Privacy Policy

Last updated: March 11, 2026

1. Introduction

DayBrew ("we", "our", or "us"), operated by BONE Tech Ltd, provides an AI-powered content design and social media management platform at daybrew.ai. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

2. Information We Collect

Account Information

  • Name, email address, and login credentials
  • Company or brand information you provide

Social Media Data (via authorized APIs)

  • Instagram Business account profile and media data (via Meta Graph API)
  • TikTok account profile, video data, and analytics (via TikTok API)
  • Content performance metrics: impressions, reach, engagement, follower demographics

Content You Create

  • Images, videos, and text generated through our platform
  • Brand assets and design preferences

3. How We Use Your Information

  • To provide AI-powered content generation and design services
  • To publish content to your connected social media accounts on your behalf
  • To display content performance analytics in your dashboard
  • To improve our AI models and recommendation quality
  • To communicate with you about your account and our services

4. Data Sharing

We do not sell your personal data. We share data only with:

  • Meta Platforms, Inc. — to publish and retrieve Instagram content via Graph API
  • TikTok/ByteDance — to publish and retrieve TikTok content via official API
  • AI service providers (see below)
  • Cloud infrastructure providers (for hosting and storage)
  • As required by law or to protect our legal rights

5. AI Service Providers & Brand Data

To generate content and provide intelligent recommendations, we send portions of your brand data (including your Brand Brain profile, content briefs, and creative preferences) to third-party AI providers via their APIs. Our current providers include:

  • Google (Gemini API) — our primary AI model for content generation
  • Anthropic (Claude API) — used as a fallback and for specific tasks

All data sent to these providers is encrypted in transit using TLS. Under the current policies of each provider, data submitted through their APIs is not used to train their foundation models. We select providers that offer this commitment and will update this policy if our provider list changes.

We send only the minimum brand context necessary for each generation task. We do not send your login credentials, payment information, or social media access tokens to AI providers.

6. Data Retention & Deletion

You may request deletion of your data at any time by contacting us at hello@bonetechltd.com or using the account deletion feature in your settings. Upon receiving a deletion request, we will remove your data within 30 days and notify connected platforms as required.

7. Meta Platform Data

When you connect your Instagram account, we access data through the Meta Graph API. We use this data solely to provide our services to you. We do not use Meta platform data for purposes other than providing and improving our services to you. You can revoke access at any time through your Instagram settings or our platform.

8. Analytics & Session Recording

We use PostHog, a product analytics platform, to understand how you interact with our services and to improve your experience. This includes:

  • Usage analytics: page views, feature usage, and interaction patterns
  • Session recording: visual replays of your interactions within our platform (clicks, scrolls, and page navigation — not your screen outside of DayBrew)
  • Error tracking: technical errors encountered during your session

Session recordings are used solely for product improvement and debugging. Password fields are automatically masked. Recordings are stored securely by PostHog (SOC 2 Type II compliant) and are accessible only to our product team. By using DayBrew, you consent to this data collection. You may request deletion of your recorded sessions at any time by contacting hello@bonetechltd.com.

9. Data Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security audits to protect your data.

10. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent for social media connections at any time

11. Contact Us

BONE Tech Ltd
Email: hello@bonetechltd.com
Website: daybrew.ai