Privacy Policy
Effective Date: September 25, 2026 • Published by AHMV Systems for Cultlike
1. Introduction & Commitment to Privacy
Cultlike (“Cultlike”, “we”, “our”, or “us”), operated by AHMV Systems, provides an operations and distribution workspace for creators, directors, and studios. We are deeply committed to protecting your creative assets, personal data, and confidential productions.
This Privacy Policy describes our practices concerning data collection, usage, storage, security, and disclosure when you access our application and connected APIs at cultlike.ahmvsystems.com.
2. Data We Collect
To deliver high-velocity creator workflows, Cultlike collects the following categories of information:
- Account & Profile Information: Your name, email address, password hash, and workspace roles managed securely through Supabase Auth.
- Creator Assets & Deliverables: Video files, audio snippets, thumbnails, captions, scripts, task deadlines, and production notes you author or import into Cultlike.
- Operational Telemetry: Anonymized performance metrics, error diagnostics, and session states necessary to maintain app reliability.
3. Meta Platform Data Disclosures (Instagram & Facebook)
Cultlike integrates with Meta Platforms via the Instagram Graph API and Facebook Login for Business to enable automated video release scheduling and performance verification.
Permissions Requested & Purpose:
- instagram_content_publish: Allows you to schedule and publish video Reels and Carousels from your Content Vault directly to your verified Instagram Professional account.
- instagram_basic: Resolves your Instagram Business account ID and username to display verification badges in your private studio.
- pages_show_list & pages_read_engagement: Allows our system to verify the linked Facebook Page required by Meta to route API requests to your Instagram Business account.
Strict Non-Monetization Guarantee: We do NOT sell, rent, monetize, or transfer your Meta Platform Data to third-party brokers, advertisers, or unauthorized third parties under any circumstances.
Meta OAuth access tokens are stored in encrypted httpOnly session cookies or encrypted server-side databases, accessible exclusively by the authenticated workspace owner.
4. Google API User Data Policy Compliance
Cultlike accesses Google APIs (Google Calendar, Google Docs, Google Drive, and YouTube Data API v3). Our use and transfer of information received from Google APIs adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements.
- Google Drive: Used solely to allow you to ingest video deliverables from your Drive folders directly into your workspace.
- YouTube Data API v3: Used solely to retrieve channel subscriber counts, video views, and publish approved video deliverables from your Content Studio.
- Google Calendar: Used solely to overlay deadlines and schedule production events upon your request.
5. Data Storage, Security, & Encryption
- Encryption at Rest: All database records and file storage are protected with AES-256 encryption.
- Encryption in Transit: All communications between your browser, our servers, and third-party APIs utilize TLS 1.3 / HTTPS.
- Multi-Tenant Isolation: Data access is partitioned by workspace through strict PostgreSQL Row Level Security (RLS) policies.
6. Data Retention & User Data Deletion
We retain platform data and creative assets only as long as your workspace account remains active:
- Instant Disconnect: You can revoke Meta or Google access at any time in Settings → Integrations.
- Complete Erasure: To request permanent deletion of all stored files, database records, and logs, visit our User Data Deletion Instructions or email our privacy team.