myWillbox Privacy Policy

(a) Information you give us.

• Account information: your email address. We use passwordless sign-in links, so we do not store a password for your myWillbox account.
• Brand voice and settings: the description of your voice, example captions, phrases to avoid, your niche, and per-account preferences you set.
• Content: the videos you upload, and the captions you create or edit.
• Requests and messages: if you join our waitlist, your email address and the optional details you enter (such as your niche and social handles). If you email us, we receive your address and whatever you send.

(b) Information from the platforms you connect.

• When you connect an account, the platform (for example X, Meta, TikTok or Google/YouTube) shows you its own authorization screen. After you approve, it gives us a unique account ID, your username or handle and display name (so we can show which account is connected), the permissions you granted, and access and refresh tokens.
• We request only the permissions needed to publish for you. We do not read your direct messages. If we add a feature that reads engagement results for posts we publish, we will update this policy and tell you before it applies to you.

(c) Information created as you use the Services.

• A short description of what appears in each video, generated by AI so captions can be regenerated without re-sending images.
• The captions we generate for each of your connected accounts, and whether you edited or approved them.
• Your publishing history: what was posted to which account and when, the platform’s post ID, and any success or failure details.

(d) Information collected automatically.

• Server logs. Our hosting provider records standard technical information when you use the Services, such as your IP address, device and browser type, the time, the addresses requested, and any errors. We use it to run, secure, and troubleshoot the Services.
• A session cookie that keeps you signed in. It is strictly necessary for the Services to work.
• We do not use advertising or analytics cookies or trackers, and we do not use tracking pixels in our emails.

(e) What we do not collect.

• We do not collect your precise location, contacts, photos, camera or microphone data, or advertising identifiers.
• We do not collect payment card details. If we introduce paid plans, payments will be handled by a payment processor and we will update this policy.

We use information to:

• provide, operate and maintain the Services: sign you in, store your videos, analyze them, generate captions, and publish to the accounts you connected, at your direction;
• send service messages, such as sign-in links and alerts that a connected account needs to be reconnected or that a post failed;
• keep the Services secure, prevent abuse (including spam and violations of platform rules), and find and fix problems;
• respond to your messages and requests; and
• comply with the law and enforce our Terms of Service.

We do not use your information for advertising, we do not sell it, and we do not use your videos, captions or brand-voice notes to train AI models.

We share information only as described here.

(a) Service providers. These companies help us run the Services and handle information on our behalf:

• Vercel hosts the website and servers and stores the video files you upload. See vercel.com/legal/privacy-policy.
• Render hosts our database, which holds your account, captions, settings and encrypted platform tokens. See render.com/privacy.
• Google provides the AI that writes captions, through its Gemini API (see Section 4). See policies.google.com/privacy.
• Twilio SendGrid delivers our emails, such as sign-in links. It receives your email address and the content of each message. See twilio.com/en-us/legal/privacy.

(b) The platforms you connect. When you publish, we send the video, caption and related details to the platform you chose, through its official interface. That platform handles the information under its own terms and privacy policy. We have no control over how a platform uses it.

(c) Legal and safety. We may disclose information if we believe it is required by law or legal process, to protect the rights, safety or property of you, us or others, or to detect and prevent fraud, abuse and security problems.

(d) Business changes. If myWillbox is involved in a merger, acquisition or sale of assets, information may be transferred as part of it. We will tell you if that changes how your information is handled.

(e) What we never do. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

To write captions, myWillbox extracts a small number of still frames from each video you upload and sends them to Google’s Gemini API, together with the platform and handle the caption is for, your brand-voice notes and examples, and any text you supplied. The full video file is not sent.

Google processes that input to return captions to us. We use the paid Gemini API service, under whose terms Google does not use what we send to improve its products, and keeps it only for a limited time to detect abuse. We do not use your content to train AI models.

AI output can be wrong, awkward or inappropriate. Captions are drafts for you to review. Please do not upload videos or enter notes that contain sensitive personal information.

If and when you connect a YouTube channel, we receive information from Google APIs only to publish videos you choose to the channel you connect.

myWillbox’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements (developers.google.com/terms/api-services-user-data-policy).

By connecting a YouTube channel you also agree to be bound by the YouTube Terms of Service (youtube.com/t/terms) and the Google Privacy Policy (policies.google.com/privacy). You can revoke myWillbox’s access to your Google data at any time at security.google.com/settings/security/permissions.

We use one cookie, a secure session cookie that keeps you signed in. We do not use advertising or analytics cookies or trackers, and we do not track you across other websites or apps, so there is no tracking for signals such as Do Not Track or Global Privacy Control to turn off.

We keep your account, videos, captions and settings for as long as your account is open, unless you delete them sooner. We keep a platform’s tokens until you disconnect that account or delete your account. Waitlist entries are kept until you ask us to remove them.

When you delete your account, we delete your login and everything saved for it (see Section 9). Copies may remain in backups kept by our providers for a limited time before they are overwritten. Server logs are kept for a short period set by our hosting provider. We may keep limited information longer if the law requires it or we need it to resolve a dispute or enforce our Terms, for example an email you sent us.

We use reasonable safeguards. Information travels over encrypted connections. Platform access and refresh tokens are additionally encrypted by us before they are stored, and are never shown in the app or returned to your browser. We use only each platform’s official authorization flow, so your platform passwords never reach us. No system is perfectly secure. If we learn of a security breach that affects your information, we will notify you as the law requires.

• See and correct your information. You can view and edit your connected accounts, brand voice, and captions in the app.
• Disconnect an account. You can disconnect any platform in the app, and you can also revoke myWillbox’s access from that platform’s own settings. Our Data Deletion page explains how.
• Delete. In the app, open Settings and choose Delete account. This permanently deletes your login and all information saved for it, including your videos, captions and tokens. You can also email support@lr-holding.org from the address on your account and ask us to delete your information.
• Email. We do not send marketing email. We send only messages related to the service, such as sign-in links and alerts about your accounts and posts.

State privacy rights. Depending on where you live, you may have the right to know what personal information we hold about you; to access, correct or delete it; to receive a copy of it; and not to be treated differently for using these rights. We honor these requests from all users in the United States. To make one, email support@lr-holding.org from the email address on your account. We may ask you to confirm your identity, and we will respond within the time the law requires. If we deny a request, you may reply to appeal it. You may also use an authorized agent. We do not sell personal information or share it for targeted advertising, so there is nothing to opt out of.

The Services are for adults, 18 and older. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, email support@lr-holding.org and we will delete it.

myWillbox is designed for people in the United States. Our providers process information on servers in the United States and possibly in other countries where they operate. If you use the Services from outside the United States, you understand that your information will be transferred to and processed in the United States.

Links to platforms and other sites open websites run by others. Their privacy practices are their own, and this policy does not cover them.

We may update this policy. We will post the new version with a new “Last updated” date and, for material changes, tell you in the app or by email before they take effect.

For any questions or requests about this policy or your information, contact us at support@lr-holding.org, or write to L&R Holding LLC, 7770 Bluebonnet Blvd, Suite E, Baton Rouge, LA 70810.