Privacy policy
Last updated October 22, 2026
The short version.
- Oscar uses your data to write, check, publish and measure posts on the accounts you connect, as you direct it, and for nothing else.
- We never sell your data, never use it for advertising, and never use it to write for anyone else.
- You can disconnect an account or have everything deleted at any time. How to delete your data
Who we are
Oscar (writeoscar.com) is operated by Enhanced Vibes LLC (“Oscar”, “we”, “us”). This policy covers the Oscar website and app. Questions go to privacy@writeoscar.com.
What we collect
Your account
Your email address and, if you set one, a password (stored by our authentication provider as a hash; we never see it). If you sign in with Google, Google tells us your name, email address and profile photo, and nothing else. We keep a record of which brands you belong to and your role in each.
What you tell Oscar
When you set up a brand: who you are and what you can speak to, what your account covers and who it’s for, what you believe and what you’d never say, sample posts, your time zone and how often to post. After that: the rules you set, notes and rewrites you give as feedback, and your conversations with Oscar inside the app, including any images, such as screenshots, you add to them.
Your voice and your twin
If you make your own voice for your videos, you record a consent line and a minute or two of you talking in the app (sound only), or record the line and upload a recording of yourself. We keep both recordings and send them to ElevenLabs, which makes a copy of your voice that reads your video scripts. The copy is used only for your brand’s videos and is never offered to anyone else. Please make a voice only of yourself. Delete your voice, in Settings → Video, deletes it at ElevenLabs and here; deleting your brand does the same.
On Pro you can also make a twin of yourself: you record a consent line and two minutes of you talking on camera. We keep both recordings, make your voice from the sound as above, and send the footage to HeyGen, which trains a video twin of you that says your videos’ on-camera lines. HeyGen asks you to confirm it’s you on its own page before the twin can be used. Once it’s made, HeyGen deletes the footage it trained from; your twin is used only for your brand’s videos. Delete your twin, in Settings → Video, deletes it at HeyGen and here.
From accounts you connect
Oscar only reads from a social account after you connect it and grant permission. What it reads:
| Platform | What Oscar reads and stores |
|---|---|
| Threads | Your profile (account id, username, name, bio and profile picture); your posts, including the replies you make to your own posts to form a thread; each post’s counts of views, likes, replies, reposts, quotes and shares; and your account’s daily views and follower count. To find the parts of your own threads, Oscar reads the replies under your posts; it keeps only yours and stores nothing about other people’s replies. Oscar posts to Threads only the posts you add to a time, or, if you turn on Threads’ autopilot and agree to it, at your Threads times on its own; it replies only to your own posts (a thread’s later parts, and a first comment if you add one). If you choose Delete from Threads on one of your posts in Oscar, Oscar deletes that post, every part of it, from Threads, and deletes its copy of the post’s record and counts; it never deletes a post you didn’t choose. |
| Your LinkedIn member id, name and profile picture (from Sign In with LinkedIn), the posts you approve for Oscar to publish, with their ids and links, any of your own LinkedIn posts you paste in, with the impressions you give, and the files you choose to add from LinkedIn: the posts in your data archive (their dates, links and text, from its Shares.csv; nothing else in the archive is read or kept) and your analytics export (your daily impressions, followers and top posts), so Oscar can write in your voice there and learn what did well. Oscar drafts LinkedIn posts for you, but nothing is published to LinkedIn until you review it, edit it if you like, and approve it. Oscar doesn’t read your connections, messages or other people’s posts. | |
| X | Your X user id, username, name, bio, profile picture and follower count; when you set up or add X, your latest 200 original posts on X (reading up to 400 to find them; not your replies to other people or your reposts) with their public counts of views, likes, replies, reposts and quotes, and for your best few, the replies you made to them to form a thread; the posts Oscar sends to X for you, with their ids, links and the same counts over time. Oscar posts to X only in the way you choose in Settings: what you add yourself, each post after you approve it, or, if you turn on X’s autopilot and agree to it, at your X times on its own. It never replies to, likes, reposts, follows or messages anyone for you. Oscar doesn’t read your followers, messages, timeline or other people’s posts. What Oscar learns from your X numbers is used only for your own account: data from X is never combined with other brands’ numbers and never used to train any model. When a post is deleted on X, Oscar deletes its copy of the post’s record and counts within a day; when you disconnect X, it deletes them all, your post history and follower counts included, except the few posts you chose at setup as having done well: those stay, with their counts, as the ideas they started, so Oscar can keep writing from them. Ask us and we delete those too. |
