Table of Contents

  1. Overview
  2. Data We Collect
  3. How We Use Your Data
  4. Data Sharing
  5. Data Retention
  6. Your Rights
  7. Cookies & Tracking
  8. Data Security
  9. Children's Privacy
  10. CCPA — California Rights
  11. GDPR — EEA & UK Rights
  12. Changes to This Policy
  13. Contact & Privacy Requests

This Privacy Policy describes how Fusion Foods LLC ("AutoSpot," "we," "us," or "our") collects, uses, and shares information about you when you use AutoSpot ("the Service"). We are committed to protecting your personal information and your right to privacy.

1. Overview

AutoSpot is an AI-powered advertising platform operated by Fusion Foods LLC, Auburn, WA, USA. We collect information necessary to deliver the service — including account information, content you generate, and data from third-party integrations you authorize.

We do not sell your personal information to third parties. We do not use your data for advertising targeting outside of AutoSpot itself.

Questions about your data? Contact us using the methods in Section 13 — we respond to all privacy requests within 30 days.

2. Data We Collect

Account Information

When you create an account, we collect:

Content You Generate

As part of delivering AutoSpot's core features, we store:

Usage Data

Integration Data — What We Access When You Connect

Integration Data Accessed Purpose
Instagram Username, access token, media posts, comments, DMs Publishing content; auto-reply to comments and DMs
Facebook Page access token, page ID Publishing content to connected Facebook Pages
X (Twitter) OAuth tokens, public profile Publishing content to your X account
Square Merchant ID, 30-day sales data, customer segments, loyalty data Generating data-driven ad content; synced and cached on your request
Google (Calendar/Gmail) Calendar events, email address Email reminders and calendar integration features

All OAuth tokens for third-party integrations are encrypted at rest using AES-256-GCM.

Payment Information

Payment processing is handled by Stripe and Square. AutoSpot does not store your credit card number, CVV, or full payment card details. We receive and store transaction identifiers, subscription status, plan type, and billing period information from the payment processor.

Employee Portal Data (for Employees)

If you access AutoSpot's employee portal (available to employees of AutoSpot subscribers), we collect your employee number, email address (used for OTP login), shift clock-in/out records, paystub data, PTO balances, and benefit enrollment information. This data is managed by your employer (the AutoSpot subscriber) and subject to their data practices in addition to this Policy.

3. How We Use Your Data

Purpose Data Used Legal Basis (GDPR)
Deliver the Service Account info, content, integration data Contract performance
AI model improvement Anonymized, aggregated usage patterns Legitimate interests
Billing and subscriptions Email, plan status, Stripe data Contract performance
Security and fraud prevention IP address, session data, login logs Legitimate interests
Service communications Email address Contract performance / Legitimate interests
Analytics and product development Aggregated usage data (no PII) Legitimate interests
Legal compliance Any data required by law Legal obligation

AI Improvement

We may use anonymized and aggregated data derived from ad generation activity (not your identifiable business information) to improve AutoSpot's AI models, prompts, and output quality. Individual inputs are not shared publicly or attributed to you in this process.

Communications

We send transactional emails (account confirmation, password reset, billing receipts, subscription notifications, and calendar reminders you set). We do not send marketing emails without your opt-in consent. You can manage communication preferences in your account settings.

4. Data Sharing

We do not sell your personal information.

We share your data only in the following circumstances:

Service Providers

We share data with vendors who help us deliver AutoSpot, under strict data processing agreements:

Third-Party Platforms You Connect

When you publish content or authorize integrations (Instagram, Facebook, X, Square, Google), data is shared with those platforms to perform the action you requested. This sharing is governed by those platforms' respective privacy policies.

Legal Requirements

We may disclose your information if required to do so by law, court order, or valid governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of AutoSpot, our users, or the public.

Business Transfers

If Fusion Foods LLC undergoes a merger, acquisition, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will notify you of any such change and your rights in that circumstance.

