Privacy.
This page explains which data we process when you use the website or the app, why we need it, how long we keep it and which rights you have.
Who is responsible
Crowdbird is operated by a company based in the United Arab Emirates (UAE). It decides how and why your data is processed. UAE law applies.
Send privacy questions and requests through the contact page, topic “Privacy and my data”. Reply within 24 hours.
Which data we process and why
We only process what the feature in question needs:
- Your account: email address, name and language, so you can sign in and use Crowdbird. If you sign in with a third-party login provider, it shares your email address and name with us.
- Your workspaces: scheduled and published posts, uploaded media, analytics of your connected accounts and your team's settings.
- Connected social media accounts: for most platforms you sign in through the platform's official login. For Bluesky you enter an app password, which we only pass on to connect and never store. For Telegram you add a bot as an admin of your channel. We don't store your platform password or access keys in our database.
- Contacts from comments and direct messages: for the DM automation we store who responded to which automation. The inbox reads direct messages live. We don't keep a copy. We keep the text of a comment that triggers an automation for 30 days, so you can see it in the automation's history.
- Link-in-bio page: we count views and clicks. We do not store visitors' IP addresses. We count with an identifier whose key changes every day. We don't load advertising pixels on link-in-bio pages.
- AI assistant: what you give it for a task goes to the AI model: your text, for posts also the image, plus your workspace's tone notes. We don't store the text you enter. We only count how many requests a workspace makes.
- Contact form: name, email address, topic, message and the page you write from. Your IP address is used only as an irreversible identifier to protect against spam.
- Support chat: your email address and your messages, so we can reply. Your IP address is used only as an irreversible value to prevent abuse.
- Free tools: for the username you enter, we fetch public profile and post data. About you as a visitor we only store an irreversible identifier of your IP address against misuse.
- Reach measurement: on every visit, with analytics cookies. We record page views without sign-in data in the address and single events such as using a tool, signing up or sending a request, without their content. A notice on your first visit tells you about it.
- Ad measurement with the pixels of the networks we advertise on: only when we have set them up for ad campaigns. They learn which pages you visit and whether you send the contact form or the waitlist form, without the content of your message. This shows us which ads lead to requests, and lets the networks show our ads to people who fit. We don't load them on sign-in pages or on link-in-bio pages.
- Where your first visit came from: campaign, referring website and landing page. When you sign up, we store this origin once with your account.
Legal basis
We process your data to deliver the service you signed up for, to keep Crowdbird secure and working, to understand how the website is used so we can improve it, to measure the success of our ads, and where the law requires it.
Analytics and ad measurement run on every visit, and a notice on your first visit tells you about it. The cookie page lists the cookies involved.
Who receives data from us
For certain tasks we work with partners who receive data only for those tasks. We don't sell data. On the sign-in and sign-up page, a bot check tells people apart from automated sign-ups. It uses technical signals from your browser and device and your IP address, only for this check and not for tracking.
The advertising networks also process the data from their pixels for their own purposes, for example to deliver and evaluate ads.
| Area | What for |
|---|---|
| Hosting and database | Running the website and the app. Account, workspaces, posts, media and analytics are stored in the EU |
| Connection to social networks | The connection to the networks you link: publishing, analytics, inbox and automations |
| AI model | The AI assistant and the AI generators. They only receive what you give them for a task: text, for posts also the image, and your workspace's tone notes |
| Email delivery | Emails for sign-in, notifications and replies to contact requests |
| Data lookup for the free tools | Public profile and post data, only for the username you enter |
| Reach measurement | Usage statistics of the website |
| Advertising pixels | The pixels of the networks we advertise on, when set up |
| Payments (Stripe) | Payment for paid plans: name, email address, billing address, tax ID if you enter one, and your payment details. Card details go straight to Stripe and never reach us. |
Where your data is processed
Our database and files are stored in the EU. Some partners, for example for reach measurement, advertising pixels and the AI model, also process data in other countries, such as the USA. We only work with partners who protect data with appropriate measures.
How long we keep data
We keep data only as long as we need it for the purpose we collected it for, or as long as the law requires, and delete it after that. You can delete workspaces and your account yourself at any time. A deleted workspace is removed for good after 30 days.
Your rights
You can ask us which data we hold about you, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format.
Owners and admins export a workspace's data in Settings, and you delete your account under My account. For anything else, write to us through the contact page.
You can also contact the data protection authority where you live.
Free tools and public profiles
The free tools analyze public profiles whose names visitors enter. If you own a profile and want the data we have stored for it deleted, or the profile excluded for good, write to us through the contact form and choose the topic “Privacy and my data”. We check the request, then delete the data and block the profile.
Public post data used for the best posting times is deleted after 90 days, and after 30 days for profiles that are not connected to Crowdbird.
Children
Crowdbird is for people aged 18 and over. We don't knowingly process data of anyone younger. If you think a child has given us data, write to us and we will delete it.
Data in your workspace
For contacts from comments and direct messages that you manage with Crowdbird, you are responsible for that data and we process it on your behalf, only to run the features you use.
Changes
When the way we process data changes, we update this page and the “last updated” date at the top.