Privacy Policy.

Last updated August 17, 2026

Directd ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, which researches how to market the mobile app you built, produces marketing material for it, engages creators to publish that material, and measures which of it produced installs.

Doing that means connecting to accounts you already own — Apple App Store Connect, and where you choose to, Instagram, Facebook Pages and TikTok. The sections on connected platform accounts set out exactly what we read from each, what we store, and what we never touch. You can disconnect any of them at any time, and delete everything we hold without giving a reason.

Information We Collect

Personal Information

We may collect personal information that you provide directly to us, including:

  • Name and email address
  • Account credentials and profile information
  • Payment and billing information
  • App profile details (app name, description, category)
  • Communication preferences
  • Support requests and correspondence

Marketing & Campaign Data

As Directd works on your app, we generate and store:

  • Material we produce for you — summaries of your app, competitor analysis, video ideas, creator scripts and drafts
  • Your instructions to us, as a continuous conversation retained so the system does not lose context between sessions
  • Campaign records — which creators were engaged, what was published, on which platform, what it cost
  • Performance data — installs, impressions, reach and retention attributed to each piece of published content
  • Budgets and spending limits you set, and how much of each has been committed

App Store Lookups

When you paste an App Store link, we send that app's public identifier and a set of search phrases derived from its listing to Apple's public iTunes lookup and search endpoints, on your behalf. We do not send Apple any information about you, and no Apple account or credentials are involved. Specifically:

  • The link you paste, and the app identifier and storefront read from it
  • Search phrases derived from the app’s own name and from the names of apps that rank alongside it
  • The public listing data Apple returns (name, description, icon, category, screenshots, rating counts, release dates) and the public search results for those phrases
  • Cached results, held for up to 24 hours, so repeated scans of the same app or phrase do not re-query Apple

Where an app is saved to your account, the listing data above is stored with it, and search positions measured over time are retained so we can show how your ranking changes. All of it is publicly available information about a published app, not personal data.

Usage Information

We automatically collect information about how you use our service:

  • Device information and browser type
  • IP address and location data
  • Usage patterns and feature interactions
  • Performance and error logs
  • Analytics on channel testing and recommendations

Connected Platform Accounts

Directd only connects to an account when you explicitly authorise it, and each connection is limited to the narrowest permissions that let the feature work. We never ask for, receive or store the password to any of these accounts.

Apple — App Store Connect

You issue Directd an App Store Connect API key. We store the Issuer ID, Key ID and private key encrypted at rest, and use them only to:

  • Read your app’s listing, metadata and sales/analytics reports
  • Create and manage custom product pages, so installs can be attributed to the creator or idea that drove them
  • Read install, impression and retention figures for those pages

We do not submit builds, change pricing, alter your app's availability, or access customer payment data. You can revoke the key from App Store Connect at any time, which takes effect immediately.

Meta — Instagram and Facebook Pages

Where you connect an Instagram professional account, we request only the permissions needed to publish content you have approved and to measure how it performed. We access:

  • Your Instagram professional account’s basic profile and the Facebook Page it is linked to, which Meta requires for publishing
  • The ability to publish photos, videos and reels you have approved
  • Insights on content published through Directd — reach, impressions, saves, shares and engagement

We do not read your direct messages, post without your approval, access your followers' personal information, or use Meta data for advertising. Meta platform data is used solely to deliver the feature you connected it for, is never sold or shared with third parties for their own purposes, and is deleted when you disconnect the account or delete your Directd account. Access tokens are stored encrypted and are revocable at any time from Facebook Settings → Business Integrations.

TikTok

Where you connect a TikTok account, we use TikTok's Content Posting API and Display API to:

  • Read your basic profile information, to confirm which account content will be posted to
  • Publish videos you have approved, subject to your chosen privacy settings on each post
  • Read performance data for content published through Directd — views, likes, comments and shares

We do not post without your approval, access your private videos or drafts, read your direct messages, or collect information about your followers. TikTok data is used only to provide the feature, is not sold or transferred to third parties, is not used to train machine-learning models, and is deleted when you disconnect the account or delete your Directd account. You can revoke access from TikTok Settings → Security & permissions → Manage app permissions.

Creators

Directd maintains a library of creator profiles built from publicly available information — handles, public follower counts, published content, and the contact details creators themselves publish for business enquiries. Creators can ask to be removed at any time by contacting us, and we honour it without condition.

AI Processing

Directd uses third-party large language model providers to analyse your app and generate marketing material. Your app's public listing data, the material we generate, and your instructions to Directd are sent to those providers to produce a response. We use providers contractually committed to not training their models on data submitted through their APIs. Connected-platform credentials, access tokens and payment details are never sent to a model provider.

How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our service
  • Generate AI-powered channel recommendations
  • Score and track marketing channel performance
  • Process transactions and manage subscriptions
  • Provide customer support and respond to inquiries
  • Analyze usage patterns to improve our service
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information in the following circumstances:

Service Providers

We may share information with trusted third-party service providers who assist us, including payment processors, cloud hosting providers, analytics services, and customer support tools.

Legal Requirements

We may disclose your information if required by law or in response to valid legal requests from public authorities.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption of data in transit and at rest, regular security assessments, access controls, and employee training on data protection.

Data Retention

We retain your personal information only as long as necessary to provide our service and fulfill the purposes outlined in this policy. Account information is retained until you delete your account; usage data is retained up to 2 years; payment information is retained as required by financial regulations; and support communications are retained up to 3 years.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, delete, port your data, or object to certain processing activities. To exercise these rights, please contact us.

To delete your account and everything we hold, follow the data deletion instructions. That page also explains how to revoke Directd's access at Apple, Meta or TikTok directly, without going through us, and what we are legally required to retain.

Cookies and Tracking

We use cookies and similar technologies to enhance your experience and provide personalized features. You can control cookie settings through your browser preferences. For more information, see our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at contact@directd.app.