Privacy Policy

TopicFinder (topicfinder.ai) is operated by TurboHQ, a company based in Delaware, United States. When this policy says "we," "us," or "our," it means TurboHQ.

If you have questions about this policy, email us at [email protected].

• Account information — your email address and password (or Google account details if you sign in with Google OAuth). This is stored in Supabase, our database and authentication provider.
• Mobile number— if you choose to provide one (for example, when joining the waitlist) so we can text you. See "SMS and Text Messaging" below.
• Content you create — scripts, saved ideas, voice blueprints, onboarding preferences, and any other content you generate or save inside the app. Stored in Supabase.
• Instagram profile data — when you use the Outlier Finder feature, we analyze publicly available Instagram profiles (bios, post captions, engagement metrics) through HikerAPI. We do not access private accounts or DMs.
• Usage data — basic session information and cookies used to keep you logged in, plus privacy-friendly, cookieless page analytics (Vercel Analytics). We do not run advertising trackers.

• To run the service — authenticate you, save your work, generate scripts and ideas using AI.
• To improve the product — understand which features are used so we can make TopicFinder better.
• To communicate with you — send transactional emails (password resets, account confirmations). We will not spam you with marketing emails unless you opt in.

We share data with a limited number of third-party services strictly to operate the product:

• Supabase — database, authentication, and file storage.
• Anthropic (Claude API)— your content prompts (niche, topics, scripts) are sent to Anthropic's API to generate AI-written content. Anthropic's usage policies apply to that data.
• Stripe — payment processing. Your card details are handled directly by Stripe and never touch our servers; we store only your Stripe customer ID and subscription status.
• AssemblyAI — audio from publicly available Instagram videos is sent to AssemblyAI to generate the transcripts used in the Discover feed.
• HikerAPI and Apify — public Instagram data (profiles, reels, view counts) is fetched through HikerAPI and Apify for the Discover and Outlier Finder features.
• Resend — sends our transactional emails (confirmations, account emails) and receives replies to support addresses.
• Sentry — error monitoring. When something breaks, technical details about the failure (which can include your IP address) are captured so we can fix it.
• Upstash — caching and rate limiting, keyed by account identifiers.
• Vercel — hosts the website and application.
• Google — if you sign in with Google OAuth, Google handles that authentication flow.

We do not sell your data. We do not share your data with advertisers, data brokers, or any other third parties beyond the services listed above.

If you give us your mobile number and opt in, we use it to send you text messages about your waitlist spot, your account, and occasional product updates or offers. Full program details, message frequency, and opt-out instructions are in our SMS Terms.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from every other category of data sharing described in this policy; this information will not be shared with any third parties. The only exception is the messaging provider that delivers texts on our behalf, which processes your number solely to send those messages.

You can opt out at any time by replying STOP to any message, or get help by replying HELP or emailing [email protected].

We use cookies solely for session management — keeping you logged in as you use the app. We do not use advertising cookies or third-party tracking cookies.

Your data is stored in Supabase-hosted infrastructure. We use industry-standard security practices including encrypted connections (HTTPS/TLS), secure authentication tokens, and access-controlled database policies. No system is 100% secure, but we take reasonable measures to protect your information.

You can:

• Access your data — everything you create in TopicFinder is visible to you in the app.
• Delete your data — you can delete your account and all associated data at any time. Email us at [email protected] to request account deletion. We aim to process deletion requests within 30 days. Deletion removes your account and the content you created; certain records (such as billing records we are required to keep, and operational logs) may be retained where the law requires or for legitimate business purposes.
• Export your data — contact us and we will provide a copy of your stored data in a standard format.

If you are located in the EU, UK, or another jurisdiction with data protection laws, you may have additional rights including the right to rectification, restriction of processing, and the right to lodge a complaint with a supervisory authority.

We keep your data as long as your account is active. When you request deletion, we remove your account and created content from our active systems; residual copies may persist in encrypted backups and logs for a period before being purged, and billing records are retained as required by law.

TopicFinder is not intended for anyone under the age of 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

We may update this policy from time to time. If we make significant changes, we will notify you via email or an in-app notice. The "last updated" date at the top always reflects the most recent version.

TurboHQ
Delaware, United States
[email protected]