Privacy policy

• Account details. Your name, email address, organization name, and role. Given by you at signup.
• Your source material. Recordings, documents, program descriptions, outcome figures, stories, and brand guidance you upload to your Story Vault. This is the material we write from.
• Consent records. For each person who may appear in your content: an identifier you choose, what they consented to, when it expires, and your own reference for where the signed consent is filed. We do not hold the consent document itself.
• Connected account data. See the Google and Meta sections below.
• Billing details. Handled entirely by Stripe. We never see or store your card number.
• Usage data. Which pieces were generated, approved, discarded, or published, and their performance. Used to improve what we produce for you.

If you connect a YouTube channel, we request access through Google OAuth. You can review and revoke that access at any time at myaccount.google.com/permissions.

We request only what publishing requires:

• Uploading videos to your channel. So approved content can be published on the schedule you set.
• Reading your video performance. So we can report which pieces produced support.

If you connect an Instagram professional account and its associated Facebook Page, we use the Instagram Graph API to publish approved content and to read its performance. We request no more than publishing and insights require. You can disconnect at any time in your Facebook business settings or from your Fructus Donum dashboard.

We do not read your direct messages, we do not post without your approval unless you have explicitly enabled autopilot, and we do not use Meta data to train models.

• We do not train models on your material. Your sermons, stories, program data, and connected account data are never used to train or fine-tune any model, ours or anyone else's.
• We do not sell or rent your data. Not to advertisers, not to data brokers, not to anyone.
• We do not synthesize real people. We never generate the likeness or voice of a real person. This is a product rule, not a setting.
• We do not publish without permission. Every organization starts in review mode. Nothing is published until you approve it, or until you explicitly enable autopilot.

If you send a recording through our free demo, we transcribe it, produce a sample, and email it to you. That material is not published anywhere, is not used to train models, and is deleted automatically after 30 days. Email privacy@fructusdonum.com to have it deleted sooner.

Only the vendors required to run the service, each bound to protect it:

• Anthropic. Language model processing for writing and quality review. Not used to train their models.
• Google and Meta. Only to publish to the channels you connected and read their performance.
• Stripe. Payment processing.
• Our hosting and storage providers. To run the application and store your files.
• Speech synthesis provider. To narrate your scripts.

We will also disclose data if legally compelled, and will tell you unless prohibited from doing so.

• Demo submissions. 30 days, then deleted automatically.
• Your Story Vault and published content. For as long as your account is open.
• After you cancel. Exportable for 30 days, then deleted within 60 days.
• Billing records. Retained as long as tax and accounting law requires.

You can export everything, correct anything, or have it deleted — at any time, from your dashboard or by emailing privacy@fructusdonum.com. We respond within 30 days.

If you are in the EEA or UK, you have rights of access, rectification, erasure, restriction, portability, and objection under GDPR; our lawful basis is the contract between us, and our legitimate interest in keeping the service running and secure. If you are a California resident, the CCPA/CPRA gives you rights to know, delete, correct, and opt out of sale — and we do not sell personal information, so there is nothing to opt out of.

Data is encrypted in transit and at rest. Access tokens for your connected accounts are encrypted and used only for the actions described here. Each application we run has its own isolated database. If a breach affects your data, we will tell you promptly and plainly.

Fructus Donum is sold to organizations and is not directed at children under 13. We do not knowingly collect their personal information. If a person appears in material you upload, your recorded consent must cover them — and for a minor that means consent from a parent or guardian.

If we change this policy materially we will email account holders before it takes effect. Questions, requests, or complaints: privacy@fructusdonum.com, or Pixel Shadow LLC, Claremont, California, United States.