| Your Instagram account id, username, name, account type, profile picture and follower count; the reels and carousels Oscar posts for you, with their ids and links, and their counts of views, reach, likes, comments, shares and saves, how long a reel is watched and how often it’s skipped in its first seconds; and the ids, links and dates of your latest posts, only to find a reel you posted before Oscar recorded it. Oscar posts only what you add to its queue. It doesn’t read your followers, messages or other people’s posts. | |
| YouTube | Your channel’s id, handle, name, profile picture and subscriber count; the Shorts Oscar uploads for you, with their ids and links; and for those Shorts only, their counts of views, likes and comments, and from YouTube Analytics how long they’re watched on average and what share of them is watched. Oscar uploads only what you add to its queue, and sets its cover as the thumbnail. It doesn’t read your other videos’ content, your comments, your subscribers or anyone else’s channel. See YouTube and Google user data below for how long this is kept. |
| TikTok | Your TikTok account id (TikTok’s open id for Oscar), username, display name and follower count; what TikTok says your account can post (who you can let see a video, whether comments, Duet and Stitch are on, how long a video can be), each time you add or post a video; the videos Oscar posts for you, with the choices you made for each (who can see it, comments, Duet, Stitch, whether it promotes a brand, its title), their ids and links; and for those videos only, their counts of views, likes, comments and shares. Oscar posts only what you add to its queue on TikTok’s posting sheet. It doesn’t read your other videos, your messages, your followers or anyone else’s account. See TikTok data below. |
Oscar also stores the access tokens these platforms issue, encrypted (AES-256-GCM) with a key that is kept apart from the database.
YouTube and Google user data
Oscar uses YouTube API Services to post your Shorts and read how they do. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service, and Google’s handling of your data is described in the Google Privacy Policy.
- What Oscar asks Google for: to upload videos to your channel (the Shorts you add to the queue, and their thumbnails), to see your channel and its videos (its name and picture, and your Shorts’ views, likes and comments), and to see your channel’s YouTube Analytics reports (how long your Shorts are watched). Nothing else: Oscar can’t edit or delete your videos, change your channel, comment or manage your subscriptions.
- How it’s used: only to post what you ask, show you your results in Oscar (Home, Posts and Oscar’s answers when you ask about YouTube), and learn which of your reels work, for your brand alone. When you ask Oscar about your YouTube results, the numbers it needs are sent to Anthropic’s API to answer you, as above, and aren’t used to train models.
- How long it’s kept: the counts (views, likes, comments, subscribers, watch time) are kept while Oscar still has your permission, so your results compare over time; Oscar checks that permission every day. Your channel’s name and picture are read again every day. A Short you delete on YouTube is deleted from Oscar, with its counts, within a day. If you take back Oscar’s access in your Google Account, Oscar stops at once and deletes everything it kept from YouTube within 21 days (so you can reconnect in that time without losing your history). If you disconnect YouTube in Oscar’s Settings, Oscar takes back its access at Google and deletes it at once. The reels themselves and their captions are your brand’s own and stay in Oscar until you delete them.
- Taking back access: at any time on Google’s security settings page (your Google Account, Security, then Your connections to third-party apps and services), or with Disconnect in Settings → YouTube.
Limited Use. Oscar’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. That covers YouTube and Google sign-in alike. In particular, Oscar uses that information only to provide and improve the features you see in Oscar; it never sells it, never uses or transfers it for advertising (including retargeting or interest-based ads), never uses it to determine creditworthiness or for lending, never uses it to develop, improve or train AI or machine learning models, and never transfers it to anyone except as needed to run those features (the service providers below, under the same limits), to comply with the law, or as part of a merger or sale of our business. No person at Oscar reads it unless you ask us to (for support, or to make the reels you ask us for), it’s needed for security or to comply with the law, or it’s aggregated and anonymized for running the service.
TikTok data
Oscar uses TikTok’s Login Kit, Content Posting API and Display API to post your videos and read how they do. Your use of TikTok is governed by the TikTok Terms of Service.
- What Oscar asks TikTok for: your basic profile (user.info.basic) and follower count (user.info.stats), to post videos to your account (video.publish), and to read your videos’ views, likes, comments and shares (video.list). Nothing else: Oscar can’t edit or delete your videos, comment, send messages or read your followers.
- How a video goes up: each one only when you add it to the queue, or post it now, on TikTok’s posting sheet in Oscar, with the choices you make there; TikTok downloads it from a private, short-lived link on writeoscar.com. Oscar adds nothing to your video: no watermark, logo or promotional mark.
