Privacy Policy

Last updated: May 12, 2026

What this is

PopJar Media ("PopJar," "we," "us") is a managed social-media service operated by SudoDog LLC. This policy describes what we collect from you (the customer who pays us), what we do with it, and how we protect it. It also covers your social-media audience to the limited extent we touch their data.

What we collect

From you (the customer)

• Account info: email address, brand name, plan tier, payment method, billing history.
• Brand kit: logo, colors, product photos, voice notes, sample posts, off-limits topics — whatever you upload to your portal.
• Approval history: every draft you approve, edit, or reject, plus your edits themselves, are logged so we can learn your voice and so the service is replayable if a system component is reset.
• Social-account handles: the usernames of the accounts you want us to manage. We never hold the passwords; you grant us access via each platform's official delegated-access tools (Meta Page Manager roles, TikTok Business Center invites, X team accounts).

From your audience

• Engagement metadata: impressions, likes, comments, follower counts, follow events. We read this through your social-platform analytics so we can report what's working.
• Public comment text: when our agent replies to a comment on your behalf, we read the comment first. We don't store comment text beyond a 30-day rolling window used for context.

Cookies + analytics

We use a single first-party session cookie (pjm_sess) so you stay logged in. No third-party advertising trackers, no behavioral analytics, no fingerprinting.

What we do with it

• Provide the service you paid for — draft posts in your voice, post on your behalf, report performance.
• Calibrate your sub-agent based on your edits, so your voice improves over time.
• Send transactional emails (magic-link sign-ins, payment receipts, onboarding updates).
• Process payments via Stripe (whose privacy policy applies to your card data — we never see card numbers).

What we don't do

• We never sell your data. Not to advertisers, not to AI training pipelines, not to anyone.
• We never share your brand kit, voice patterns, or audience data across customers. Each customer's sub-agent is isolated.
• We don't use your content to train general AI models. The LLMs we use (Anthropic Claude) are accessed via API and Anthropic's terms forbid training on API data.

Where your data lives

• Cloudflare (United States) — KV (account records, sessions, approval logs), R2 (brand kit assets), Workers (compute).
• Stripe (United States) — billing.
• Resend (United States) — transactional email delivery.
• Anthropic (United States) — LLM inference, no training on API data.
• Google Cloud (United States) — image and short-video generation via Imagen / Veo on the Pro tier.

Retention

• Account + brand kit: kept as long as your account is active, deleted within 30 days of cancellation on request.
• Approval log: kept for the life of the account; you can request export or deletion any time.
• Audience comment context: 30-day rolling window.
• Payment records: 7 years for tax purposes (we keep just the bare records Stripe provides).

Your rights

You can, at any time, by emailing [email protected]:

• Request a copy of all your data we hold
• Correct any inaccuracies
• Delete your account and all associated data (we comply within 30 days)
• Pause or stop our access to your social accounts (you can also do this directly in each platform's admin)

Security

• All traffic is TLS-encrypted in transit.
• Sessions are HttpOnly + Secure + SameSite=Lax cookies, 30-day expiry.
• The operator admin console is behind HTTP Basic Auth with a strong password.
• Customer assets in R2 are private; the worker generates signed URLs at use time.
• We do not store OAuth tokens for your social accounts — those live with our agent runtime provider, scoped per customer.

Changes to this policy

If we make material changes, we'll email all active customers at least 14 days before the changes take effect.

Contact

Privacy questions: [email protected]
General support: [email protected]