation.
Authorized data subject to the stricter appendix deletion rule Deleted under the applicable seven-day requirement when a covered trigger occurs.
Connected Platform-authorized data subject to a stricter refresh-or-delete rule Refreshed or deleted within the 30-day period stated in the applicable appendix unless a narrower rule applies.
Prompts and prompt versions Current prompts and earlier versions may be kept while your account exists to apply your filtering rules and explain past filtering results. Editing or removing a prompt from active use does not necessarily erase its history. User-owned prompt history is included in account deletion, subject to the limited exceptions below.
Analytics and diagnostics Retention depends on the periods configured for the analytics or diagnostics service and the purpose of the record, including analyzing usage trends, investigating errors, and resolving security incidents. Records needed for a particular investigation or legal obligation may be retained for that purpose. You can contact us about the retention applicable to your information.
Legal, security, and complaint records Retained only as necessary to satisfy legal obligations, establish or defend claims, prevent abuse, or document request handling.
Public or shared Creator and post records Retained while lawfully needed to serve users or support legitimate Service functions. One user’s disconnect does not automatically erase independently public or shared records lawfully used for another purpose or user.
Account-deletion records Limited account identifiers and records of deletion requests, cancellations, and completion are kept separately after account deletion. They help prevent deleted accounts from returning after recovery and document how requests were handled. They do not contain a copy of your feeds or prompts. Retention depends on whether a recoverable backup could contain the account and whether a record is needed for a legal, security, or request-handling purpose. These records are not erased as part of deleting the account.

The following are separate actions with different effects:

  1. Disconnect a Connected Channel in SuperFollow. This removes the user-specific connection and its stored authorization credentials from SuperFollow and stops synchronization through that connection. It does not delete the SuperFollow Account, revoke authorization at the Connected Platform, or necessarily erase independently public or shared Creator and Connected Content records.
  2. Revoke Connected Platform authorization at the provider. This withdraws the provider authorization and should prevent future access under that authorization when the provider processes the revocation. It does not itself delete the SuperFollow Account or every copy of information already lawfully retained by SuperFollow. Deleting stored credentials in SuperFollow is not the same as provider-side revocation.
  3. Delete SuperFollow Account. In the app, open Settings → My Profile → Delete My Account and complete the confirmation steps. Your account is deactivated immediately and scheduled for permanent deletion after the displayed five-day grace period. To cancel before that deadline, sign in again and choose Restore Account. This is separate from disconnecting a channel or revoking its authorization.

The scheduled account-deletion process is available through the authenticated in-app flow. An email does not itself start or cancel that process. If you cannot access your account, or want to make another privacy-rights request, contact privacy@superfollow.ai. We will assess the request and any identity-verification requirements under Section 11; this does not limit rights available to you under applicable law.

The device on which you request deletion clears that account’s structured local data and signs it out. Other signed-in accounts and their data are unaffected. An offline device may continue to hold or display cached information until it reconnects; it cannot be wiped remotely while offline. When it reconnects and the deletion status is confirmed, the affected account is signed out and its structured local data is cleared. A temporary connection failure alone does not erase local data. Image and video caches are separate, as explained in Section 10.

Account deletion removes your user-specific authorization credentials, subscription associations, Creator selections, and synchronization state. It does not automatically erase independently public or shared Creator profiles, posts, or media still lawfully used for other users or purposes. This includes publicly available YouTube content. If a record concerns you as a Creator or another person, you can make a separate request under Section 12; public availability does not remove applicable privacy rights.

After permanent deletion, the same email address may be used for a new authentication identity and a new empty SuperFollow Account; deleted data is not restored.

Deletion does not require us to erase information that we must lawfully retain, including limited records needed for legal duties, security, fraud prevention, disputes, or proof that a request was handled. When we retain information under an exception, we restrict it to the relevant purpose and retain it only as long as that reason applies.

10. Security

We use administrative, technical, and organizational safeguards appropriate to the information and risk. These include:

Other safeguards may include access controls, minimization, monitoring, incident procedures, and provider review as appropriate. No method of storage or transmission can be guaranteed completely secure, and these measures are not a warranty that every incident will be prevented.

If a personal-information breach meets an applicable legal notification threshold, we will notify affected people and regulators as required by that law. Timing depends on the jurisdiction, risk, and known facts; we do not promise one universal notification deadline or incident outcome.

11. Your choices and privacy rights

You can choose whether to connect a Connected Channel, select Creators, submit a prompt, share a URL, or provide Feedback. You may disconnect a Connected Channel and may separately revoke authorization through the Connected Platform. Where processing is based on consent, you may withdraw that consent for future processing, subject to the feature consequences explained in this Policy.

Depending on where you live and which law applies, you may have rights to:

To protect people and accounts, we may request information reasonably necessary to verify identity and locate relevant records. Verification will be proportionate to the request and sensitivity of the information. Where applicable law permits an authorized agent, the agent may submit a request, but we may require proof of authority and direct identity confirmation from the person concerned.

