RedesIA
Get started

Privacy policy

Last updated: October 28, 2026 · Leer esta página en español

This is an English translation provided for convenience. The authoritative version of this policy is the Spanish original at redes-ia.com/privacidad; if the two texts ever differ, the Spanish text governs.

This policy explains what data RedesIA (operated by SmartCues.ai Corporation, under the Crecimiento con IA brand) collects, what we use it for, who we share it with, and what rights you have over it. It applies to redes-ia.com and app.redes-ia.com.

1. What data we collect

We collect the following types of data when you use RedesIA:

  • Account data: email and password (stored encrypted, never in plain text).
  • Brand data: brand name, tone of voice, logo, reference images and videos you upload, and any other profile information you enter.
  • Facebook and Instagram account data (optional): only if you choose to connect your social accounts, and only for the accounts you explicitly authorize in Facebook's or Instagram's dialog. There are two separate connections. The first, so we can understand your business, is read-only. Through Meta's official APIs we read:
    • Facebook Page: name, description, category, website, follower count, profile picture, and up to 10 recent posts (text, image, permalink and date).
    • Linked Instagram professional account: username, name, biography, website, follower count, profile picture, and up to 10 recent posts (text, image, media type, permalink and date).
    With that connection we never publish, modify or delete anything on your accounts. The second connection exists only if you ask for it in order to publish from RedesIA: you authorize in Facebook the permission to publish to the Page and Instagram account you choose, we keep an encrypted access token for that Page, and we publish or schedule only what you ask us to. If you connect your Instagram directly (with no Facebook Page), the authorization dialog is Instagram's: we read the same data listed above from that account and, to publish or read metrics, we keep an encrypted access token for that account, which we renew before it expires. You can disconnect it at any time from the brand's details, or by removing the app in Facebook, and in both cases we delete the connection. In no case do we access private messages, comments, ads, private metrics, or your followers' personal data.
  • Product usage data: your publishing calendar entries, generated prompts, ideas and content created inside the tool.
  • Billing data: your plan, payment history and subscription status. Your card details are processed directly by Stripe — RedesIA never stores your full card number.
  • Technical data: IP address, device/browser type, and the session cookies needed to keep you securely signed in.
  • Your first weeks: during an account's first two weeks we record which pages of the app you open and which buttons you press, to understand where getting started gets difficult and to improve it. We never record what you type or the text on the screen, and we delete it after 120 days.

2. What we use your data for

  • Providing the service: generating and storing your calendar and your prompts, showing you your content, and applying your plan's limits.
  • Understanding your brand: if you connect Facebook or Instagram, we use those accounts' description and recent posts to infer your business's industry, tone and content style, so we can propose a calendar and prompts tailored to your brand instead of generic ones.
  • Processing payments and managing your subscription through Stripe.
  • Sending you operational communications (confirmations, publishing reminders, billing notices) and, if you allow it in your email preferences, product communications.
  • Providing support when you contact us.
  • Detecting and preventing fraud, abuse or misuse of the service.
  • Improving the product in aggregate, anonymized form.

We do not sell your personal data or your brand's data to third parties.

3. AI content generation

To generate ideas, copy, prompts and images, RedesIA sends the necessary information about your brand (name, tone, language, content type, publication title and your brand description) to artificial intelligence models. When you generate an image we also send the visual assets that piece uses as reference — your logo, your palette and any product photos you uploaded — so the result carries your identity instead of coming out generic.

Those models are operated by OpenAI, Google, ByteDance and Alibaba (Qwen). We reach them through the OpenRouter gateway and, for OpenAI's models, also directly. The specific models we use change over time as better ones appear; the list of providers above is what we keep current on this page.

Your information is not used to train models. The gateway these requests pass through is configured not to share your prompts for that purpose, and the providers process what we send them solely to generate the response you asked for, in accordance with their own data handling policies.

If you connected Facebook or Instagram, the text we import from those accounts (profile description, category, website, follower count and the text of your recent posts) is stored alongside your brand and forms part of the information sent to these providers to generate content. You can view and delete it from the same step where you connect your accounts. We also store some images from those accounts: the profile picture, which we use as your logo if your brand does not have one yet, and up to four photos from your recent posts, which live in Brand assets and you can delete whenever you want. Your credentials and your Meta access tokens are never sent.

4. Who we share data with

We share data only with the providers we need in order to operate the service:

  • Stripe — payment processing and billing.
  • Google Analytics — aggregate usage statistics for this site and the app (see section 6).
  • Cloudflare — application hosting, database, file storage (logos, reference images and videos) and transactional email delivery.
  • AI model providers — OpenAI, Google, ByteDance and Alibaba (Qwen), via the OpenRouter gateway and, for OpenAI's models, also directly. Content generation, as described above.

Each of these providers accesses only the data necessary for its specific function. We may also disclose data where required by law, or to protect our legal rights.

