Privacy Policy

• We only read accounts you connect, feeds you add, or public profiles you tell us are your own.
• We use your posts to make new versions for your other apps, and to learn what works for your brand.
• Dandelion does not train any AI models. What it learns about your posts stays with your brand.
• We never sell your data and never add our name to your posts.
• We share data only with the partners that help run Dandelion, listed below.
• You can ask us to delete everything at any time. We delete it within 30 days.

• Your account: your email, your name, and your team and workspace info.
• Connected accounts: the name, handle, and picture of each social account you connect. Your social passwords never come to us. The sign-in is handled by bundle.social and the app itself.
• Your content: the posts, words, videos, and photos we copy from your accounts or that you upload, plus things we make from them, like transcripts, captions, and covers.
• Your brand style: your voice, rules, logo, and settings.
• How posts do: post status, links, and numbers like views and likes, so we can show you what works.
• Billing: your plan and payment status. Stripe holds your card details. We never see your full card number.
• Keys: if you add your own AI key, we lock it (encrypt it) and only ever show the last 4 characters. API keys are stored in a scrambled form we can't read back.
• Basic tech info: things like your browser, IP address, and error logs, to keep Dandelion safe and working.
• The try-it box: when you paste a link on our home page, we keep the link, the result, and a scrambled code made from your IP address and browser, so we can limit free tries and answer faster next time. The post's words and cover go to our AI provider to write the new versions.

We only pull in content from places that are yours:

• Accounts you connect through bundle.social.
• Files you upload.
• Feeds you add, like your blog, podcast, or newsletter.
• A public profile, only after you confirm it is your own account. For some apps, like TikTok, a data partner (Apify) reads the public posts on that profile for us. We never read other people's profiles.

For YouTube, we only read your video titles and covers through YouTube's own tools. We never download YouTube videos. To share one, you upload the file.

• To read your posts, write new words for each app, fit your media, check it, and post it where you asked.
• To show you what is posted, scheduled, waiting for you, or failed.
• To learn what works for your brand. We keep numbers about your own posts, like views, your best times to post, and your best hooks. We use your own best posts as examples when we write your next ones. This stays inside your brand. We never use it for other customers. You can turn it off in What's working.
• To send you emails about failed posts, posts that need you, accounts to reconnect, and a short summary. You can change these in Settings, then Notifications.
• To answer your questions, stop abuse, and handle billing.

Dandelion does not train any AI models. Not on your content, and not on anyone else's. When we say Dandelion "learns," we mean it keeps numbers about your own posts and uses your own best posts as examples for your next ones. That stays inside your brand.

To do the work you ask for, we send only what that task needs to an AI provider. That can be your words, a transcript, a few frames and the sound from a video, a cover image, or a short video. Depending on the task and your settings, the provider is:

• Kie.ai for writing, checking posts before they go out, and making images. Kie.ai runs Google Gemini models, with Anthropic Claude models as a backup.
• fal.ai for turning speech into text (for captions). If fal.ai is down, Kie.ai does this instead.
• Your own AI provider, if you add your own key. Then it writes your words, and that company's privacy rules apply. We still use Kie.ai and fal.ai for post checks, speech to text, and images.

These companies have their own rules about the data they get. We send them only what the task needs.

We don't sell your data. We share it only with partners that help run Dandelion, and only what they need:

• bundle.social: connects your social accounts and posts for you.
• The social apps you post to, like TikTok, Instagram, or YouTube, when we post for you.
• Supabase: our database, file storage, and sign-in.
• Vercel: where Dandelion runs.
• Stripe: payments.
• Brevo: sends our emails.
• Apify: reads public posts from profiles you confirmed are yours.
• The AI providers listed above.

We may also share data if the law requires it, to protect people from harm, or if franc & ELI LLC is sold or merged (and then this policy still protects your data).

We don't add our name, logo, or a "made with" line to anything we post for you, on any plan.

We keep your data while your account is open. To delete your account, email hello@dandelionapp.io. We delete your account, content, media, and settings within 30 days. We may keep a few records longer if the law says we must, like billing records. Our posting partner, bundle.social, deletes files we send it about 14 days after a post goes out, and deletes post history it imports for us after 30 days. Our other partners keep data under their own rules.

• Delete your data: email hello@dandelionapp.io and we will delete your account and data within 30 days.
• See or fix your data: most of it is in the app. For a copy of everything, email us.
• Disconnect accounts: remove any social account in Accounts at any time.
• Emails: turn alerts and digests on or off in Settings, then Notifications.
• Depending on where you live (like the EU, UK, or California), you may have more rights. Email us and we will help, usually within 30 days.

Data moves over secure connections. Your own AI keys are locked with strong encryption. API keys are stored scrambled. Only the people who need to, to run and fix Dandelion, can see your data. No system is perfect. If something ever goes wrong with your data, we will tell you.

We use only the cookies we need: to keep you signed in and to remember which brand you picked. Your browser also remembers if you like light or dark mode. We don't use ad trackers.

Dandelion is not for children. We don't knowingly collect data from anyone under 13. If you think a child signed up, email us and we will delete the account.

Our partners may store and work with data in the United States and other countries. We pick partners that protect it.

If we change this policy in a big way, we will email you or tell you in the app first. The date at the top shows the last change.

franc & ELI LLC. Email: hello@dandelionapp.io.