Draft, pending legal review
Last updated: [TBD date] · DRAFT for Baibhav's review. Not published.
This explains what information Sand Media handles, why, and what you can do about it.
Who's responsible: Sand Studio, a sole proprietorship in India. Legal name [TBD], address [TBD]. Contact: support@sandmedia.cc.
What we handle
- Account details from Google or Discord sign-in: provider ID, name, email, username, profile picture. Discord sign-in can also be used to give you access to the Sand Media Discord (where the TikTok Cohort runs).
- [AGE REQUIREMENT PENDING DECISION]
- Workspace details you enter: brand or app details, team members (Agency seats), settings.
- Your content: uploaded images and brand assets, prompts, drafts, saved and exported slideshows.
- Tracked posts: public TikTok post links and accounts you choose to track (see below).
- Billing status from Whop: plan, renewal, credit packs. We never get your full card number.
- Cohort details: enrolment and attendance for the TikTok Cohort. [REVIEW] confirm what's actually stored.
- Hands-on service applications: if you apply for hands-on services, we collect the name, email and app link (App Store or website) you give us, plus what you want from the service. Applying needs a Sand Media account, so the application is linked to your account. We use this only to review your application and reply to you. [REVIEW] How long do we keep applications that we turn down?
- Service records: feature use, support emails, security and error logs.
AI features
When you click an AI feature, your prompt and the related content are sent through Vercel AI Gateway to Anthropic models to produce a suggestion. [REVIEW] If AI image generation is live, name that provider here. Don't put sensitive personal information in prompts. Suggestions are saved only if you keep them.
Tracking TikTok posts
You can add a public TikTok post link or account. We use Apify to read what's public: view count, caption, account name, preview. We don't ask for your TikTok login and can't see private videos, messages or settings.
Data from connected services
RevenueCat (Founder plan): if you connect your own RevenueCat account, we get read-only access to subscription and revenue metrics for the app you connect. We use them only to show your app's performance in Sand Media. We can't change anything in your RevenueCat account.
- [REVIEW] Exact fields we pull (e.g. active subscriptions, MRR, revenue, trials) and how long we keep them after you disconnect.
- Disconnecting: you can remove the connection in Sand Media at any time, and you can also revoke our access in RevenueCat. After that we stop pulling new data. [REVIEW] Confirm where the disconnect control sits in the app, and whether stored metrics are deleted when you disconnect.
How we use it
- Run your account, workspace, slideshow tools, analytics and the TikTok Cohort.
- Process payments and give you the access your plan includes.
- Keep the service secure, fix problems and answer your emails.
- Review hands-on applications and contact you about them.
- Understand site visits with the Whop Pixel, only if you allow it.
We don't sell personal information and don't use it for behavioural advertising.
Who we share it with
| Provider | What for | What they get |
|---|---|---|
| Google, Discord | Sign-in (Discord also for community access) | That you signed in; they send us your ID, name, email, picture |
| Discord linked role | Show Sand Media on your Discord profile, only if you choose Connect Discord on your Profile | Discord gets your display name (or Discord username), whether you're on a paid plan, your plan level and the date you joined. We store your Discord access and refresh tokens encrypted, only to keep this updated. Disconnecting removes it from Discord and deletes the tokens. |
| Vercel | Hosting, AI Gateway | Your browser requests, including IP address |
| Supabase | Login, database, file storage | Your account, work and uploads |
| Whop | Payments, page-view pixel (only if you allow it) | Payment details; pixel gets IP, browser and pages viewed, never name, email or content |
| Apify | Reading public TikTok posts | The link you submit |
| Anthropic (via Vercel AI Gateway) | AI suggestions you request | Your prompt and related content |
| Resend | Sending our emails | Your email address and the message |
| Sentry | Error monitoring | Scrubbed error reports, no user info, cookies or session replay |
| RevenueCat | App performance tracking: for Founder-plan customers who connect their own RevenueCat account, and for Sand Media's own apps | Read-only access to subscription and revenue metrics for the connected app |
| Reading our own boards for photo options | Our request only, nothing about you |
We may also share information if the law requires it, to deal with a security or safety issue, or if the business is transferred.
Fonts are served from our own servers, so loading a page doesn't send your IP to a font provider.
Where it's stored and how it's protected
Data is hosted by Vercel and Supabase and may be processed wherever they operate. [REVIEW] Name the Supabase region. We limit access to the people and systems that need it. No online service is perfectly secure.
How long we keep it
[REVIEW] Needs Baibhav and a lawyer. Proposed:
- Account and workspace data: while your account is open, deleted within [TBD] days of closing it.
- Uploads and drafts: deleted with the account.
- Billing records: as long as tax and accounting law requires ([TBD] years).
- Logs: [TBD] days.
- [AGE REQUIREMENT PENDING DECISION]
Cookies and tracking choice
Nothing that tracks you loads until you allow it. The Whop Pixel is the only one, and it stays off unless you press Allow. Saying no doesn't change how the site works. You can change your choice any time.
Your rights
You can ask to see, correct or delete your personal information, or ask how it's used. Email support@sandmedia.cc. Some records may be kept where the law requires (for example, billing).
If you're in India (DPDP Act, 2023): we act as a Data Fiduciary. You can access a summary of your data, correct it, have it erased, nominate someone to act for you, and withdraw consent as easily as you gave it. Grievance officer: [TBD name], privacy@sandmedia.cc. We reply within 30 days. If you're not satisfied you can complain to the Data Protection Board of India.
[REVIEW] Do we also need GDPR / US state wording for EU, UK or US users?
Age and children's data
- [AGE REQUIREMENT PENDING DECISION]
Changes
We'll post any update here with a new date, and email you about important changes.