Privacy Policy

Last updated: April 28, 2026

Squawk is operated by LSA Digital ("Squawk," "we," "us," or "our"). This Privacy Policy explains what information we collect when you visit our website or use the Squawk service (the "Service"), how we use it, who we share it with, and the choices you have.

If you have questions about this policy, contact us at keith@lsa.dev.

1. Information We Collect

1.1 Information you give us

  • Beta interest form. If you request access to our closed beta, we collect your name, email, company name, how you'd like to use Squawk, and any comments you provide.
  • Account information. When you create an account, we collect your name, email, password (stored hashed), profile information, and the name of your organization or workspace.
  • Content you upload. Squawk lets you bring source material into a content library (blog posts, PDFs, videos, decks, photos, articles, links) and turn it into social posts. We store this content, the drafts Squawk produces from it, your edits, comments, and approvals.
  • Connected social accounts. When you connect a LinkedIn or X account, we receive identifiers, profile metadata, and OAuth tokens necessary to publish on your behalf. We do not store your social account password.
  • Communications. If you contact us by email or fill in a form, we keep that correspondence so we can reply and follow up.
  • Payment information. Squawk is free during the closed beta. Once paid plans begin, payment details will be handled by a third-party payment processor; we do not store full card numbers on our systems.

1.2 Information we collect automatically

  • Usage and device data. Pages visited, features used, time spent, browser type, device type, operating system, IP address, and approximate location derived from IP.
  • Logs. We keep server logs (request paths, timestamps, response codes, error stacks) for security, debugging, and performance.
  • Cookies and similar technologies. See Section 7 for details.

1.3 Information from third parties

  • Authentication providers. If you sign in with a third-party identity provider, we receive the basic profile fields you authorize.
  • Social platforms. When publishing through Squawk, the destination platform (LinkedIn, X) returns post status, post identifiers, and engagement metrics that we display in your workspace.

2. How We Use Information

We use the information we collect to:

  • Operate the Service. Authenticate you, store your content and drafts, route approvals, schedule and publish posts to connected channels, and surface engagement metrics.
  • Generate drafts with AI. Squawk drafts social posts using your source content and your team's voice profiles. To do that, we send the relevant content to AI providers we contract with. See Section 4.
  • Communicate with you. Send transactional emails (account, security, beta status, approvals), respond to support requests, and, if you opt in, send product updates.
  • Improve the Service. Analyze how Squawk is used in aggregate to find bugs, prioritize features, and refine the product.
  • Maintain security. Detect abuse, prevent fraud, enforce our Terms, and protect users.
  • Comply with law. Meet our legal, accounting, tax, and reporting obligations.

We do not sell your personal information. We do not share your content or drafts with anyone outside your workspace except as described in this policy.

3. Legal Bases (EEA/UK Users)

If you are in the European Economic Area or the United Kingdom, we process your information under one of the following legal bases:

  • Performance of a contract. To provide Squawk to you and your organization.
  • Legitimate interests. To run, secure, and improve the Service.
  • Consent. Where required (for example, for non-essential cookies or marketing email), we ask for your consent and you can withdraw it at any time.
  • Legal obligation. Where we must process information to meet a legal duty.

4. AI Processing

Squawk drafts posts using large language models. To do this:

  • We send relevant portions of your source content, voice profiles, and prompt context to AI providers (for example, OpenAI, Anthropic) under enterprise terms that prohibit them from using your content to train their models.
  • AI providers process the content to return a draft. We do not retain copies of your content with the provider beyond what is needed to return a response, and we configure their APIs to log only what is required to operate the Service.
  • We do not use your content, drafts, or edits to train any AI model that is shared across customers.
  • Drafts can be wrong. You are responsible for reviewing every draft before it is published.

If we change AI providers or how we use AI, we will update this policy.

5. Sharing and Disclosure

We share information only with:

  • Subprocessors. Service providers that run the Service on our behalf, including hosting (Vercel), database and storage (Supabase), email delivery, analytics, error tracking, and AI providers. Each is bound by a written agreement that limits how they may use your information.
  • Connected social platforms. When you publish through Squawk, the post and any media you attach are sent to the platform you selected (LinkedIn, X). Their privacy policies govern what they do with it.
  • Workspace members. People in your organization or workspace can see content, drafts, schedules, comments, and approvals shared in that workspace, according to their role.
  • Legal and safety. We may disclose information to comply with a valid legal request, to enforce our Terms, or to protect the rights, safety, or property of Squawk, our users, or the public.
  • Business transfers. If LSA Digital is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different policy.

6. Data Retention

We keep your information for as long as your account is active and as needed to provide the Service. After you delete your account or content, we remove it from production systems within 30 days. Backups are rotated and overwritten on a regular cycle.

We may keep limited information longer where required for legal, security, or accounting reasons, in which case it is isolated and protected.

7. Cookies and Similar Technologies

Squawk uses a small number of cookies and similar technologies:

  • Strictly necessary. Authentication session, security tokens, language preference, and your cookie-consent choice. These are required for the site to function and cannot be turned off.
  • Functional. Color mode preference and other UI choices.
  • Analytics. If you allow analytics cookies, we measure aggregate usage to improve the product. Analytics cookies are off by default and only enabled if you accept them in our cookie banner.

You can manage cookies through your browser settings. Blocking essential cookies will break the Service.

8. Your Rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you;
  • correct inaccurate information;
  • delete your information;
  • export your information in a portable format;
  • object to or restrict certain processing;
  • withdraw consent where consent is the legal basis for processing;
  • complain to a data protection authority.

To exercise any of these rights, email keith@lsa.dev from the address tied to your account. We will respond within the time required by applicable law.

If you are a California resident, you have additional rights under the California Consumer Privacy Act. Squawk does not sell or share personal information for cross-context behavioral advertising.

9. Security

We protect information in transit with TLS, store it on infrastructure that uses encryption at rest, restrict access to the smallest set of people who need it, and require multi-factor authentication for our internal systems. No system is perfectly secure. If we discover a breach that affects your information, we will notify you and the relevant authorities as required by law.

10. International Transfers

Squawk is operated from the United States. If you are accessing the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States or in any country where our subprocessors operate. Where required, we use approved transfer mechanisms (such as Standard Contractual Clauses).

11. Children

Squawk is not intended for anyone under 16. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top. If the changes are significant, we will tell you by email or through the Service before they take effect.

13. Contact

LSA Digital keith@lsa.dev