Privacy Policy

1. What data we collect

Extension: When you connect Substack to AISubflow, the extension reads your Substack session cookies (substack.sid, substack.lli, cf_clearance, __cf_bm) and sends them to our backend. It may also read the URL of your open Substack tab to capture your handle (@username). This data is sent only to your AISubflow account.

Web app: When you sign up, we collect your email and a hashed password. When you schedule or publish notes, we store the note content and schedule time.

2. How we use it

We use Substack cookies solely to authenticate with Substack on your behalf and publish notes when you schedule them. We use your email for sign-in and your note content for publishing.

3. Sharing

We do not sell or share your data with third parties. Substack cookies are stored in our database and used only to post notes on your behalf.

4. Storage

Data is stored on our servers (Neon database, Vercel). Substack cookies are stored until you disconnect Substack in Settings.

5. Your rights

You can disconnect Substack at any time in Settings to delete stored cookies. You can delete your account by contacting us.

6. Contact

For privacy questions, contact: privacy@aisubflow.com