Privacy Policy
Last updated July 10, 2026
Topped (“Topped,” “we,” “us”) is operated by the team behind topped.ai. This policy explains what information we collect when you use Topped, why we collect it, and the choices you have. If you have questions, email support@topped.ai.
1. Account data
When you sign up we collect your email address and sign-in information (for example, a magic-link sign-in or a Google/Apple sign-in identifier). We use this to authenticate you, operate your account, and send account-related email (receipts, digests, activation and reconnect notices).
2. Connected social accounts
If you connect a TikTok, Instagram, or YouTube account, we use each platform’s official OAuth flow. We never ask for or store your platform password.
The access tokens we receive are used only to:
- publish posts you have explicitly approved to that account,
- read metrics on posts published through Topped and on your own connected account’s history, so your scoreboard can compare a post against your own normal.
Access tokens are stored encrypted at rest. You can revoke access at any time by disconnecting the account inside Topped, or by revoking Topped’s access directly from the platform’s own app settings (TikTok, Instagram/Meta, or Google). Disconnecting stops all future publishing and metric reads for that account.
3. Content you provide
You give us your App Store link and related app metadata (name, category, description, screenshots) so we can build your profile and suggest a starter watchlist. You may also upload demo footage or other assets to use in generated posts. This content is stored to produce and edit your posts and is not sold or shared for advertising.
4. AI processing of your content
We use Anthropic’s models to plan post structure and write captions, and image/video generation providers (currently Google Gemini for images and fal’s Seedance for video) to render slides and clips. Content you provide, and outlier posts we analyze from public accounts, may be sent to these providers as part of generating your posts. Generated posts carry an AI-disclosure line by default, in line with platform policy; you can review this before you post.
5. Public-data analysis of watched accounts
To find outliers for your watchlist, we collect publicly available posts and engagement metrics from creator accounts you choose to watch (via ScrapeCreators). We do not collect private data from these accounts and do not attempt to access anything not publicly visible on the platform.
6. Payments
Billing is handled by Paddle, our merchant of record. Paddle collects and processes your payment details directly; Topped never sees or stores your card number. Paddle acts as the seller for tax and compliance purposes. See Paddle’s privacy policy for how they handle payment data.
7. Subprocessors
We use the following subprocessors to run Topped. Each is bound by a data-processing agreement appropriate to the data it handles:
- Vercel — application hosting
- Supabase — database, authentication, and interim file storage
- Cloudflare — media storage (R2) and network protection
- Paddle — payments and billing, merchant of record
- Resend — transactional and digest email delivery
- PostHog — product analytics
- Sentry — error tracking
- Anthropic — AI post planning and captions
- Google — AI image generation (Gemini) and YouTube publishing
- fal — AI video generation (Seedance)
- ScrapeCreators — collection of public creator posts and metrics for watchlists
- Trigger.dev — background job processing — content generation and publishing
8. Analytics and error tracking
We use PostHog to understand product usage (for example, which steps of onboarding people complete) and Sentry to capture crashes and errors so we can fix them. Both are configured to avoid collecting your platform access tokens or payment details.
9. Data retention, deletion, and export
We keep your account data for as long as your account is active. If you cancel, your account downgrades to the free tier rather than being deleted, so your history and scoreboard are preserved. If you want your data deleted or exported instead, email support@topped.ai and we will:
- export everything we hold about you — posts, generated assets, scoreboard history, and account data — as a downloadable archive, and
- permanently delete your account data on request, including revoking any stored platform tokens.
This is our walk-away promise: you can always leave with your data, and you are never locked in.
10. Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing (for example under the GDPR or similar laws). You can exercise any of these rights by emailing support@topped.ai. We will respond within a reasonable time and verify your identity before making changes to your account.
11. Changes to this policy
We may update this policy as Topped changes. Material changes will be posted here with an updated date, and where required we will notify you by email.
12. Contact
Topped is operated at topped.ai. For any privacy question, deletion or export request, email support@topped.ai.