Legal

Privacy Policy

Effective July 8, 2026 · Castopia Inc.

1. Introduction

Castopia Inc. (“Castopia,” “we,” “us,” or “our”) operates castopia.ai, an AI-powered platform that helps small businesses and creators generate content, publish to social media, and manage advertising campaigns across multiple platforms. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have — including when you connect a third-party account such as TikTok, YouTube, Instagram, or Facebook. By using Castopia, you agree to the practices described in this Privacy Policy.

2. Information We Collect

Account & profile information. Your name, email address, business/organization details, and any other information you provide when you create an account.

Usage data. Information about how you use Castopia, including features accessed, content generated, and campaigns created.

Technical data. IP address, browser and device information, and similar diagnostic data that helps us operate and secure the service.

Content & brand data. Website content, logos, and brand information you provide or that our AI analyzes to generate on-brand posts and ad creative.

3. Third-Party Platform Data

When you connect a social media or advertising account to Castopia, we access a limited set of data from that platform, solely to provide the features you’ve requested (content publishing, scheduling, and/or ad campaign management). We do not sell this data, and we only use it as described below and in each platform’s own developer policies.

TikTok

Basic profile information (username, display name, avatar), and — with your explicit authorization — the ability to publish and upload videos to your TikTok account and view your video list on your behalf. If you connect a TikTok Ads account, we also use TikTok’s Marketing API to create and manage ad campaigns on your behalf, including audience targeting, budget management, and performance reporting.

YouTube

Channel information, video metadata, and playlists, and — with your authorization — the ability to upload and publish videos on your behalf.

Instagram

Basic profile and account information, and — with your authorization — the ability to publish content and, if connected, manage ad campaigns on your behalf.

Facebook

Page information, and — with your authorization — the ability to publish content and manage Facebook and Instagram ad campaigns on your behalf.

You may revoke Castopia’s access to any connected account at any time from that platform’s own settings, or by requesting deletion as described in Data Retention & Deletion.

4. How We Use Your Information
  • To provide the service — generating content, publishing posts, and creating and optimizing ad campaigns on your behalf.
  • To maintain your account, including authentication.
  • To communicate with you about your account, updates, and service-related notices.
  • To analyze usage and improve Castopia’s features and reliability.
  • To comply with legal obligations and protect the rights and safety of Castopia and our users.
5. Sharing Your Information

We do not sell your personal information. We may share it:

  • With connected platforms. To publish content or run ads exactly as you’ve instructed (e.g. sending a post to TikTok on your behalf).
  • With service providers. Vendors who help us operate Castopia (e.g. hosting, email delivery), under contractual obligations to protect your data.
  • For legal reasons. If required by law or a valid request from a public authority.
  • In a business transfer. In connection with a merger, acquisition, or sale of assets.
6. Data Security

We use technical and organizational measures — including encryption in transit, access controls, and least-privilege credential handling — designed to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention & Deletion

We retain information for as long as needed to provide the service, comply with legal obligations, and resolve disputes. You can request deletion of your data, including any data obtained from a connected platform, at any time — see our Data Deletion page or email privacy@castopia.ai. Requests are processed within 30 days.

8. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing (rights recognized under frameworks such as the GDPR and CCPA). To exercise any of these rights, contact privacy@castopia.ai.

9. Children's Privacy

Castopia is not intended for individuals under 13. We do not knowingly collect personal information from children under 13, and will delete any such information if we become aware of it.

10. International Data Transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards to ensure your information remains protected consistent with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy here and update the effective date above. Material changes will be communicated to you directly where appropriate.

13. Contact Us

Questions or requests about this Privacy Policy or your data can be sent to privacy@castopia.ai.

By using Castopia, you acknowledge that you have read and understood this Privacy Policy.