Percy Privacy Policy
Information we collect and why
Percy helps you manage social activity. We collect:
- Account information: your name, email address, preferences, and sign-in/session information, supplied by you or the person inviting you, to create and secure your account and send service messages.
- Connected social account information: account identifiers, access tokens, and permitted posts, comments, messages, interactions, and related profile information, received from the services you connect. This may include information about people who communicate with you. We use it to identify activity needing attention, prepare summaries and drafts, and carry out actions you authorize.
- Content you provide: setup instructions, pasted text, writing preferences, and feedback, to personalize Percy and respond to your requests.
- Technical information: device and app details, notification tokens, IP addresses, and diagnostic/security records, to deliver notifications, troubleshoot problems, and protect the service.
Service providers and AI
We use Microsoft Azure to host Percy and store service data, a social-connection provider and direct social-platform connections to access connected accounts, Resend to send service email, and Apple Push Notification service or Google Firebase Cloud Messaging to deliver notifications. Relevant identifiers, content, or delivery information are shared for these purposes. Notifications contain generic text and an item or brief identifier rather than the private message text.
With your explicit permission, Percy sends relevant social content, setup material, and instructions to OpenRouter and its downstream AI providers to classify activity, prepare briefs, and generate posts and replies. This can include private messages and information about their participants.
You can withdraw AI permission at any time in Percy's Privacy & AI settings without deleting your account. Once withdrawal is confirmed, Percy stops sending new AI requests, including requests from work queued earlier. Withdrawal cannot recall information already sent to a provider or stop a request already submitted. Without AI permission, Percy's AI service is unavailable, but account management and deletion remain available. Withdrawal does not disconnect your social accounts or delete information already stored; you can manage those separately.
Percy restricts AI routing to endpoints that OpenRouter reports as not collecting data for training. This is not a guarantee of zero retention: OpenRouter request metadata and provider safety, abuse-prevention, or legal records may be retained. Optional provider logging and the serving endpoint can affect retention; we do not promise that all providers delete every copy immediately or within a single period. Provider-held information is subject to the applicable provider terms and privacy policies. Connected social platforms also process information under their own privacy policies. When you authorize a post or message, its content is shared with the destination and audience you choose.
We do not sell personal information. We may disclose information when legally required or necessary to protect users and the service. Providers may process information outside your country.
Retention and deletion
We retain account information and content while needed to provide Percy. Azure application logs are currently retained for 30 days. Customer-linked database audit and failure records can remain while the account is active and are handled through account deletion; they do not all have a fixed automatic expiry. After account deletion, we delete or de-identify eligible information in Percy's active systems within 30 days. Provider-held copies, information needed for legal or security purposes, and protected recovery copies have separate retention limits.
Managed database recovery currently covers seven days. Logical backups are scheduled for deletion after 30 days, followed by a seven-day soft-deletion window; lifecycle processing is asynchronous. Restricted migration and frozen recovery copies remain until their recorded retirement, so we cannot promise that every backup copy expires within 30 days. Deletion records are retained as needed to suppress deleted accounts: restored data must be purged of those accounts before it can serve users. Recovery copies are restricted to recovery and security purposes.
You can request account deletion in Percy's settings. Deletion removes your Percy account and associated information, subject to the limits above. It does not delete your original social accounts or posts already published there. Information belonging to other members of a shared account is not deleted solely because you leave.
Your choices and contact
You can disconnect social accounts in Percy or revoke access through the social platform. Disconnecting stops new access; it does not by itself erase information already stored. You can turn off notifications in your device settings, withdraw AI permission as described above, and contact support@signascend.com to request access, correction, or deletion of your information, or ask a privacy question.
We use access controls and encryption to protect information. We will update this policy when practices change and notify you of material changes before they take effect, obtaining new permission where required.