Confidant

Privacy Policy

Confidant ("we", "us") is a content studio at useconfidant.com that helps creators write, record, and track short-form videos. This policy explains what we collect, how we use it, and your choices. By using Confidant you agree to this policy.

Who we are

LOL Media LLC, Columbus, Ohio, USA. Contact: jakob@lolmediallc.com.

Information we collect

• Account information, your email, mobile phone number, and authentication details when you sign in. We collect your phone number to secure your account (password recovery and optional two-factor sign-in) and, only if you separately opt in, to send you account and product text messages.
• Content you create, scripts, ideas, notes, and the "Brain" profile you build in the app.
• Instagram data (only if you connect it), when you authorize Instagram, we access your professional account's public profile and media insights (reach, views, likes, comments, saves, watch time, profile visits, follows) via Meta's official Instagram API, so we can show you your own analytics.
• Meta Ads data (only if you connect it), when you authorize Meta Ads, we access your ad account's insights (spend, impressions, reach, clicks, results, ROAS) via Meta's Marketing API, so we can show you your own ad analytics.
• Instagram messages (only if you enable DM tracking), if you turn on DM tracking and grant the messaging permission, we receive the direct messages sent to and from your professional Instagram account via Meta's Instagram Messaging API. We store each message's text, timestamp, direction (sent or received), and the conversation participant's Instagram-scoped ID, so we can show you which lead magnets and DM prompts actually get replies and how fast you respond. This is used only to compute your own response metrics and, on your explicit request, to let your private AI assistant coach you on your own conversations. We do not read, share, or use these messages for any other purpose, and they are never visible to other users.
• Usage, basic technical logs needed to operate and secure the service.

We only request the minimum Meta permissions needed for the features you use (instagram_business_basic, instagram_business_manage_insights, ads_read, and instagram_business_manage_messages only if you enable DM tracking). We never post on your behalf and never access your followers' or customers' personal data beyond the messages they send to your account when DM tracking is on.

How we use it

• To show you your own content performance, trends, and retention.
• To let your private AI assistant ("Brain") learn which of your content and ad angles perform, so it can help you write better scripts. This is scoped to your account only.
• To operate, secure, and support the service.

We do not sell your data, and we do not use your Meta data for advertising or share it with other users. Your analytics are visible only to you.

SMS & text messages

Confidant uses your mobile phone number for two separate purposes, and you control each:

• Account security (always). We send one-time verification codes by SMS to recover your account and, if you enable it, as a two-factor sign-in step. These are transactional security messages, not marketing, and you receive them only when you request a code or sign in.
• Product & account updates (opt-in only). During signup you may separately check an optional box, "Text me account & product updates." Only if you check it do we send occasional texts such as new-feature announcements, content tips, and reminders. This checkbox is unchecked by default, and consent is never a condition of creating an account or purchasing anything.

Message frequency varies. Message and data rates may apply. You can opt out of marketing texts at any time by replying STOP to any message, or get help by replying HELP; you can also manage your number in the app. Opting out of marketing texts does not affect security codes, which are required to protect your account.

We do not sell, rent, or share your mobile phone number or SMS opt-in/consent data with any third parties or affiliates for their own marketing or promotional purposes. Your number is shared only with the messaging providers that deliver the texts on our behalf (e.g., Twilio for security codes; our messaging platform for opt-in updates), strictly to send the messages you asked for. Text-messaging originator opt-in data and consent are not shared with any third party for any other purpose.

AI processing

Confidant uses your own AI provider key (bring-your-own-key). When you generate or analyze content, the relevant text is sent to the AI provider you chose (e.g., Anthropic, OpenAI, Google) under their terms. We do not train any models on your data.

YouTube

Confidant uses YouTube API Services. If you choose to connect a YouTube channel, you sign in with Google and Confidant asks for two read-only permissions:

• youtube.readonly: your channel name and your list of uploaded videos, with each video's title, link, thumbnail, views, likes and comments. We show these in Results, so you can see which videos work.
• yt-analytics.readonly: your channel's daily views, watch time, new subscribers and likes from YouTube Analytics. We show these as charts in Results and use them to suggest your next videos.

Confidant never uploads, edits, deletes, comments on or posts anything to YouTube, and never sees your Google password. We store this data only for your account, refresh it about once a day while you stay connected, and use it only to show your numbers and make suggestions to you. We do not sell it, share it with other users, use it for advertising, or use it to train AI models.

By connecting YouTube you agree to the YouTube Terms of Service. Google's handling of your data is covered by the Google Privacy Policy. Confidant's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

To stop access: tap Disconnect on the YouTube tab in Results. That deletes your stored Google tokens and tells Google to revoke Confidant's access. You can also remove Confidant any time at your Google account's third-party access page. To have the YouTube numbers we stored deleted too, delete your Confidant account in Settings or email us; we delete them within 30 days.

The Confidant Stats Chrome extension

The Confidant Stats extension is optional. It runs in your own Chrome, where you are already signed in to Instagram, TikTok, YouTube and Facebook, and it only works for you after you sign in to Confidant on useconfidant.com. It is read only: it never posts, likes, comments, follows or sends a message for you.