We acknowledge and respond to requests within the period required by the law that applies to the requester. If that law permits an extension, we will communicate the reason and revised deadline. We do not discriminate against a person for exercising an applicable privacy right, although fulfilling a deletion or consent-withdrawal request may make a feature unavailable when the requested information or processing is necessary for it.

The designated request route is privacy@superfollow.ai. If we deny or limit a request, we will explain the reason where required and provide any applicable appeal or complaint route. You may also complain directly to the privacy or data-protection regulator in your place of residence, work, or the alleged infringement where applicable.

12. Public Creator and non-user information

This section is an accessible indirect-collection notice for people who may not use SuperFollow but whose public profile or Connected Content is processed through the Service.

Who may be affected. Creators, people identified in Creator profiles, and people who appear in public Connected Content may be affected even if they have not created a SuperFollow Account.

Information and sources. We may process public names, handles, identifiers, biographies, profile and channel information, posts, videos, audio, images, text, titles, captions, quoted material, hashtags, timestamps, and related metadata. This information comes from publicly available social-media sources selected by our users.

Purposes and legal basis. We process this information to build, filter, rank, present, synchronize, and secure user-requested feeds; respond to privacy, copyright, safety, and content complaints; and maintain limited evidence needed for disputes or request handling. Where applicable, we rely on legitimate interests in providing those functions. That reliance requires a documented balancing assessment, data minimization, reasonable safeguards, and a right to object. We consider the public nature and context of the source, reasonable expectations, the nature of the information, potential effects on the person, other users’ interests, and available safeguards. We do not treat “the information is public” as a complete answer to an objection.

Recipients, transfers, and retention. The recipient categories in Section 7, transfer approach in Section 8, and retention criteria in Section 9 apply. We do not sell this information or share it for cross-context behavioral advertising.

Requests and complaints. Affected people may request access, correction, erasure, restriction, or objection where applicable by using privacy@superfollow.ai. Content-ownership and copyright matters use copyright@superfollow.ai. We may verify identity and the connection to the relevant profile or content. We will evaluate the request against applicable rights, legal duties, the public nature and context of the source, other users’ lawful interests, and available technical measures. Any refusal or limitation requires a specific lawful reason and an applicable appeal or complaint route.

We assess requests individually and take the action required by applicable law. Depending on the information and the rights involved, this may mean correcting information, removing access through SuperFollow, restricting further processing, or deleting or anonymizing information. We take account of other people’s rights and any lawful reason to retain information. Where a request requires us to stop processing information, that obligation also applies if the same information is encountered again or recovered from a backup. We will explain any refusal or limitation and the remedies available to you where required.

This section provides notice to people whose information we obtain indirectly. Where applicable law requires us to provide additional notice directly, we will do so unless an exception under that law applies.

13. Children and age restrictions

A person must be at least 18 years old to create or use a SuperFollow Account. SuperFollow is not directed to children.

The 18+ account rule does not mean that public Connected Content can never include information about a minor. A minor may appear incidentally in a public post, video, image, profile, quotation, or related metadata. We cannot reliably identify the age of every person who appears in external public content.

If you believe an ineligible minor has created or used a SuperFollow Account, or that SuperFollow processes personal information about a minor in a way that requires action, contact privacy@superfollow.ai. Copyright or content-ownership matters may be sent to copyright@superfollow.ai. We will investigate credible reports and delete, suppress, restrict, or otherwise handle the information as applicable law requires.

14. United States state disclosures

This section applies only to the extent a United States state privacy law applies to the person and processing at issue. It does not state that every state law applies to SuperFollow or that every right is available in every circumstance.

For a legally required lookback period, including the preceding 12 months where that period applies, the categories described in Section 3 map generally to the following statutory categories:

Statutory category Examples SuperFollow may process Source, purpose, recipients, and retention
Identifiers and customer-record information Email address, display name, profile image, account and authentication identifiers, IP address, device or installation identifiers, Connected Channel and Creator identifiers. Sources are described in Section 4, purposes in Sections 5 and 6, recipient categories in Section 7, and retention criteria in Section 9.
Internet or other electronic-network activity Feature interactions, feeds, prompts, read state, URLs, request and delivery events, app and device information, crash and security logs, and public Connected Content activity or metadata. Same cross-references.
Audio, electronic, visual, or similar information Public video, audio, images, text, captions, and other Connected Content. Same cross-references.
Inferences Filtering or classification results and preferences derived from prompts, selections, and feed activity for content organization. Same cross-references. These results are not used for consequential decisions about people.
Sensitive personal information, where defined to include account-access credentials Authentication, session, and OAuth credentials used only for account access, requested connections, security, and Service operation. Same cross-references. We do not use this information to infer characteristics about a person.
Other information that may identify or relate to a person User Content, communications, complaint records, public profiles, biographies, and Connected Content that may incidentally reveal personal characteristics. Same cross-references.

