Privacy Policy

1. Introduction

incub8ai ("incub8ai", "we", "us") is operated by LEC Group Inc. incub8ai is a workspace-based AI platform for marketing and workforce automation: you configure AI "employees" that draft and publish social media content, run market research, and complete business tasks under your review and approval. This Privacy Policy explains what information we collect, how we use it, and how we protect it when you use the platform.

2. Information We Collect

• Account information: Your email address, name, and authentication credentials when you create an account. If you sign in with a third-party provider (such as Google or GitHub), we receive basic profile details (name, email) from that provider.
• Mobile number: If you choose to receive text-message notifications, the mobile number you provide and verify. See SMS / Text Messaging below.
• Workspace & content data: Organization details, team membership and roles, brand charters and configuration, and the content your AI employees draft — along with the approvals you make and the posts you publish, including the performance metrics that connected platforms return.
• Connected accounts: When you connect a third-party account (for example LinkedIn, Meta, X, or Slack), we store the access tokens needed to act on your behalf, encrypted. We never receive your password for those services.
• Usage & activity data: Pages visited, features used, and platform and agent activity logs used to operate, secure, debug, and improve the service.

3. How We Use Your Information

• To provide, operate, and maintain the incub8ai platform
• To authenticate you and manage your account and workspace
• To draft, review (human-in-the-loop), schedule, and publish content to the accounts you connect
• To send transactional messages — account verification, approval requests, and notifications — by email, SMS, Slack, or in-app, according to your settings
• To run market research and ground AI recommendations in your organization’s data
• To monitor, secure, debug, and improve the platform

4. SMS / Text Messaging

If you opt in, we use your mobile number to send you account- and approval-related text messages — for example, letting you know that an AI-drafted post is awaiting your approval. You opt in inside the app at Settings → Notifications by enabling SMS and verifying your mobile number. You can opt out at any time by replying STOP, or by turning SMS off in your settings; reply HELP for help.

Message frequency varies — a message is sent only when an item needs your attention. Message and data rates may apply.

We do not share or sell your mobile number, or your SMS opt-in or consent, with any third party or affiliate for marketing or promotional purposes. Text messages are delivered through our messaging provider (Twilio) solely to operate this service.

5. How AI Processing Works

Your content is processed by AI models to generate drafts, research, and recommendations. Inference runs primarily on our own self-hosted model fleet. When configured, we may route certain requests to a third-party model provider (Anthropic) as a fallback; in that case only the content needed to complete the request is sent. We do not sell your content, and we do not use it to train third-party public models.

6. Data Storage and Security

Your data is stored in Supabase (PostgreSQL hosted on AWS) and protected by row-level security, so members can only access data for organizations they belong to. Data is encrypted in transit (TLS) and at rest.

Access tokens for connected accounts and other secrets are additionally encrypted at the application layer (AES-256-GCM) before they are stored. Passwords are managed and hashed by our authentication provider; we never store them in plain text.

7. Third-Party Services

We rely on the following service providers to operate the platform. Each receives only the data needed to perform its function:

• Supabase: Database, authentication, and storage
• Vercel: Application hosting
• Resend: Transactional email delivery
• Twilio: SMS delivery
• Anthropic: Optional AI model provider (fallback inference)
• Slack: Optional notifications and chat integration
• Platforms you connect: Accounts you authorize — such as LinkedIn, Meta (Facebook/Instagram), X, and TikTok, and business tools like Google Workspace, Microsoft 365, Atlassian, Salesforce, Notion, and GitHub — receive only the data needed to perform the actions you request.

8. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Request a copy of your data
• Withdraw consent for optional processing (such as SMS notifications)

To exercise any of these rights, contact us at support@incub8ai.com. We provide a machine-readable export of your personal data on request, and we record and action account-deletion requests within 30 days.

9. Data Retention

We retain your account and workspace data for as long as your account is active. You can delete your content at any time, and when you delete your account we delete the associated data (residual copies may persist briefly in encrypted backups). Operational and activity logs are retained only as long as needed to run and secure the service.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated through the platform or by email where appropriate.

11. Contact

For privacy inquiries, contact us at support@incub8ai.com.