Privacy Policy

Last updated: September 12, 2026

1. Introduction

frgmnt is a brand of Luckystars Media ("we", "our"), which operates an agentic content automation framework that integrates with social media platforms. This policy describes how we collect, use, and protect information when you visit this site or use our product.

2. Information We Collect

When you create an account:

• Email address — used to sign you in and to send service messages.
• Password — stored only as a bcrypt hash. We never store or see your actual password.
• Plan and billing references — your plan, and if you subscribe, the customer and subscription identifiers issued by Stripe. Card details are handled by Stripe and never reach our servers.
• Team membership — if you invite teammates, the email addresses you invite.
• Product activity — your settings, and a log of actions taken in the product.

Waitlist signups: If you submit your email through the waitlist form, we collect:

• Your email address
• Submission timestamp
• Approximate country (derived from IP at the time of submission)
• Browser user agent

We use this information only to notify you when early access becomes available. We do not sell it, share it, or use it for profiling or advertising.

When you connect a social account via OAuth:

• Account information: Username, profile image, and account ID as provided through the platform's OAuth flow.
• Board/channel information: Names and IDs of your boards or channels to enable publishing.
• Content data: Information about posts we create and publish on your behalf.

We do not collect your platform password. Authentication is handled entirely through official OAuth 2.0 flows.

3. How We Use Information

• Publishing content to your accounts as authorized by you
• Listing available boards/channels for content placement
• Tracking published content for your reference

We do not use your data for advertising or profiling.

4. Data Storage

OAuth tokens are encrypted at rest, and passwords are stored only as bcrypt hashes. All API communications use HTTPS. Tokens are refreshed automatically; old tokens are discarded. Your data is scoped to your account, and only you and the teammates you invite can access it.

5. Data Sharing

We do not sell, rent, or distribute your data to third parties.

6. Third-Party Services

• Pinterest API: For board access and pin publishing. Subject to Pinterest's Privacy Policy.
• Google AI: For content generation. No user data is sent to Google. Subject to Google's Privacy Policy.
• Stripe: For subscription payments. Stripe handles card details directly; we only store the identifiers it returns.
• Email delivery: To send account and service emails to the address you signed up with.
• Hosting: Our application and database run on infrastructure operated by Fly.io and Neon, and this website is served through Cloudflare.

7. Data Retention

Tokens retained only while necessary. Published content metadata retained for your reference. Request deletion at any time.

8. Revoking Access

Revoke frgmnt's access through your platform's security settings at any time.

9. Your Rights

• Revoke access at any time
• Request a copy of your data
• Request deletion of stored data
• Withdraw consent

10. Children

Not intended for use by individuals under 13.

11. Changes

We may update this policy. Changes reflected here with an updated date.

12. Contact