Privacy policy
Chikaboom is a workspace where a designer builds brand templates and a team fills them in and publishes social posts. This page explains what we store, why, and how you can remove it. Questions: oleksi.slusarishere@gmail.com.
What we collect
- Account: your email address. With "Continue with Google" we also receive your name and the fact that Google verified the email. We never see your Google password.
- Brand workspace content: brand kits (colors, fonts, logos), templates, text and images you add to posts, captions, schedules and approval notes.
- Uploads: images you upload or generate in the gallery.
- Connected tools, only if an owner sets them up: access tokens for Figma, Notion, Jira or social networks, and AI keys. They are stored server-side and never shown in the browser.
- Technical data: a session cookie that keeps you signed in, and server logs (IP address, time, request) used for security and rate limiting.
Why
To sign you in, show you the brands you belong to, render and schedule your posts, and keep the service secure. We do not sell personal data and do not use it for advertising.
Who processes it for us
- Railway hosts the application and its storage.
- Resend delivers sign-in emails.
- Google handles "Continue with Google" sign-in.
- AI providers (Google Gemini, Anthropic) receive the prompt, text or image only when someone in the brand uses an AI feature, with that brand's key.
- Figma, Notion, Jira and social networks exchange data only when a brand owner connects them.
Who can see your content
Members of the same brand and its owner (the agency that set it up). Nobody outside the brand has access. Every user gets a private copy of the demo brand AURORA to try things out.
How long we keep it
As long as your account or brand exists. Sign-in links expire after 15 minutes; sessions after 30 days.
Your choices
Email oleksi.slusarishere@gmail.com to get a copy of your data, correct it or delete your account. We answer within 30 days. If you are in the EU/EEA you also have the right to complain to your data protection authority.
Cookies
One essential session cookie, plus a short-lived cookie during Google sign-in. No advertising or analytics cookies.
Changes
If this policy changes we will update the date above and, for material changes, let signed-in users know.