Privacy Policy

MakeSomeone.ai is a product of Nodebridge Inc., a Delaware corporation, operated with its subsidiary Nodebridge Canada Inc. It lets people design products, build storefronts, and create AI characters that publish content to social platforms. This policy explains what personal data we handle when you do that, why, and what you can require of us.

It covers makesomeone.ai and the storefronts and character profiles hosted on it. If you are a visitor buying from a storefront built with MakeSomeone.ai, the seller is responsible for their own dealings with you; we act as their processor for the parts described below.

Who we are

Nodebridge Inc., a Delaware corporation, is the controller for personal data of MakeSomeone.ai account holders and the entity you contract with. Nodebridge Canada Inc., its wholly-owned subsidiary, is an affiliate processor: it holds our platform integrations, including the Meta business portfolio and developer application through which social connections are made. Both are bound by this policy.

For data that account holders load into MakeSomeone.ai about their own customers, the account holder is the controller and we are the processor acting on their instructions.

Contact for any privacy question, including the rights below: privacy@makesomeone.ai.

What we collect

Account data

Your email address and workspace name, and — if you sign in with Google — the basic profile that Google returns. We use this to identify you, keep you signed in, and contact you about the service. Authentication is handled by Supabase; we never see or store your password.

What you create

Products, storefronts, characters, images, video, captions and the conversations you have with the assistant. This is your content. We store it so the product works and process it to generate what you ask for.

Connected social accounts

When you connect Instagram, Facebook, TikTok, YouTube, X or LinkedIn, we receive and store:

• an access token, and a refresh token and expiry where the platform issues them;
• the account’s handle, display name and profile picture;
• follower and engagement counts, refreshed about once a day.

We use these only to show you those figures and to publish the content you tell us to publish. We do not read your private messages, we do not post anything you have not asked for, and we do not use platform data to build advertising profiles or sell it to anyone.

Payments

Payments run through Stripe. Card numbers never reach our servers. We keep the order record — items, amounts, status — and the delivery and contact details a buyer supplies at checkout.

Technical data

Our hosting provider records ordinary server logs — IP address, user agent, the pages requested — which we use to keep the service running and secure.

AI generation, and what happens to your material

Producing images, video and copy means sending your prompts, and any reference pictures you supply, to model providers: OpenAI, Anthropic, Google and Replicate. They process that material to return a result.

We do not train models on your content, and we do not permit our providers to train theirs on it under our commercial terms with them.

Content generated by MakeSomeone.ai is artificial. Where you publish it, you are responsible for disclosing that — and for photorealistic material depicting a person, disclosure is required by the platforms’ own rules and, in the EU, by Article 50 of the AI Act. MakeSomeone.ai marks AI content where a platform gives us a way to, but the obligation to disclose is yours.

You must not upload photographs of a real person to create a character in their likeness without that person’s consent.

Who we share it with

Only with the providers that make the product work, each for the purpose named:

• Supabase — database, authentication and media storage
• Vercel — hosting and delivery
• Stripe — payments
• OpenAI, Anthropic, Google, Replicate — generation
• Resend — transactional email
• Meta, TikTok, Google, X, LinkedIn — only when you connect an account, and only what publishing requires

We do not sell personal data. We disclose it otherwise only where the law compels us, and we will tell you unless we are prohibited from doing so.

How long we keep it

• Account and content — while your account is open, then deleted within 30 days of closure.
• Social tokens — until you disconnect the account or revoke access on the platform, then deleted immediately.
• Order records — seven years, because tax law requires it.
• Server logs — about 30 days.

Deleting your data

Disconnecting one account: open the character, go to Social Accounts, and disconnect. The token and that platform’s data are removed at once. You can also revoke MakeSomeone.ai from the platform’s own settings, which has the same effect.

Deleting everything: email privacy@makesomeone.ai from your account address, or delete your workspace in Settings. Everything is erased within 30 days, except order records we are required to keep.

Your rights

Wherever you live, you may ask us for a copy of your data, ask us to correct or erase it, object to how we use it, or ask for it in a portable form. Under the GDPR and the UK GDPR you may also lodge a complaint with your supervisory authority. Under Canadian and Québec law and the CCPA you have equivalent rights, including the right not to be discriminated against for exercising them.

One address for all of it: privacy@makesomeone.ai. We answer within 30 days.

International transfers

Our providers operate in the United States and elsewhere. Where data leaves the EEA, the UK or Canada, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

Security

Traffic is encrypted in transit; data is encrypted at rest by our providers. Access tokens are held server-side and never exposed to a browser. Access is limited to those who need it. No system is perfectly secure, and we will notify you and the relevant regulator of a breach affecting you as the law requires.

Children

MakeSomeone.ai is not for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.

Changes

We will post any change here and update the date at the top. If a change materially affects your rights, we will email account holders before it takes effect.