Privacy Policy

The short version

• Your sign-ins to your AI and creative-tool accounts stay on your computer. They are never sent to Metrona's online service.
• When a Manager connects Instagram, Facebook, TikTok or YouTube, Metrona keeps the login token encrypted and uses it only to publish the Posts your team approved and to read back how they did.
• We do not sell your data, show ads, or use your data or your platforms' data to train AI models.
• The public pages of metrona.app set no cookies, have no analytics and load nothing from other websites.
• You can have your data deleted. Here is how.

What we hold online

The Metrona online service keeps the shared data of a team. It holds:

You and your account

Your username, email address, display name, avatar and time zone, your notification settings, and your password as a one-way hash that nobody can read back.

Your computers

For each computer you are signed in on: its name, when it was last online, the app version, and whether each of your AI and creative-tool accounts is connected, signed out or out of credits. Never the sign-ins themselves.

Pages and teams

Each Page's name, colour and time zone, who its Members are and their access, and Invitations (to a username or an email address), which lapse after 7 days.

Channels

For each connected platform account: its id, name and avatar on the platform, the login token Metrona received, when it expires, whether it still works, and a follower total once a day. Login tokens are encrypted with a key that only the online service holds.

Your content

Pipelines and their Recipes, Idea lists, Posts with their scripts, captions, finished videos and cover pictures, Library files with a short description, and who approved or asked for changes and when.

Stats

For Posts published through Metrona, the numbers the platforms give back: views, likes, comments, shares, saves, average watch time and followers gained, read at fixed times in the 28 days after publishing.

Notifications and email

Notifications in the app, and the emails we send you: email confirmation, Invitations, Approve and Redo emails with a preview of the Post, Notifications you have not switched off, and a weekly summary. The Approve and Redo links in an email are personal to you and stop working at the Post's publishing time.

Technical data

When you use the website, the app or the online service, Cloudflare, which runs our infrastructure, processes your IP address and the details of each request to deliver and protect the service.

What stays on your computer

• Your AI Account sign-in. Metrona makes Posts through the Claude Code or Codex you installed and signed in to yourself. Those programs keep their own sign-in, and Metrona neither reads nor copies it.
• Your Tool Account sign-ins (Higgsfield and ElevenLabs today). These are kept on your computer, protected by Windows.
• None of these sign-ins is ever sent to Metrona's online service. The online service only learns whether each account is connected, signed out or out of credits.
• Working files. While a Post is being made, its drafts, voice takes and renders live in a folder on the computer of the person making it. Metrona deletes that folder 7 days after the Post is published, expires or is let go. The finished video and cover are uploaded to the online service.
• Agent chats. Your chats with the Metrona agent stay private on the computer where they happened. Only what a chat creates, such as a Pipeline, an idea, a Library file or a Recipe change, goes online.

When a Post is made, the files it needs (its script, pictures, and the Library files its Pipeline uses) are sent from your computer directly to the AI and creative tools you chose, under your own accounts with them. The online service is not in between, and those providers' own privacy policies apply to what they receive.

Data from TikTok, YouTube and Meta

A Manager connects a Channel by logging in on the platform's own site and approving the permissions Metrona asks for there. Metrona never sees the account's password. We use the data we receive from a platform only to run Metrona's features for the Page that connected it. We do not sell it, use it for advertising or profiling, or use it to train AI models, and we share it only with the processors listed under Who we share data with. When a Manager disconnects a Channel, Metrona stops using it and deletes its login token.

TikTok

Metrona asks TikTok for permission to read the account's basic profile (name and avatar), through Login Kit, and to upload videos to the account's inbox as drafts or to post videos your team has approved, through the Content Posting API. Before a video is posted directly, Metrona asks TikTok which options the account allows, and the person approving the Post chooses who can see it and whether comments, Duet and Stitch are on. Nothing is chosen for them. Read TikTok's Privacy Policy.

