Privacy Policy

Pocky is operated by Use Pocky LLC, a New York limited liability company with its place of business at 418 Broadway #6354, Albany, NY 12207. In this policy, "we", "us" and "Pocky" mean that company, and "you" means the person or business using the service at usepocky.com.

This policy covers the Pocky website and application. It does not cover the third-party services we rely on to deliver it, each of which has its own policy. Every one of them is named on our subprocessors page.

Everything below is either something you give us, something the product generates while you use it, or something your browser sends automatically. We do not buy personal information from data brokers and we do not enrich your profile from third-party sources.

Pocky does not run its own AI model. When you generate a brief, we send the inputs needed to answer, which is your brand profile, your campaign inputs, any brand document excerpt you provided, and our prompt, to Anthropic's API, and Anthropic's Claude models return the brief. That transmission is the only purpose for which the content leaves our systems.

Anthropic processes this content under its Commercial Terms of Service and its commercial data retention policy. Two commitments in those terms matter to you:

• Anthropic may not train its models on the content we send through the API.
• Anthropic automatically deletes API inputs and outputs on its backend within 30 days of receipt, except where content is flagged under its Usage Policy, in which case it may be retained for up to two years, with trust and safety classification scores retained for up to seven years.

We do not send your account email, your billing details or your payment information to Anthropic. We do send a request identifier, so a failed generation can be traced, and a pseudonymous account identifier, which Anthropic uses to enforce its Usage Policy.

We do not use your inputs, your brand documents or your generated briefs to train any AI model, and our model provider does not train on them either. There are four narrow exceptions, which are the ones every mature AI company carries:

1. Abuse and safety. We and Anthropic may review content flagged by automated safety systems, or reported to us, in order to enforce the Acceptable Use Policy and Anthropic's Usage Policy.
2. Aggregated and de-identified data. We use counts, costs and error rates that cannot identify you or your brand to operate, debug and improve the service.
3. Feedback you choose to send. If you report a bug or send us an example of a bad brief, we use what you sent to fix it, including keeping it in a test set.
4. Legal compliance. We retain and disclose content where the law requires it, as described in section 7.

We use PostHog for product analytics, session recording and error tracking. It tells us which steps of the brief wizard people abandon, what a visitor saw before they signed up, and what broke when a generation failed. We do not use advertising cookies, and we do not run third-party ad or social tracking pixels.

Session recording

PostHog records how you move through the interface: pages, clicks, scrolling and the shape of the page as you saw it. We use it to work out why a step failed for a real person rather than guessing from a stack trace. Recordings are stored by PostHog on our plan's retention schedule and are not used for advertising or sold to anyone.

Turning analytics off

Email ops@usepocky.com and we will exclude your account from analytics and session recording, and delete the analytics profile we already hold for you. We will confirm when it is done. This does not limit your access to any feature.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose information in four situations only.

• Subprocessors. Vendors that run part of the service for us, under contract, on our instructions, with no right to use your content for their own purposes. Every one is named on our subprocessors page, which we update at least 30 days before a new one starts.
• Legal process. Where we are required by law, subpoena or court order, or where disclosure is necessary to protect our rights, the safety of a person, or the integrity of the service. We will tell you unless we are prohibited from doing so.
• Business transfer. If the business is acquired or merged, your information may transfer as part of the transaction. The acquirer stays bound by this policy until it gives you notice of a new one.
• With your direction. When you share a brief, export it, or otherwise ask us to send something somewhere.

Data is encrypted in transit and at rest. Access to production data is restricted to the people who operate the service. Every table holding your content has row-level security enabled in the database, so the ordinary read and write paths cannot reach another account's rows, and the small number of privileged server paths check ownership explicitly. We cap AI spend per account and across the service, which also limits the blast radius of a compromised account.

No system is perfectly secure. If we become aware of a breach affecting your personal information we will notify you and any regulator we are required to notify, without undue delay.

Depending on where you live, you may have the right to access the personal information we hold about you, to receive a copy in a portable format, to correct it, to delete it, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising any of these rights. Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon, Montana and other states with comprehensive privacy laws have these rights by statute.

How to exercise them

Email ops@usepocky.com from the address on your account and tell us what you want. We will confirm your identity by that email address, and respond within 45 days. If we need longer we will tell you why before the deadline. There is no charge unless a request is manifestly excessive or repetitive.

Deletion in practice

Deleting your account removes your sign-in record, and your brands, campaigns and briefs go with it. Favorites and any waitlist entry under your email are removed outright. Deleting a single brand, campaign or brief from inside the product marks it deleted rather than erasing it; ask us if you want it erased outright. Usage records are stripped of your identifier rather than deleted, so that our cost and volume totals stay accurate. Billing and tax records are retained for the period in section 8, because the law requires it. You can also ask an authorized agent to make a request on your behalf, with written proof of authorisation.

Appeals

If we decline a request, you may appeal by replying to our decision. We will review and respond within 45 days of the appeal. Some states also allow you to complain to your attorney general.

Pocky is a business tool and is not directed to children. You must be at least 18 to use it. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, tell us and we will delete it.

Pocky is offered to customers in the United States only. Your account, your content and your briefs are stored and processed in the United States. The one exception is the network layer: our hosting provider and the Cloudflare bot check on our sign-in forms both run on global edge networks, so request-level metadata such as your IP address may be handled at an edge location outside the United States before the request reaches us.

We do not currently offer the service to residents of the European Economic Area, the United Kingdom or Switzerland, and we do not target those markets. If you access the service from outside the United States, you do so on your own initiative and you are responsible for compliance with local law.

We will update this page when the product changes. The effective date at the top always reflects the current version. For a material change, which means one that expands how we use your information or reduces your rights, we will email the address on your account at least 30 days before it takes effect.

Privacy questions, data requests and everything else: ops@usepocky.com. By post: Use Pocky LLC, 418 Broadway #6354, Albany, NY 12207.