Privacy Policy

We collect the following categories of information:

• Account information — your name, email address, and authentication identifiers, provided when you sign up and managed through our authentication provider.
• Profile and content data — your niche, target audience, content pillars, tone and writing preferences, and the ideas, captions, breakdowns, and carousels you generate or upload.
• Payment information — subscription status, plan, billing history, and payment metadata. Full card details are collected and processed by our payment processor and are never stored on our servers.
• Usage and device data — log data, IP address, browser and device type, pages viewed, and feature interactions, collected automatically for security, analytics, and improvement.

We use the information we collect to:

• Provide, operate, personalize, and maintain the Service.
• Generate AI content tailored to your brand profile and inputs.
• Process payments, manage subscriptions and credits, and send service-related emails.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Analyze usage to improve features, reliability, and performance.
• Comply with legal obligations and enforce our Terms & Conditions.

We do not sell your personal information, and we do not use the private content you generate to train our own models.

We rely on the following trusted providers to deliver the Service. Each processes data only as needed for its function and is bound by its own privacy and security commitments:

• Clerk — authentication, sign-up/sign-in, and account-session management.
• Razorpay — payment processing for subscriptions and one-time purchases.
• Anthropic and OpenAI — AI models that generate text (ideas, captions, breakdowns) and images (carousels) from your inputs.
• Cloudflare R2 — secure cloud storage for generated images and assets.
• Resend — delivery of transactional and support emails.

When you generate content, the relevant inputs are sent to the applicable AI provider to produce your output. We encourage you to review those providers' privacy policies for details on their handling of data.

We use cookies and similar technologies to keep you signed in, remember your preferences, secure your session, and understand how the Service is used. Essential cookies are required for core functionality. You can control non-essential cookies through your browser settings, though disabling some cookies may affect how the Service works.

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are required to retain certain information for legal, tax, accounting, or security purposes. Backup copies may persist for a limited time before being overwritten.

You have meaningful control over your data. Depending on your location, you may have the right to:

• Delete your account and associated personal data, at any time from your settings or by contacting us.
• Export your data — request a copy of the personal information and generated content associated with your account.
• Access, correct, or update inaccurate information.
• Object to or restrict certain processing, and withdraw consent where applicable.

To exercise any of these rights, email us at support@carouselabs.com from your account address and we will respond within a reasonable timeframe.

CarouseLabs is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. Users must also meet the minimum age required to enter into our Terms & Conditions. If you believe a child under 13 has provided us personal information, contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you install our LinkedIn commenting extension, the following additional practices apply:

• Extension token — signing in from the extension stores a unique authentication token locally in your browser, used solely to identify your account when generating comments. Each browser you install on holds its own token.
• Post content you select — when you click the Comment button on a LinkedIn post, that post’s visible text, author name and headline, and its link are sent to CarouseLabs so a comment can be written about it. This happens only for posts you explicitly select.
• Profiles and conversations you select — when you write a connection note, the name, headline, current role, About text and link of the profile you are connecting with are sent to CarouseLabs to write that note. When you click Read this conversation in Messages, the messages visible in that conversation and the other person’s name, headline and profile link are read. The profile link is used to look up the reason you saved for that person; the messages, name and headline are sent to CarouseLabs when you generate a reply. This happens only for profiles and conversations you explicitly select.
• Generated text — each comment, reply, connection note or message produced for you is stored against your account with who it was for, a link, a short excerpt for context (part of the post or message it answers, or the person’s headline for a note), and whether you copied or inserted it, so it appears in your History. The reason and tone you choose for a conversation are saved with that person’s name and profile link, so they are ready next time; you can delete them from the Extension section of your account.
• 90-day retention — History is deleted automatically 90 days after it is created, by a scheduled job.
• Diagnostics — each request from the extension includes its version number. When something fails inside the extension (for example, Insert cannot find LinkedIn’s text box), it sends a short error code and a fixed description of it. These are stored against your account so we can find and fix problems. They never include post text, messages, names or any other page content.
• No automatic browsing tracking — the extension reads a post only when you click its Comment button, a profile only when you write a note for it, and a conversation only when you click Read. To offer help when you open a LinkedIn conversation, it checks whether the LinkedIn page’s address is a conversation; that check happens in your browser and nothing about it is sent. It does not monitor your general browsing, your feed, your messages, or any page content you have not selected.
• It never posts for you — the extension never submits anything to LinkedIn. Copy places the comment on your clipboard. Insert, which is optional and can be hidden in the extension’s Settings, only places text into LinkedIn’s comment box; you still review it and press Post yourself.
• No third-party sharing — the content you select and the text generated for you are used solely to provide the feature to you and are never sold or shared with third parties. Generating text involves sending the selected content to our AI model providers purely to produce that text.
• Your control — you can sign out from the extension’s Account screen, which immediately revokes that browser’s token and disconnects it from your account. Signing out on one browser does not affect your other devices.

CarouseLabs Engage for X is a separate extension that helps you write replies and messages on X (x.com). It signs in to the same CarouseLabs account and follows the same practices as the LinkedIn extension in section 9: its own token per browser, generated text kept in your History and deleted automatically after 90 days, diagnostics without any page content, no sale or sharing with third parties, and signing out from its Account screen. In addition:

• Posts you select — when you click Reply on a post on X, that post’s visible text, author name and @handle, its link, and which kinds of media it carries (for example image, video or poll, never the media itself) are read, together with the same details for a post it quotes and for the posts shown above it in that conversation. Whether the post is your own is worked out in your browser from the account shown in X’s sidebar; only that yes or no is sent. All of this is sent to CarouseLabs only when you ask for a reply to be written.
• Chats you select — when you click Read this conversation in Messages while an X chat is open, the messages visible in that chat and the other person’s name and @handle are read. The @handle is used to look up the reason you saved for that person; the messages and name are sent to CarouseLabs when you generate a reply.
• Your X profiles and settings — the reply profiles you create for X, your default profile, whether you have X Premium (which allows longer replies) and whether the Insert button is shown are stored with your account, separately from your LinkedIn profiles. The reasons you save for conversations are shared by both extensions.
• No automatic browsing tracking — the extension reads a post only when you click its Reply button and a chat only when you click Read. To offer help when you open an X chat, it checks whether the page’s address is a chat; that check happens in your browser and nothing about it is sent. It does not monitor your timeline, your messages, or any page you have not selected.
• It never posts for you — the extension never submits anything to X. Copy places the text on your clipboard. Insert, which is optional and can be hidden in the extension’s Settings, only places text into X’s reply or message box; you still review it and press Reply or Send yourself.

For privacy questions, requests, or concerns, email support@carouselabs.com.