Privacy policy
Recon (recon.ltd) turns what you write, and optionally your GitHub activity, into social media posts and short videos, and posts them for you when you ask it to. This page explains what we collect, why, who else handles it, and how to delete it. Questions: hello@recon.ltd.
What we collect
- Your account: your name and email address, and your GitHub username if you sign in with GitHub.
- What you give Recon to post about: the text you write, and screenshots or clips you upload.
- GitHub activity, only if you connect a repo: commit messages, pull request titles and descriptions, release notes, and a trimmed summary of code changes. Anything that looks like a password, key or token is redacted before it is stored. We ask GitHub for read access only, and never write to your repositories.
- Your social accounts, only if you connect them: the access tokens each platform gives us, stored encrypted, and your public handle or Page name. We use them only to publish the posts you approve and to show you whether the connection still works.
- Drafts, schedules and posting history: the posts Recon writes, when they are scheduled, and links to the ones that went out.
- Billing: if you subscribe, Stripe processes your payment. We store your plan and subscription status; we never see or store your card number.
- Waitlist: if you join the waitlist, your email address and anything you tell us about what you are building.
How we use it
- To write drafts, reels and schedules for you, and to publish the posts you approve (or that you have put on autopilot).
- To sign you in and send sign-in links, and to tell you about your account (for example, when your trial ends).
- To keep the service working and secure. We do not sell your data, and we do not use it for advertising.
Who else handles it
We use a small number of providers to run Recon. Each only gets what it needs:
- Anthropic (Claude) writes the drafts. It receives the text and source material for the post being written. Anthropic does not use API data to train its models.
- Vercel (hosting), Neon (database), Cloudflare (file storage), Railway (video rendering), Resend (email) and Stripe (payments).
- The platforms you connect (such as Bluesky, X, LinkedIn, Threads, Instagram, Facebook, TikTok and YouTube) receive the posts you publish to them, under their own privacy policies.
YouTube, TikTok and Meta
If you connect YouTube, Recon uses the YouTube API Services to upload the videos you approve. By connecting it you also agree to the YouTube Terms of Service, and Google's handling of your data is covered by the Google Privacy Policy. You can remove Recon's access at any time from your Google security settings. Recon only uploads videos; it does not read your existing videos or analytics. TikTok and Meta (Instagram, Facebook, Threads) are used the same way: only to publish what you approve, using the permissions you grant when you connect.
Keeping and deleting your data
- We keep your data while your account is open.
- You can disconnect any social account or GitHub repo at any time in Recon's Accounts page. We delete the stored token when you do.
- To delete everything: Settings → Profile → Delete my account. This permanently removes your account, drafts, uploads, schedules and connected-account tokens straight away. You can also email hello@recon.ltd from your account email and we will delete it within 30 days. Posts already published stay on the platforms you posted them to; delete them there.
Security
Platform tokens are encrypted at rest, connections use HTTPS, and only you can see your drafts and uploads. Text that looks like a secret is redacted before it is stored or sent to the AI.
Changes
If we change this policy in a way that matters, we will tell you by email or in the app before it takes effect.