- How it’s used: only to post what you ask and show you your results in Oscar, for your brand alone. When you ask Oscar about your TikTok results, the numbers it needs are sent to Anthropic’s API to answer you, and aren’t used to train models.
- How long it’s kept: while your TikTok account is connected. If you disconnect TikTok in Oscar’s Settings, Oscar takes back its access at TikTok and deletes everything it kept from TikTok at once: your account details, its records of your videos and their counts, your follower counts and the tokens. The reels themselves and their captions are your brand’s own and stay in Oscar until you delete them.
- Taking back access: at any time in the TikTok app (Settings and privacy, then Security and permissions, then Apps and services permissions), which stops Oscar at once, or with Disconnect in Settings → TikTok, which also deletes what Oscar kept.
People who open your links
When Oscar puts a link you promote in a post, or in your bio page, it goes out as a short link on oscr.sh, so you can see which posts bring clicks. When someone opens one, Oscar records the time, which link it was, the website they came from (its name only, such as threads.com), the country our hosting provider reports, and whether it looked like a link preview or a crawler. Oscar itself doesn’t store their IP address, set a cookie or keep anything else that identifies them (our hosting provider’s request logs, below, cover these visits too), and it sends them straight on to your link.
People who ask for your files
When you give away a file through Oscar (a guide, a checklist), its page on oscr.sh asks for an email. Oscar keeps that email, when it was given, which of your links or posts the person came through, the website or app they came from (its name only, such as X or Threads), their IP address and the approximate location our hosting provider derives from it (city, region, postal code, country, time zone), the kind of device, operating system and browser their browser reports, its language, and any campaign tags on the link they used. It uses them only to send the file, from your name, and to show you your leads, which you can export. You decide what you send them after that; Oscar never emails them for itself, never uses their address for anything else, and never shares it with anyone but you. They’re deleted with your brand, or sooner when you or they ask us at privacy@writeoscar.com.
Applications for early access
Your name, email, where you post and what you write about, if you apply on our website.
Asking for something we give away
If you ask for a free download on our website (a case study), we keep your email, which download, the page you asked from, the website you came from and any campaign tags in the link, and we email you the file once.
Payments
If you subscribe, Stripe collects your card details and billing address; we never see or store your card number. We keep your Stripe customer and subscription ids, your price, and whether your subscription is active, so the app knows your plan.
Technical data and product analytics
Our hosting provider keeps standard request logs (such as IP address, browser and time) for security and debugging. To learn where Oscar is hard to use and fix what breaks, we use PostHog, a product analytics service: it records the pages you view and what you click in Oscar’s website and app, and recordings of those sessions, linked to your account once you’re signed in. What you type into forms is masked in recordings. PostHog sets its own cookie for this. We don’t use advertising cookies, we don’t sell this data, and we don’t track you across other sites.
How we use it
- To do what you ask: write posts in your voice, check their facts, show them to you, and publish them to your connected accounts at the times you set. Oscar publishes only to accounts you have connected and only while you have it turned on.
- To measure and improve your posts: compare each post with your usual results and adjust how Oscar writes for your brand.
- To learn which kinds of post work: Oscar combines a few numbers from every brand it runs, such as how a kind of post (a question, a list, a story) did against that brand’s own typical post, so a new brand starts from what has worked elsewhere. Only these numbers are combined, never the posts themselves, their words or topics, or your feedback, and nothing from X is ever among them, and nothing in them identifies you or your accounts. Oscar may turn the combined numbers into general writing guidance that every brand’s writing follows, below that brand’s own rules.
- To run the service: sign you in, send you sign-in links and invitations, keep the service secure, and fix problems.
- To send you a daily update: if you own a brand, a short email each morning with its views, followers, best post and what Oscar learned. Every one has a link to stop them.
- To review applications and write to you about Oscar.
We do not sell, rent or license your data, or any data we receive from Threads, LinkedIn, X, Instagram, YouTube, TikTok or any other platform. We don’t use it for advertising, give it to data brokers, or use it to build profiles of people. Each brand’s data is kept apart from every other brand’s: we never use your posts or feedback to write for anyone else, and your results reach other brands only as the combined numbers described above.
How Oscar uses AI
Oscar writes and checks posts with Claude, a model made by Anthropic. To do that, the content needed for each task (such as your sample posts, rules and the post being written) is sent to Anthropic’s API, which processes it on our behalf. Under Anthropic’s commercial terms, content sent through its API is not used to train its models. When Oscar checks a fact, it may search the web for the figure or claim in question. We don’t use your data to train AI models.
