Privacy Policy

Last updated: 24 August 2026

SuperSend is run by Computer go beep AB ("we", "us"), a company registered in Sweden. This policy explains what we collect when you use SuperSend at supersend.app, why we collect it, and what you can ask us to do with it.

SuperSend generates short-form video and posts it to social accounts you connect. Most of what we hold is therefore your own content and your own account credentials, held so we can publish on your behalf.

What we collect

Account details. Your name, email address, and the credentials you use to sign in.

Connected social accounts. When you connect YouTube, Instagram, TikTok, a Facebook Page, or Threads, we store the access and refresh tokens that platform issues us, along with the account handle and channel or page ID. We ask each platform for the narrowest permissions that let us publish a video and read back the statistics for that same account. We do not request permission to read your private messages, your follower lists, or anything belonging to other people.

Content and media. Product demo recordings you upload, avatar reference images and videos, the hook text and captions you write, and the finished videos we render for you.

Performance data from your accounts. After we publish, we pull back aggregate figures for your own posts and accounts: views, likes, comment counts, follower and following counts. These are totals. We do not collect the identities of the people who watch, like, or comment on your videos, and we do not store comment text.

Billing data. If you are on a paid plan, Stripe processes your payment and gives us your billing name, country, the last four digits of your card, and the status of each charge. We never receive your full card number.

Technical data. Your IP address, browser and device type, and how you move through the app. This reaches us through our hosting provider and through Vercel Speed Insights, which measures page performance.

Why we use it

Under the GDPR we rely on these legal bases:

• To perform our contract with you — running your account, taking payment for it, generating and rendering video, publishing to the platforms you connected, and showing you how those posts performed.
• Our legitimate interests — keeping the service secure, diagnosing faults, and understanding which parts of the product are slow or broken.
• Your consent — for anything outside the above, which we will ask for separately and which you can withdraw at any time.
• Legal obligation — where we have to keep records or respond to a lawful request.

Who we share it with

We do not sell your personal information, and we do not share it for advertising. We pass data to the following providers only so they can perform a job for us:

• Stripe — payment processing for paid plans.
• Vercel — hosting, and Speed Insights for page performance measurement.
• Cloudflare — video rendering (Workers) and media storage (R2).
• Higgsfield — AI video generation.
• Google, Meta, and TikTok — the APIs behind YouTube, Instagram, Facebook Pages, Threads, and TikTok, which receive the videos and captions you publish.

Most of these act as processors bound by contract. Two do not. The social platforms are independent controllers for content once it is posted to your account there, and their own privacy policies govern what happens after publication. Stripe is an independent controller for payment and fraud prevention, under its own privacy policy.

We will also disclose data if the law requires it, or to protect our rights or someone's safety.

AI generation

To create a hook clip we send your prompt text and any reference image or video you supply to Higgsfield. Do not upload reference media containing someone who has not agreed to appear in it. If you upload a person's face or voice, you are confirming you have their permission.

Cookies

We use cookies that are strictly necessary to keep you signed in and to keep the service secure. We do not use advertising cookies or cross-site tracking pixels. Speed Insights measures performance without setting cookies.

Where your data is stored

We operate in the EU, but several of our providers are based in the United States. Where data leaves the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

How long we keep it

We keep your account data for as long as your account is open, and delete it within 30 days of you closing it or asking us to erase it. Tokens for a social account are deleted as soon as you disconnect that account. Media you generate or upload stays until you delete it.

Billing records are the exception. Swedish bookkeeping law requires us to keep invoices and payment records for seven years, so those survive an erasure request.

How we protect it

Traffic is encrypted in transit with TLS. Stored media is encrypted at rest and held in access-controlled storage. Social tokens are kept apart from the rest of your account data and scoped to the minimum permissions the job needs. No system is perfectly secure, and we cannot promise absolute safety.

Your rights

If you are in the EEA or the UK, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider in a portable form. Where we rely on consent, you can withdraw it at any time.

Write to g@computergobeep.org and we will respond within one month. If you are unhappy with our answer, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten) or to the regulator where you live.

If you are in California

You have the right to know what personal information we collect and why, to request a copy, to ask us to delete or correct it, and not to be discriminated against for exercising any of these rights.

We have not sold or shared personal information in the past twelve months, as the CCPA defines those terms, and we do not use your information for cross-context behavioural advertising. Because there is nothing to opt out of, we do not offer a "Do Not Sell or Share My Personal Information" link. To make any other request, email g@computergobeep.org.

Children

SuperSend is for businesses and professional creators. It is not aimed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.

Changes

If we change this policy we will update the date at the top of this page. If a change materially affects your rights, we will tell you directly.

Contact

Computer go beep AB g@computergobeep.org

This policy is governed by Swedish law.