How cowral collects, uses, and protects your data.
Cowral ("we", "our", "us") is a creator analytics platform that helps you understand your social media performance and generate tailored content. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the choices you have.
By creating a Cowral account or connecting a social profile, you agree to the practices described in this policy. If you do not agree, please discontinue use of the platform.
We collect three categories of data:
We only ever read public data from your social profiles. We never request write access, post on your behalf, or store private messages.
Your data is used exclusively to deliver and improve Cowral. Specifically:
We do not sell your personal data, use it for third-party advertising, or build profiles for resale.
We share data only with the sub-processors required to run the platform. Each is bound by data processing agreements and restricted to the purpose for which data is shared.
| Sub-processor | Purpose | Region |
|---|---|---|
| Stripe | Payment processing | US / EU |
| Postmark | Transactional email delivery | US |
| Cloudflare | CDN, DDoS protection | Global |
| OpenAI | AI content generation | US |
| Render / Railway | Cloud infrastructure | US |
We may disclose data if required by law, court order, or to protect the rights and safety of Cowral and its users.
We retain account and social data for as long as your account is active. After account deletion, personal data is purged within 30 days, except where we are legally required to retain it (e.g. billing records retained for 7 years per tax law).
Anonymised, aggregated analytics data may be retained indefinitely as it cannot be used to identify you.
Depending on your jurisdiction you may have the right to:
To exercise any of these rights email privacy@cowral.com. We will respond within 30 days.
We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, hashed passwords (bcrypt), and regular third-party security audits. Access to production systems is restricted to authorised personnel only.
No system is 100% secure. If you discover a vulnerability please report it responsibly to security@cowral.com.
We may update this policy from time to time. When we make material changes we will notify you via email and display a banner on the platform at least 14 days before the changes take effect. Continued use after that date constitutes acceptance of the revised policy.
Questions or complaints about this policy can be directed to: