Who we are
Gootier is a social-media scheduling and content-creation service operated by Jhome Automation. When this policy uses "we", "us", or "our", it means Jhome Automation acting as the operator of Gootier (gootier.jhomeautomation.com).
What this policy covers
This policy explains what information we collect when you use Gootier, how we use it, who we share it with, and the choices you have. By using Gootier you agree to the handling of information as described here.
Information you give us directly
- Account details — your email address and a hashed password when you sign up.
- Content you create — the social posts, captions, email blasts, images, videos, recipient lists, and other material you compose, upload, or schedule inside Gootier.
- Marketing plans and briefs — anything you provide to the AI tools (campaign briefs, video sequence prompts, etc.) so we can generate output for you.
- Billing information — payment is processed by Stripe. We never see your card number; Stripe gives us back only the last four digits, brand, and a customer ID.
Information we collect automatically
- Usage logs — page paths, API endpoints called, action timestamps, and high-level outcomes (success / failure) — used to diagnose problems and meter usage.
- Device + browser — IP address, user-agent, and PWA installation state (so we know whether to surface the install banner).
- Cookies — a session cookie for authentication, a CSRF cookie, and a theme cookie (Aurora vs. light). We do not use third-party advertising cookies.
Information from third parties
When you connect a social channel (Facebook, Instagram, X, LinkedIn, TikTok, YouTube), the OAuth provider gives Gootier:
- An access token (so we can publish on your behalf), often with a refresh token.
- The page / account / channel ID you authorized us to post to.
- Public profile data the provider exposes for that scope (typically: account name, avatar URL, page ID).
OAuth access tokens are encrypted at rest before being written to the database. You can revoke our access at any time from the Connections page or from the provider's own settings, and the corresponding token row is deleted from our store.
How we use your information
- To provide the service — schedule and publish posts, send email blasts, render videos in the studio, generate AI campaign drafts, deliver push notifications.
- To bill you and process credit purchases via Stripe.
- To send transactional emails (account confirmation, password reset, scheduled-post receipts). We do not send marketing email to your address unless you opt in.
- To protect Gootier and our users from abuse, fraud, and security incidents.
- To improve the product based on aggregated usage patterns.
Who we share it with
We do not sell your personal information. We share data only with the service providers we need to operate Gootier, and only for the purposes listed:
- Railway — application hosting and managed Postgres database.
- Stripe — payment processing and subscription management.
- AI providers — the briefs / prompts you submit to the AI tools are sent to our underlying AI provider for inference. Output is not retained by the provider for model training in the configurations we use.
- fal.ai — image, video, music, and TTS generation. Generated assets are stored on fal's CDN and are linked from our database.
- Social platforms — when you publish a post, its content is sent to the platform you authorized (Facebook, Instagram, X, LinkedIn, TikTok, YouTube).
- SMTP provider — outgoing email delivery for blasts and transactional mail.
- Legal compliance — we may disclose information if required by valid legal process or to protect rights, property, or safety.
How long we keep it
- Account records — for as long as your account is active.
- Posts, drafts, generated media — until you delete them or close your account.
- Audit / action logs — up to 18 months for security and abuse investigation.
- Billing records — as long as required by tax and accounting law.
When you delete your account, we delete or anonymize the above within 30 days, except where retention is required by law.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. You can also withdraw any consent you previously gave. Email privacy@jhomeautomation.com to make a request and we will respond within 30 days.
Security
We use HTTPS everywhere, encrypt OAuth tokens at rest, hash passwords with bcrypt, and run on managed infrastructure with vendor-provided database backups. No internet service is perfectly secure — if you suspect your account has been compromised, please contact us immediately so we can investigate.
Children
Gootier is not directed to children under 13 (or the applicable age in your country). Do not use Gootier if you are below this age.
Changes to this policy
We may update this policy when our practices change. Material changes will be flagged in-app or by email. The "Last updated" date above always reflects the current revision.
Contact
Questions about this policy? Email privacy@jhomeautomation.com.