SuperFollow has not sold personal information or shared it for cross-context behavioral advertising during the applicable lookback period and does not currently do so. Because we do not engage in those practices, there is no sale or cross-context behavioral-advertising opt-out to exercise. We do not use or disclose sensitive personal information for purposes that trigger a right to limit under applicable state law, based on the practices described in this Policy.

Where applicable, state residents may request access or knowledge, correction, deletion, or portability; use an authorized agent; appeal a decision; and receive equal service and pricing without unlawful discrimination. We will verify requests, agents, and appeals as described in Section 11 and respond within the applicable statutory period. Requests and appeals use privacy@superfollow.ai. We do not offer financial incentives for personal information.

15. Other jurisdiction-specific rights

If European Economic Area or United Kingdom data-protection law applies, the purposes and legal bases in Section 5 apply as relevant. You may have rights of access, correction, erasure, restriction, portability, objection, consent withdrawal, and complaint. In particular, you may object to processing based on legitimate interests. We must stop that processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defence of legal claims. You may complain to the data-protection authority in the country where you live or work or where you believe an infringement occurred.

People in other jurisdictions may have comparable or additional rights under applicable law. The worldwide request route in Section 11 is available for inquiries, but this Policy does not contractually grant every statutory right worldwide or claim that a law applies when its scope or threshold is not met. Mandatory local protections remain unaffected.

The rights and contact routes described here do not limit any additional rights, safeguards, or remedies provided by the law that applies to you.

16. Changes to this Policy

We may update this Policy to reflect changes in the Service, processing, law, or operational arrangements. The “Last updated” and effective dates at the top identify the version.

We will provide notice of material changes in a manner appropriate to the change and applicable law. If a change introduces a materially different data use that requires consent or renewed authorization, we will request it before that use begins. Continued use alone is not consent to a materially different processing purpose. If affirmative acceptance of revised terms is legally required, that acceptance will be requested separately from acknowledgment of this Policy and from other consents.

17. Contact and complaints

For privacy questions, requests, and complaints, use these contact routes:

Please describe the request and the relevant account, profile, content, or interaction in enough detail for us to locate it, but do not send unnecessary sensitive information. We may ask for proportionate identity or authority verification.

You may also complain to a competent privacy or data-protection regulator where applicable. Contacting us first may allow us to address the issue, but it is not a condition of contacting a regulator.

Google-authorized data appendix

This appendix explains how we handle information received through Google sign-in and YouTube authorization. SuperFollow uses YouTube API Services. Google’s handling of information is described in the Google Privacy Policy.

Information and purposes

When you choose Google sign-in, SuperFollow receives your Google Account email address and basic profile information for account authentication and profile setup.

When you connect a YouTube channel, SuperFollow requests the youtube.readonly permission. This permission allows SuperFollow to read your subscriptions and relevant channel and video metadata to build and filter your feeds. It does not authorize SuperFollow to modify your YouTube account or content.

SuperFollow’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Google-authorized data is not used for advertising, is not sold, and is not subject to prohibited human reading. Human access occurs only in the narrow circumstances permitted by the applicable Google rules: when the user affirmatively agrees to specific data being read; when access is necessary for security purposes, such as investigating abuse; when access is necessary to comply with applicable law; or when the data, including derivations, is aggregated and used for internal operations in accordance with applicable privacy and other jurisdictional requirements. Anonymization alone does not create an exception; the Limited Use requirements continue to apply to anonymized data.

Managing authorization

You can review, manage, or revoke SuperFollow’s Google authorization through Google Account permissions.

The three actions below are different:

The seven-day deadline above controls over any longer internal retention or recovery-copy schedule for the applicable Google-authorized user data. Other stored Google-authorized data that remains subject to YouTube’s refresh requirement is refreshed or deleted within 30 days. That 30-day rule never extends a narrower deletion deadline. OAuth access and refresh tokens receive the token-specific protection described in Section 10.

X connection and data use

When you connect your X account, SuperFollow receives your account identifier, display name, username, profile image, and public account metrics through the authorized connection. We also collect public information about the accounts you follow and their content, and use it with your Creator selections to build and update your feeds. Relevant content may be processed for AI-assisted filtering as described in Section 6; analytics sharing is described in Section 7.

We store authorization credentials to maintain the connection and send X the authorization and account-information requests needed to provide it. X processes information it receives under its own Privacy Policy. The permissions we request are read-only; they do not allow SuperFollow to publish posts, follow or unfollow accounts, or change your X profile.

You can disconnect your X account in SuperFollow or revoke its authorization through X’s own connected-app controls. These actions have different effects, as explained in Section 9. For questions or requests about the information SuperFollow holds, contact privacy@superfollow.ai as described in Section 17.

Effective date: September 5, 2026

Last updated: September 5, 2026

Version: 1.0

Canonical URL: https://superfollow.ai/privacy/