InPhase
Privacy Policy
Updated November 6, 2026
Our commitment
InPhase does not sell, rent, or trade personal information. We do not use your brand, customer, or creative information to train a public generative model. We process information only to provide the features you choose, secure the service, meet legal obligations, and improve InPhase in aggregated or de-identified form where permitted.
What we collect
We collect account details such as your name, email address, password-derived authentication data, workspace membership, and credit-purchase records. InPhase also processes the brand answers, assets, media, prompts, generated work, connected-platform details, and activity needed for the features you use. Payment-card information is handled by Stripe, not stored by InPhase.
Where information is stored
InPhase supports local editing and authenticated cloud workspaces. Account, membership, billing and service records are held in access-controlled Cloudflare storage. When you sync a workspace, use agency services, upload media, or schedule a post, the associated brand information, creative files, connection details, copy, calendar and delivery records are processed or stored in Cloudflare services so those features can operate. Saved client media and reusable assets have different retention periods from temporary delivery files. Desktop provider credentials use operating-system protected storage. Connections used for server-side delivery also have encrypted credentials in the backend.
How information is shared
We share only what is necessary with service providers that perform requested services: Cloudflare for account and workspace infrastructure, Google for managed generative requests, Stripe for payments, and a social platform when you explicitly connect or publish to it. Those providers process information under their own terms and privacy policies. We do not share information for advertising or sell it to data brokers.
Generative and connected services
When you choose managed synthesis, research, transcription, or image creation, the selected material is sent to the relevant generative service to produce that result. Generated output can be inaccurate, incomplete, or unsuitable. You remain responsible for reviewing it before use. When you connect a social account, InPhase uses the access granted by that platform only to perform the connection, delivery, or reporting action you choose.
Security, retention, and incidents
We use reasonable administrative, technical, and access controls designed to protect information, but no service can promise absolute security. We retain information for as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. If a security incident affects personal information, we will investigate, take reasonable response measures, and provide notice when required by applicable law.
Your choices
You may update account information, disconnect social accounts, remove local work, leave a shared workspace, or request account deletion. Some records may be retained where required for legal, security, fraud-prevention, accounting, or audit reasons. For access, correction, deletion, or privacy questions, contact hello@inphase.agency.
Recraft visual production
When you request a Recraft generation or editing tool, InPhase sends Recraft only the creative direction and selected source images, style references, or editor masks needed to perform that request. Recraft processes that material under its own terms and privacy policy. Returned provider URLs are temporary handoffs; InPhase imports the selected result into the local project rather than treating the provider URL as your permanent library.
Connected social accounts
With your authorization, InPhase processes the account, Page or channel identifiers and display names, granted permissions, authorization credentials, post information and reporting data needed for your selected features. This information identifies the destination, verifies access, delivers content you approve, records delivery results and displays connected-account history or reporting. Scheduled delivery may run on the server after approval. Available features depend on the platform, its review decisions and the permissions you grant. Client accounts and published content remain under their owners' control.
Google and YouTube data
InPhase uses YouTube API Services for authorized channel identification, video history, upload and processing information, video delivery and supported live-streaming features. YouTube use is subject to the YouTube Terms of Service. Google handles information under the Google Privacy Policy. You can review or revoke Google access at Google Account permissions. For removal of InPhase-held YouTube data, contact support@inphase.agency and identify the relevant workspace and channel. We verify your authority before acting on a deletion request.