Requests from public authorities

To date we have received no data request from any public authority. If one arrives, these are the criteria we apply:

  • We review its legality. We check that the request is a valid legal instrument with a proper basis before handing over anything. An informal request with no legal footing is not enough.
  • We disclose the minimum necessary. Only the specific data the request requires — never a whole account "just in case".
  • We document it. We record each request, what we answered, the legal reasoning, and who was involved.

We notify you if we receive a request concerning your data, unless the law prohibits us from doing so.

About data obtained from Meta: for RedesIA, Facebook and Instagram are a data source, not a destination. We do not sell that information, we do not share it with other RedesIA users, advertisers or data brokers, and we do not use it for advertising or to build profiles outside your own account. The only third-party processing is the one described in section 3.

5. Where we store your data

Your data is stored on Cloudflare infrastructure (D1 database and R2 object storage), with access restricted per brand and per account: no user can see or access another account's data.

6. Cookies

We do not use third-party advertising tracking cookies. These are all the cookies we store in your browser:

  • Session (app only) — keeps you signed in. Strictly necessary: httpOnly, secure and protected against request forgery. Lasts while your session is active.
  • Facebook and Instagram connection (app only, only while you connect your accounts) — holds the intermediate step of that connection. Temporary: it expires within minutes.
  • redesia_analytics_consent — remembers whether you accepted or rejected analytics, so we do not ask again. Lasts 6 months; after that we ask again.
  • Google Analytics (_ga, _ga_V6VX49HL3H) — usage statistics: which pages are visited and where visits come from. They last 13 months. They are only stored if you accept them, or if you are in a country where the law does not require your prior consent.

When we ask. If you visit from the European Union, the European Economic Area, the United Kingdom, Switzerland or Brazil (or if we cannot tell where from), Google Analytics does not load until you accept it in the notice at the bottom of the screen. In every other country it is on from the start.

Changing your mind. At any time, from "Cookie preferences" at the foot of this site or from Settings (Ajustes) in the app. If you reject it, we stop measuring and delete the Google Analytics cookies.

What we measure and what we don't. We configure Google Analytics not to be used for advertising: no ad personalization and no Google Signals. Inside the app we only send the shape of each page (for example, "a brand's calendar"), never your brand's name or identifier, your email or the content you create, and we do not measure admin pages. The data is kept for 14 months in Google Analytics.

7. How long we keep your data, and how to delete it

We keep your account data for as long as your account is active. If you delete your account from the application settings, we permanently and irreversibly erase your brands, calendar, generated prompts, assets, and the billing history associated with the account, except for information we are legally required to retain (for example, billing records required by tax regulations).

Storage limit

Each brand has 10 GB for the images and videos you upload and the ones the AI generates; an account's space is that limit for every brand it has. When you get close (90%) we tell you, so you can download a backup and delete what you no longer need from Resources. If you still reach the limit, we automatically delete first the images of publications you had already deleted and files you uploaded that were never used, and then the full-size files of the oldest generated pieces (always older than 30 days, and never those of a scheduled or future-dated publication) until you are back at 80%. For every piece that is deleted we keep a small preview so your calendar keeps its history; the full-size file can no longer be downloaded or published.

What we send to the AI models

We store the text of the instructions we send to the AI models alongside the cost of each call. We use it to answer you when something is generated badly and to keep track of our own costs; it is accessible only to the RedesIA team, never to other accounts, and it is deleted along with the rest of your data if you delete your account.

How to delete data obtained from Facebook and Instagram

There are two ways to delete the data we imported from your Meta accounts, and both are self-service:

  1. Delete only the imported data: go to app.redes-ia.com, open your brand settings and clear or edit the brand description text, which is where the information brought in from Facebook and Instagram is stored. The change takes effect immediately.
  2. Delete your entire account: in the application settings, choose to delete your account. This permanently and irreversibly erases your brands and all Meta data imported into them.

You can also revoke our access at any time from Facebook Settings → Apps and Websites. If you would rather we did it for you, contact us through the support page and we will delete your data within 30 days at the latest.

We do not retain your Meta access token. The token Facebook gives us when you connect is used once, during that same connection, to read your Page and your Instagram account, and is discarded when it finishes: it is not saved to our database and RedesIA does not query Meta again afterwards. To import new content you have to connect again explicitly.

8. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data (you can edit most of it directly from your account).
  • Request deletion of your account and your data (self-service, from settings).
  • Request a copy of your data in a portable format.
  • Disconnect your Facebook and Instagram accounts and delete the data imported from them (see section 7).
  • Withdraw your consent for product communications (from your email preferences).

To exercise any of these rights, contact us through the support page.

9. Security

We apply per-account and per-brand access controls on every data access, encryption in transit, encrypted passwords, and strict separation between different users' data. No system is 100% infallible, but we treat the security of your data as a core product requirement, not an afterthought.

10. Minors

RedesIA is not directed at anyone under 18 and we do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us so we can delete it.

11. Changes to this policy

We may update this policy from time to time. If a change is significant, we will notify you by email or inside the application before it takes effect.

12. Contact

If you have questions about this policy or about how we handle your data, contact us through the support page, or find out more about SmartCues.ai Corporation at crecimientoconia.com.