CloutProfit LLC · Touchless Scaling

Privacy Policy

How the Touchless Scaling platform collects, uses, stores and deletes data — including anything obtained from social accounts you connect to it.

Effective 13 August 2026. This policy covers the Touchless Scaling platform specifically. Our general company privacy policy is at cloutprofit.com/privacy-policy; where the two differ about the platform, this page governs.

The short version. We hold the information you type into your workspace, and access tokens for the social accounts you choose to connect. We use them to draft and publish your own marketing to your own accounts. We do not sell data, we do not use your content to train models, and you can disconnect an account or delete your workspace at any time — see Deleting your data.

1 · Who we are

CloutProfit LLC ("we", "us"), operator of the Touchless Scaling platform. Contact: cloutprofitagency@gmail.com.

2 · What we collect

2.1 What you give us

Account details — the name and email used to access your workspace.
Business information you enter — your offer, pricing, audience, competitors, objections, testimonials, brand assets and anything else you type into the intake or upload to your workspace. This is the substance of the product.
Content you create — drafts, scripts, pages, schedules and the conversations you have with the assistant.

2.2 What we obtain from platforms you connect

Only when you explicitly connect an account, and only what that account's platform grants for the permissions you approve:

Platform	What we receive	What it is used for
Instagram, Facebook, Threads	Account and page identifiers, account name and picture, access tokens, and the metrics for content published through us	Publishing to your own accounts and reporting on what we published
YouTube	Channel identifier, channel name, access tokens, and upload/status data	Uploading your videos to your own channel
TikTok	Account identifier, account name, access tokens, publish status	Publishing to your own account
X, LinkedIn	Account identifier, account name, access tokens	Publishing to your own account
Stripe	Read-only account identifier and payment metadata	Showing revenue against the funnels we build
Cloudflare	A scoped API token you create and can revoke	Deploying your funnel pages into infrastructure you own

2.3 What we collect automatically

Technical data — IP address, browser type and request timestamps, used for security, rate limiting and diagnosing faults.
Usage counts — how many drafts and publishes your workspace produced in a month, so we and you can see what was used.

3 · What we do not do

We do not sell your data or share it with data brokers or advertisers.
We do not use your business information or your content to train AI models. It is sent to a model provider to produce your output and is not retained by us for training.
We do not read accounts you have not connected, and we do not post to any account without an explicit action in the product.
We do not use social-platform data for advertising or for any purpose other than operating the features you asked for.

4 · Legal bases

Where UK or EU data-protection law applies: we process your account and business information to perform our contract with you; we process technical and security data under our legitimate interest in keeping the service safe and working; and we process data from connected social accounts on your consent, which you give at the moment you connect the account and withdraw by disconnecting it.

5 · Who we share it with

Only processors that make the product work, each bound to use it solely for that purpose:

Cloudflare — hosting and data storage.
AI model providers — your prompts and the relevant parts of your workspace are sent to generate your drafts.
The social platforms you connected — the content you asked us to publish.

We also disclose data where the law requires it. If our business is ever sold, data moves with it and you will be told before that happens.

6 · Where it is stored, and for how long

Your workspace content — kept while your workspace exists, and deleted within 30 days of a deletion request.
Access tokens — kept only while the connection is active, and destroyed immediately when you disconnect the account or delete your workspace.
Technical logs — kept up to 90 days, then discarded.
Records we must keep by law, such as invoices, are kept for the period the law requires and no longer.

Data is stored on Cloudflare infrastructure and may be processed in any country where Cloudflare or our model providers operate. Where data leaves the UK or EEA it moves under Standard Contractual Clauses or an equivalent safeguard.

7 · Security

Workspaces are separated so one client's data is not reachable from another's. The keys and tokens you connect are stored in your workspace only, used only for the features listed on the connection's card, and deleted from our side when you disconnect (delete or replace the key inside the other tool as well to be certain). All traffic uses HTTPS. Access to production is limited to people who need it. No system is perfectly secure, and we will tell affected users without undue delay if a breach ever puts their data at risk.

7a · YouTube

Where you connect a YouTube channel, the Touchless Scaling platform uses YouTube API Services. By connecting a channel you also accept the YouTube Terms of Service.

Anything we obtain through those services — your channel name and identifier, the status of videos we upload for you, and the public statistics for those videos — is used only to upload your own videos to your own channel and to show you how they performed. We do not use it for anything else, we do not combine it with data from other users, and we do not give it to anyone.

Google's own handling of your information is covered by the Google Privacy Policy.

You can take our access away at any time, and you do not have to ask us. Disconnect the channel inside the platform, or revoke it directly at Google's security settings page, which lists every app with access to your account. Either route stops us immediately; nothing we already published to your channel is affected, because those videos are yours.

8 · Your rights

Wherever you live, you can ask us to:

Show you what we hold about you, and give you a copy.
Correct anything wrong.
Delete your data — see Deleting your data, which also covers the automatic route from Facebook and Instagram.
Restrict or object to processing, and withdraw consent for a connected account by disconnecting it — or, for a Google account, at Google's permissions page.
Take your data elsewhere in a portable format.

Write to cloutprofitagency@gmail.com and we will respond within 30 days. If you are in the UK or EU and are unhappy with our answer, you may complain to your national data-protection authority.

9 · Children

The platform is for businesses and is not directed at anyone under 18. We do not knowingly collect data from children, and will delete it if we find we have.

10 · Changes

If this policy changes materially we will update the effective date above and notify workspace owners. Continuing to use the platform after a change means you accept it.