YouTube and Google

Metrona asks Google for permission to upload videos to the YouTube channel and to read the channel's video statistics and analytics, so it can show how Posts did. Metrona's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Metrona uses YouTube API Services. By connecting YouTube you also agree to the YouTube Terms of Service, and Google's Privacy Policy applies to data you give Google. You can take back Metrona's access at any time in your Google Account permissions.

Facebook and Instagram

Metrona asks Meta for permission to publish to the Facebook Page or Instagram professional account, to read basic details about it, and to read the insights (numbers) of the Posts it published. Read Meta's Privacy Policy and Instagram's Privacy Policy. You can remove Metrona from your Facebook settings under Business Integrations, or from Instagram's Apps and websites settings.

How we use data

• To run Metrona for you and your team: your account, your Pages, and making, approving and publishing Posts.
• To send the emails and Notifications that go with that. You can switch most of them off in Settings. The ones about a Post failing to publish and a Channel login expiring cannot be switched off, because missing them costs Posts.
• To keep Metrona secure, find and fix problems, and stop abuse.
• To meet legal obligations.

We rely on needing the data to provide Metrona to you, on our interest in keeping it working and safe, and on your consent where you give it, such as when you connect a Channel.

Who we share data with

• Members of your Pages. What a Page holds is visible to its Members, according to their access.
• The platforms you connect. We send them the videos, captions and times your team approved so they can publish, and they handle that under their own policies.
• Our service providers. Cloudflare hosts Metrona and stores its database and files, and sends its email. It processes data for us and only for that.
• Authorities, when the law requires it or to protect people's rights or safety.

We do not sell personal data.

How long we keep data

• Account and Page data: until you or a Manager deletes it. Deleting a Page deletes its records and files at once. Posts already published stay on the platforms, because they are theirs.
• Finished videos: deleted 90 days after the Post is published. Cover pictures, stats and follower totals stay as long as the Page does.
• Notifications: 90 days. Invitations lapse after 7 days.
• Channel login tokens: until the Channel is disconnected or the Page is deleted.
• Working files on a computer: 7 days after the Post is published, expires or is let go.

Your choices and rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, to delete it, or to stop using it in a way you object to, and you can withdraw consent you gave. You can change your profile and notification settings in the app, and a Manager can disconnect any Channel at any time. To use any of your other rights write to hello@metrona.app from the email address on your account; we reply within 30 days. You can also complain to your local data protection authority.

Deleting your data

• Delete a Page. A Manager can delete a Page in the app, under Page settings. Its records and files are deleted at once and cannot be restored.
• Delete your account. Write to hello@metrona.app from the email address on your account with the subject "Delete my data". We delete your account and your personal data within 30 days and confirm by email. If you are the only Manager of a Page we will ask what should happen to it first.
• Stop a platform's access. Disconnect the Channel in Metrona, or remove Metrona in the platform's own settings (see Data from TikTok, YouTube and Meta). That stops Metrona using your account. To have the data Metrona received from that platform deleted as well, write to us and we will do it within 30 days.

Security

Passwords are stored as one-way hashes. Channel login tokens are encrypted with a key only the online service holds. Everything travels over HTTPS, and your computer uploads and downloads files with short-lived signed links. No system is perfectly secure; if something goes wrong that affects you, we will tell you and the authorities as the law requires.

Cookies and tracking

The public pages of metrona.app set no cookies, have no analytics or advertising trackers, and load no fonts, scripts or images from other websites. Pages you open from an email link, to approve a Post or accept an Invitation, keep you signed in with a session and use only what they need to work. The desktop app keeps a session on your computer so you stay signed in between restarts.

Children

Metrona is not for children. You must be at least 18 to use it, and we do not knowingly collect data from anyone younger. If we learn that we have, we delete it.

Where data is processed

Metrona runs on Cloudflare's network, which has data centres in many countries, so your data may be processed outside the country where you live. Where the law requires safeguards for that, we rely on those our providers offer, such as standard contractual clauses.

Changes to this policy

If we change this policy the date at the top changes. For a change that matters we will tell you by email or in the app before it takes effect.

Contact

Questions about this policy or your data: hello@metrona.app.