Apps you connect to Oscar
You can connect an AI app such as Claude or ChatGPT to Oscar (Settings → MCP), so you can use Oscar from that app. You choose which of your brands it may work on and whether it may change your queue, and you can disconnect it at any time. While it’s connected, what Oscar’s tools return when you ask (your posts, their numbers, what Oscar has learned, your voice, the counts of your leads) goes to that app, which handles it under its own terms and privacy policy; who your leads are never does. What you paste into that app to have Oscar write from it is sent to Oscar and treated like a brief you write in Oscar. Oscar keeps a record of each change an app makes (what it changed, when, and which app) so you can see and undo it, and keeps only hashes of the tokens it gives the app. We don’t use any of it to train AI models.
Who we share it with
Only with service providers that process it for us, under contracts that limit them to doing so on our behalf:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in and file storage | Canada |
| Vercel | Hosting the website and app | Canada and United States |
| Anthropic | AI writing, fact checks and Oscar’s answers in the app | United States |
| Resend | Sign-in, invitation, billing and daily update emails | United States |
| ElevenLabs | Voices that read your videos, and your own voice if you make one | United States |
| HeyGen | Your video twin, if you make one | United States |
| Stripe | Payments and subscriptions | United States |
| PostHog | Product analytics and session recordings | United States |
And, at your direction, with the platforms you post to, and with the AI apps you connect to Oscar (above): a post Oscar publishes for you is public on that platform, under that platform’s own policies. Images attached to a post, and your profile picture, are kept at hard-to-guess public links because the platforms fetch images from a public address. The other members of a brand you belong to can see that brand’s data. We may disclose data if the law requires it, or to a buyer of our business, who would be bound by this policy.
How long we keep it
- Brand data and post history: for as long as the brand exists, so its results can be compared over time.
- A platform’s access token: until you disconnect that account or delete the brand. If you take back Oscar’s access on the platform, the token stops working at once.
- What Oscar receives from YouTube: as described in YouTube and Google user data above. From TikTok: as described in TikTok data.
- When you ask us to delete your data, or delete your brand, we delete it within 30 days, including what we received from Threads, LinkedIn, X, Instagram, YouTube and TikTok. Backups are overwritten on a rolling schedule.
- Your voice, your twin and the recordings they were made from: until you delete them or your brand.
- Applications for early access: until you ask us to remove yours, or two years after you applied.
- Billing records: as long as tax and accounting law requires (Stripe keeps its own records under its privacy policy).
- Product analytics: events for up to two years and session recordings for up to 90 days; deleted sooner when you ask us to delete your data.
Your choices and rights
- Pause or disconnect. Turn Oscar’s autopilot off in the app at any time. You can also take back Oscar’s access from Threads (Settings → Account → Website permissions), LinkedIn (Settings → Data privacy → Permitted services), X (Settings → Security and account access → Apps and sessions), Instagram (Settings → Apps and websites), YouTube (your Google Account’s security settings) or TikTok (Settings and privacy → Security and permissions → Apps and services permissions), or disconnect X, YouTube or TikTok in Oscar’s Settings.
- See, correct, export or delete. Email privacy@writeoscar.com and we’ll respond within 30 days. How deletion works
- Depending on where you live (for example in the EU, the UK or California), you may have further rights, such as to object to or restrict how we use your data, or to complain to your data protection authority. We will honor them. We don’t sell or “share” personal information as California law defines those terms.
Where the GDPR applies, we process your data to provide the service you signed up for (contract), to keep it secure and improve it (legitimate interests), and, for anything else, with your consent.
Security
Data is encrypted in transit and at rest. Platform tokens are encrypted separately. The database enforces that each brand can reach only its own rows. Access to production systems is limited to the people who run Oscar. If a breach affects your data, we’ll tell you and the platforms concerned as the law and their terms require.
Children
Oscar is for adults running their own professional accounts. It isn’t meant for anyone under 18, and we don’t knowingly collect data from children.
International transfers
Oscar stores data in Canada and its providers process it in Canada and the United States. Where the law requires it, we rely on safeguards such as the European Commission’s standard contractual clauses.
Changes
If we change this policy, we’ll update the date at the top and, for changes that matter, tell you by email or in the app before they take effect.
Contact
Enhanced Vibes LLC, privacy@writeoscar.com.