5. Data Retention

Data Type Retention Period
Active account data Retained while your account is active
Generated ads, videos, and flyers Retained while account is active; deleted in account purge
Billing records 7 years (required for tax and financial compliance)
Access logs and security logs 90 days rolling
Deleted account data 14-day retention window, then permanently purged
Employee portal data Retained per employer's retention settings; purged on account deletion

Account Deletion and 14-Day Purge

When you delete your account, your account is suspended immediately. All personal data — including generated content, integration tokens, contact lists, and analytics data — is retained for 14 days and then permanently and irrecoverably deleted. This window exists to protect against accidental deletion and to fulfill our security audit requirements.

Billing records may be retained beyond the 14-day purge for legal and tax compliance purposes, stored without personal identifiers where possible.

6. Your Rights

Depending on your location, you have the following rights regarding your personal data:

To exercise any of these rights, contact us using the methods in Section 13. We will respond within 30 days. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

7. Cookies & Tracking

Session Cookies

AutoSpot uses a server-side session cookie to keep you logged in. This cookie is strictly necessary for the service to function. It does not track you across other websites.

Analytics

We use a lightweight Polsia Analytics beacon on the landing page to count visitors and referral sources. This collects a randomly generated visitor ID (stored in your browser's localStorage), no personally identifiable information. No third-party advertising trackers (Google Ads, Facebook Pixel, etc.) are installed on AutoSpot.

Cookie Consent

AutoSpot uses only strictly necessary cookies for session management and a single anonymized analytics beacon. We do not use cookies for targeted advertising or behavioral tracking. If you block cookies, core AutoSpot functionality (login, dashboard) will not work correctly — session cookies are required.

Managing Cookies

You can control cookie behavior through your browser settings. Note that disabling session cookies will prevent you from logging in to AutoSpot.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

No system is perfectly secure. If you discover a security vulnerability in AutoSpot, please report it to us via the contact methods in Section 13.

9. Children's Privacy

AutoSpot is not directed to, and we do not knowingly collect personal information from, children under the age of 18. If you are under 18, do not use or provide any information on AutoSpot.

If we learn that we have collected personal information from a child under 18 without parental consent, we will delete that information promptly. If you believe a child under 18 has provided us with personal data, contact us at the address in Section 13.

10. CCPA — California Resident Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following additional rights:

Right to Know

You have the right to know what personal information we collect, how it is used, and to whom it is disclosed. This Policy provides that information. You may also submit a verified request for a detailed report.

Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions. Submit a deletion request via Section 13.

Right to Correct

You have the right to request correction of inaccurate personal information.

Right to Opt-Out of Sale

We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising. There is nothing to opt out of regarding sale.

Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights. We will not deny services, charge different prices, or provide a different quality of service based on your exercise of privacy rights.

Submitting Requests

To submit a CCPA request, use the contact methods in Section 13. We will verify your identity and respond within 45 days, with a 45-day extension available if needed.

11. GDPR — EEA & UK Residents

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR applies to our processing of your personal data.

Data Controller

Fusion Foods LLC (Auburn, WA, USA) is the data controller for personal data processed through AutoSpot.

Legal Bases for Processing

We process your data on the following legal bases:

International Transfers

Your data is processed and stored in the United States. If you are in the EEA or UK, your data is transferred to the US. We rely on Standard Contractual Clauses (SCCs) and other lawful transfer mechanisms to legitimize these transfers. Contact us for details.

Your GDPR Rights

In addition to the rights listed in Section 6, EEA/UK residents have the right to lodge a complaint with their national data protection authority (e.g., the ICO in the UK, or the relevant supervisory authority in your EU member state).

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

Continued use of AutoSpot after the effective date of changes constitutes your acceptance of the updated Policy. If you do not agree to the changes, you must discontinue use and delete your account.

13. Contact & Privacy Requests

To exercise your privacy rights, ask questions about this Policy, or report a concern:

Fusion Foods LLC
Auburn, WA, USA

We respond to all privacy requests within 30 days. For time-sensitive matters (e.g., suspected security incidents), we respond as quickly as possible.