• Your own posts' numbers. On your own dashboards and posts it reads numbers like views, likes, comments, shares, saves and watch time, and sends them to your Confidant account so you can see what worked.
• The words of your own videos. It reads captions when a platform shows them. If there are none, it sends the sound of your own post, in small pieces, through Confidant to OpenAI, using your own OpenAI key, so it can be turned into text. OpenAI bills you for this, not Confidant. The sound is used only to make the text and Confidant does not keep it. When Confidant asks for these on its own (Get the words for my videos), it only does this for posts it can confirm are yours.
• Videos you choose to save. When you tap Save on a post, or pick posts in Sort and tap Save, it sends each post's public link, creator name, caption and public numbers to your Confidant account. For a photo carousel it also sends the words on the slides that are showing, taken from the image descriptions the platform already puts on the page (no images are downloaded). Nothing is saved unless you tap it.
• The words of videos you choose. Only when you tap Save + get the words, it gets the words of the public posts you picked, the same way as for your own videos: the captions the platform shows, or else the post's sound, in small pieces, sent through Confidant to OpenAI with your own OpenAI key to be turned into text and then not kept. It does this one post at a time, at most 20 an hour, in your own Chrome. The words are saved with that post in your Videos I like, and your Brain learns the hooks and structure from them, to model in your own voice, not to copy. They are never shared with anyone else.
• Comments on your own posts. Only when you tap Learn from my comments, it reads the comment text on your own posted videos (not who wrote them) and adds it to your Brain.
• Sort this profile. Ranking a profile's visible posts happens in your browser. No posts are saved unless you then tap Save or Get the words on the posts you picked. When you sort someone else's profile, that creator's public name, profile link, follower count and a short summary of the sort (how many posts, their usual views, their best views) are added to your creator list in Confidant. Your own profile is never added. On your own profile, the numbers showing for the posts you picked are sent with their words, so Confidant can match each video to how it did.
• Find creators here. Only when you tap Find creators here on a search, tag or explore page, it reads the creator names, profile links and public follower counts that are showing on that page, in your browser. It sends only the ones you choose with Add to my creator list, at most 300 an hour, to your creator list in Confidant. It does not open those profiles or read anything else about them.

The extension sends data only to useconfidant.com, where it is stored in your own account like the rest of your work. It keeps a sign-in token and your settings in Chrome's extension storage on your device. We do not sell this data, use it for ads, or use it to decide credit or lending. Remove the extension any time from chrome://extensions; you can delete what it sent from your Confidant account (see Retention & deletion).

Affiliate program

If you join our affiliate program, we keep your link name, the payout email you give us (PayPal or Wise), how many times your link was tapped, and which accounts signed up with it. When someone taps an affiliate link, we set one small cookie (cf_aff) for up to 60 days that holds only the link name, so the sign-up can be credited. It is removed once the account is linked. Affiliates see counts and amounts only, like "Customer 3", never the customer's name, email or account. We use Stripe payment records to work out commissions, and we never share your payment details with affiliates.

Calls and notes you connect

You can choose to send your own calls and notes into your Brain. Nothing comes in unless you set it up.

• Your private links and address. Confidant gives you a private Claude link, a webhook link and (when turned on) an email address. Whatever you or your tools send to them (meeting titles, dates, summaries, transcripts and voice notes) is saved to your account and folded into your Brain. The links can only add notes. They can't read anything. Keep them private.
• GoHighLevel. If you paste a GoHighLevel Private Integration key, Confidant stores it encrypted and uses it only to read your recorded calls. It never calls, texts or changes anything in GoHighLevel. It uses GoHighLevel's transcript when there is one. If not, it sends the call recording to OpenAI with your own OpenAI key to turn it into words. OpenAI bills you, not Confidant. Confidant keeps the words, not the recording. Disconnect anytime to delete the key.
• Calendly, Typeform, Tally and GoHighLevel forms. If you paste a key from one of these, Confidant stores it encrypted and uses it only to read new answers to your own forms and booking questions. It leaves out names, emails, phone numbers and links before saving the answers to your account, and it never changes your forms, bookings or contacts. Disconnect anytime to delete the key.
• Call notes and form answers include what other people said. Only connect calls and forms you're allowed to use.

Where your data lives

Data is stored with Supabase (database) and Cloudflare (hosting), industry-standard providers. Access tokens for Instagram, Meta Ads, YouTube, TikTok and GoHighLevel are encrypted at rest (AES-GCM) and are never exposed to the browser or to other users. Payments, if any, are handled by Stripe; we never see your full card details.

Your data, mapped

Exactly where each kind of data lives, whether it ever leaves your device, and how long we keep it:

Third parties we send data to, only ever as needed, and only what's described above: the AI provider you choose (with your own key), OpenAI Whisper if you transcribe audio, Stripe for payments, Meta / Google / TikTok for the analytics you connect, and our messaging provider and CRM (e.g., Twilio, GoHighLevel) solely to deliver the account and opt-in text messages you request. We do not sell your data, we do not share your phone number or SMS consent with any third party for their own marketing, and we do not share your data with other users.

Retention & deletion

We keep your data while your account is active. You can disconnect Instagram, Meta Ads, YouTube or TikTok at any time in the app, which immediately deletes the stored access token (for YouTube we also ask Google to revoke access). Confidant no longer collects Instagram direct messages. You can stop marketing texts anytime by replying STOP; your phone number and SMS opt-in status are deleted when you delete your account. To delete your account and all associated data, follow the steps at useconfidant.com/data-deletion or email jakob@lolmediallc.com; we will remove it within 30 days.

Your rights

You may access, correct, export, or delete your data at any time. If you are in a region with specific privacy rights (e.g., GDPR/CCPA), those rights apply; contact us to exercise them.

Children

Confidant is not directed to anyone under 18 and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be posted here with a new date.