Policies
Privacy at Pyre
Last updated: 2026-04-26
Pyre is a small, US-based company building a social media management tool for tattoo studios. We're in pre-launch — most of this site is informational. This policy explains what information we collect from people who visit socialpyre.com today, and (eventually) from studio customers who use the product.
We've written it in plain English. If something isn't clear, please tell us and we'll fix it.
What we collect from website visitors
When you visit socialpyre.com, we collect:
- Standard request logs — your IP address, the page you visited, your browser's User-Agent, and the timestamp. Cloudfront and AWS keep these logs to help us run the site reliably and investigate abuse. We don't connect them to a name or account.
- Anonymous analytics events — when JavaScript is enabled, PostHog (our product analytics provider) records page views and high-level interaction events. These are tied to a randomly-generated visitor ID stored in a first-party cookie. They are not tied to your real identity unless and until you create an account.
- Theme preferences — if you change the light/dark theme, we store that choice in a small functional cookie so the site renders in the right palette on your next visit.
We do not sell your data, and we don't run ad tracking or behavioral advertising of any kind. We don't use third-party advertising pixels, retargeting, or social-platform conversion tracking on this site.
What we'll collect from customers (when the product launches)
When Pyre launches as a product, signed-in customers will entrust us with more — at minimum:
- Account information — your name, email, the studio you work at, and a hashed password (or your identity-provider sub if you sign in with Google).
- Linked social accounts — OAuth tokens for the Instagram and TikTok accounts you authorize Pyre to publish to. We only request the permissions we need to schedule and publish posts on your behalf.
- Content you upload — images, videos, captions, and schedules for posts you draft in Pyre.
- Operational metadata — when posts were scheduled, when they actually published, and the platform's response (success / failure / error message) so we can show you what happened.
When the product is live, this section will be updated with the full customer-data picture and a link to a Data Processing Addendum (DPA) for business customers who need one.
How we use what we collect
- To run the website and (eventually) the product reliably.
- To investigate abuse, fraud, and security incidents.
- To understand how people find and use Pyre, in aggregate, so we can make it better.
- To contact you about your account, important changes to the service, or your support requests.
We don't use your data to train machine-learning models that ship to other customers, and we don't share your studio's content or analytics with other studios.
Who we share data with
We share data only with vendors who help us operate Pyre, and only the data they need:
- Amazon Web Services (AWS) — hosting, storage, email delivery. AWS holds the infrastructure our app and database run on.
- PostHog — product analytics for socialpyre.com (and eventually the product). PostHog stores visitor / user events on our behalf in the United States.
- Logto — identity provider for customer sign-in (when the product launches). Logto holds account credentials and OAuth tokens.
- Meta and TikTok — when a studio links a social account to Pyre, we send and receive data through those platforms' APIs. Their handling of that data is governed by their own policies.
We may also share data when the law requires us to (a valid subpoena, court order, or similar) — and when we do, we'll push back on overbroad requests and notify the customer unless we're legally prohibited from doing so.
Where data lives
Pyre's primary infrastructure is in the United States (AWS us-east-1). PostHog stores analytics in the United States. If you're visiting from outside the US, your data is being transferred to and processed in the United States.
How long we keep things
- Request logs: 30 days.
- PostHog analytics events: 12 months from the event.
- Account and customer data (post-launch): for as long as your account is active, plus a short retention window after deletion for backups and legal obligations.
Your rights
Depending on where you live, you have rights over your personal data — including the right to access it, correct it, delete it, or take it somewhere else. We honor these rights for everyone, regardless of where you live.
To exercise any of these rights, contact us. We'll respond within 30 days.
Cookies
Cookies and how to disable them are documented separately in our Cookie Policy.
Children
Pyre is for tattoo studios and the professionals who work in them. It's not directed at children, and we don't knowingly collect personal data from anyone under 13. If you believe we have, please tell us and we'll delete it.
Changes to this policy
When we make material changes to this policy, we'll update the "Last updated" date above and — once the product launches — notify customers by email before the changes take effect.
Contact
Questions, requests, or concerns? Reach us via the contact form.