Privacy
Privacy notice
iGrow Inc. operates Foundcast. This notice says what we collect, why we keep it, who else processes it, and how you delete it.
Privacy requests go to privacy@i-grow.co.
Photo
We store the photo you upload. It is the face of your avatar. When a reel is generated, that photo is sent to fal.
Consent video
We store the consent video you record. It is the clip where you confirm the photo, video, and voice are yours and may be used to generate an avatar for this account.
Voice sample
We store the short voice sample, the phrases you read during setup. That recording is sent to ElevenLabs to create your voice clone.
ElevenLabs voice clone
ElevenLabs holds a voice clone made from your sample. We store the clone id and use it only to speak your scripts. When you delete your account, we ask ElevenLabs to delete the clone. That deletion counts only when ElevenLabs confirms it.
fal video
fal generates the avatar video from your photo and the voice. We store the finished video file. fal processes the frames required to make it.
LLM text
A text model drafts scripts, hooks, and captions from the words you supply. We store those drafts. The model provider is OpenAI unless Foundcast is configured with a different text provider. We do not add facts, names, or numbers you did not give us.
Instagram and LinkedIn tokens and metrics
If you connect Instagram or LinkedIn, we store that platform’s access token encrypted at rest. We do not store the token in plaintext. We also store post metrics the platform returns, and numbers you type or import from a LinkedIn file you download yourself. A missing number stays empty. It is not saved as zero.
Disconnect deletes the encrypted token. If you remove Foundcast in Instagram, Meta’s deauthorize callback deletes the Instagram token. The data-deletion callback deletes the Instagram token and the Instagram metrics we stored, then gives you a confirmation code.
Why
We use this data to make your reels, hold them until you approve a post, and run your account. The photo, consent video, voice sample, and voice clone are used only for your own avatar.
How long we keep it
We keep this data while your account exists. Disconnect removes the Instagram and LinkedIn tokens, and the Instagram metrics that came with that connection, without deleting the rest of the account. Delete my account and data removes the photo, consent video, voice sample, stored videos, scripts and other LLM text, tokens, metrics, and the account. We do not keep a separate copy after that. ElevenLabs, fal, and the text-model provider may still have a copy under their own policies after we delete ours.
How to delete it
Signed-in controls are on Settings, linked from the app navigation: Connect Instagram, Connect LinkedIn, Disconnect, and Delete my account and data. The data deletion page explains the same steps and the Meta callback. You can also email privacy@i-grow.co.
Third parties
- Brevo sends email, including the magic link for sign-in.
- OpenAI, or the configured text-model provider, drafts scripts, hooks, and captions.
- ElevenLabs makes the voice clone and the voiceover.
- fal generates the avatar video.
- Supabase stores the account, the files, and the authentication record.
- Vercel hosts the app.
Instagram and LinkedIn are the accounts you choose to connect. They are not in that processor list.
What we don’t do
We don’t sell personal information. We don’t post a reel until you approve it. Every reel is labeled AI-generated. Foundcast is for your own face and voice, not someone else’s.