Privacy Policy

Introduction

Tiberius Images ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI-powered social media post generation service at tiberiusimages.braceyourself.solutions.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Profile picture (if signing in with Google)

Connected Social Media Accounts

When you connect social media accounts (LinkedIn, Facebook, Instagram, Twitter/X) for posting, we store encrypted authentication tokens that allow us to post content on your behalf. We only request permissions necessary for posting and do not access your private messages, contacts, or other personal data beyond what is required for the service.

Uploaded Content

Images you upload for analysis are processed by AI to generate social media captions. Uploaded images are stored in your personal media library and retained until you delete them.

Generated Content

Social media posts generated by our AI are stored in your account history so you can access and reuse them.

Google API Services & Google Drive Data

Tiberius Images uses Google API Services for authentication (Google Sign-In) and optional Google Drive integration. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What Google Data We Access

When you connect Google Drive, we request access only to files you explicitly select (drive.file scope) via Google's Picker interface. Specifically, we:

• Download image files you explicitly select through Google's file picker for use in generating social media posts
• Store imported images in your media library so they can be used for random image selection during post generation
• Read your Google account email address and display name to show connection status

What We Do NOT Do With Google Data

• We do not modify, delete, or write any files to your Google Drive
• We do not share your Google Drive data with any third parties
• We do not use your Google Drive data for advertising or marketing purposes
• We can only access files you explicitly select through Google's file picker — we cannot browse or access any other files in your Drive
• Imported images are stored in your media library and can be deleted at any time from your account
• We do not allow humans to read your Google Drive data unless you provide explicit consent, it is necessary for security purposes, or it is required by law

Google OAuth Tokens

Your Google OAuth access and refresh tokens are encrypted at rest using AES-256-GCM encryption and are only used to communicate with Google APIs on your behalf. You can revoke access at any time by disconnecting Google Drive in your account settings, which immediately deletes all stored tokens.

Limited Use Disclosure

Tiberius Images' use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We limit our use of Google user data to providing and improving the image selection features of our service, and we do not use this data for serving advertisements or any purpose unrelated to the core functionality of Tiberius Images.

How We Use Your Information

• To provide and maintain our service
• To authenticate your identity
• To post content to your connected social media accounts when you request it
• To access your Google Drive images for post generation when you enable this feature
• To improve our AI-generated content
• To communicate with you about your account and our services

Third-Party Services

We integrate with the following third-party services:

• Google: For authentication (sign-in) and Google Drive image access
• LinkedIn: For posting content to your LinkedIn profile
• Meta (Facebook/Instagram): For posting content to your pages
• Twitter/X: For posting tweets
• Anthropic (Claude AI): For AI-powered image analysis and content generation
• OpenAI: As a fallback AI provider for content generation
• Stripe: For payment processing

Each of these services has their own privacy policies governing their use of your data. We do not share your personal data with these services beyond what is necessary to provide the specific functionality you use.

Data Security

We implement appropriate security measures to protect your personal information:

• All authentication tokens (social media and Google) are encrypted at rest using AES-256-GCM
• All data is transmitted over HTTPS/TLS
• Database fields containing sensitive information use application-level encryption
• Passwords are hashed using bcrypt
• Sessions use secure, HTTP-only cookies

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Disconnect any linked social media accounts or Google Drive at any time
• Revoke Google API access via your Google Account permissions page
• Export your data
• Request complete erasure of your data

Data Retention

We retain your account information and generated content for as long as your account is active. You may delete your account at any time, which will remove your personal data from our systems. Specifically:

• Account data is deleted immediately upon account deletion
• Uploaded images are deleted from our servers when you delete them or your account
• OAuth tokens are deleted when you disconnect a service or delete your account
• Imported Google Drive images are deleted when you remove them from your library or delete your account

Children's Privacy

Our service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: privacy@braceyourself.solutions