Privacy Policy — MyDirector AI

1. Who we are

MyDirector AI Inc.(“MyDirector”, “we”, “us”, “our”) is a Florida (USA) corporation. We operate the MyDirector AI platform available at mydirector.ai and app.mydirector.ai.

Principal place of business: 7901 4th St N, Ste 300, St. Petersburg, FL 33702, United States.

For privacy questions, contact us at hello@mydirector.ai.

2. Data we collect

We collect the following categories of data:

Account data: email address, name, password hash.
Onboarding data: niche, goals, reference accounts, brand positioning.
Interview recordings: audio and/or video of your monthly AI Director sessions.
Uploaded assets: any video clips, podcast recordings, or images you upload.
Generated content: Reels, carousels, and captions created by our AI editor.
Publishing logs: records of posts published on your behalf, including timestamps and platform identifiers.
Usage data: page views, feature usage, session duration, device type, browser type, IP address.
Instagram data: See Section 3 below for full details.

3. Data we receive from Instagram

When you connect your Instagram Business or Creator account, we receive data via the official Instagram Graph API under the following permissions:

instagram_business_basic

Profile data

Instagram username, display name, profile picture URL, biography, follower count, following count, and media count. Used to populate your connected-account dashboard.

instagram_business_basic

Media data

Media IDs, media types (IMAGE, VIDEO, CAROUSEL_ALBUM), captions, timestamps, and permalink URLs of your existing posts. Used to display your media library inside MyDirector.

instagram_business_content_publish

Publishing access

This permission grants us the ability to create and publish Reels and carousel posts on your behalf. We only publish content that you have explicitly approved inside MyDirector. We never publish without your prior approval.

instagram_business_manage_insights

Analytics data

Post-level metrics (impressions, reach, likes, comments, shares, saves) and account-level metrics (profile visits, follower growth). Used to display your analytics dashboard.

instagram_business_manage_comments

Comment data (coming soon)

Comment text, commenter username, and timestamps on your posts. Will be used to display and respond to comments from inside MyDirector. This permission is not yet active.

instagram_business_manage_messages

Message data (coming soon)

Instagram Direct Messages sent to and from your account. Will be used for engagement and lead-generation automations you configure inside MyDirector. This permission is not yet active.

For full details see our Instagram Integration page.

4. How we use data

We use your data to:

Provide, maintain, and improve the MyDirector platform.
Personalize your AI Director interview prompts using your brand profile and market research.
Generate short-form video and carousel content using AI (OpenAI / Anthropic).
Publish approved content to your connected social media accounts.
Display analytics and performance metrics.
Send transactional emails (account confirmation, publishing notifications, billing).
Comply with legal obligations.

We do not use your data for advertising targeting or sale to third parties.

5. Data we do NOT use for AI training

We do not use your Instagram content, your interview recordings, or your uploaded assets to train public AI models. Your data is processed by AI providers (OpenAI, Anthropic) solely to generate content for your account, in accordance with our agreements with those providers which prohibit training on your data.

6. Sharing & sub-processors

We share data only with the following sub-processors, under data processing agreements:

Sub-processor	Purpose
Supabase	Database & file storage (US region)
OpenAI / Anthropic	AI content generation
Amazon Web Services	Cloud infrastructure (US region)
Vercel	Web hosting & edge delivery

We do not sell, rent, or share your data with any other party, except as required by law.

7. International transfers

MyDirector AI Inc. is based in the United States. All data is stored on US-based infrastructure (Supabase / AWS, US region). If you are located outside the United States, your data will be transferred to and processed in the US. By using MyDirector, you consent to this transfer.

8. Retention

Data type	Retention period
Account data	Until account deletion
Interview recordings	Until you delete them or delete your account
Instagram profile data	Until you disconnect Instagram or delete account
Instagram media & analytics	30 days after disconnection or account deletion
Billing records	7 years (legal requirement)
Usage logs	90 days

9. Your rights

Depending on your location, you have the following rights:

Access: Request a copy of the data we hold about you.
Rectification: Correct inaccurate or incomplete data.
Deletion: Request deletion of your data. See our Data Deletion page.
Portability: Receive your data in a machine-readable format.
Opt-out (CCPA): California residents may opt out of the “sale” of personal information (we do not sell personal information).

To exercise any right, email hello@mydirector.ai. We will respond within 30 days.

10. Children

MyDirector is not directed at children under 13. We do not knowingly collect data from children under 13. Paid subscriptions require the user to be at least 18 years old. If you believe a child has provided us data, contact hello@mydirector.ai.

11. Security

We use industry-standard security measures including TLS 1.2+ in transit and AES-256 encryption at rest. See our Security page for full details.

12. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting the updated policy on this page with a new “Last updated” date. Continued use of MyDirector after a change constitutes acceptance of the updated policy.

13. Contact

Privacy inquiries: hello@mydirector.ai

MyDirector AI Inc., 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA