Privacy

Who runs Recto

Recto is operated by Recto. For anything about your data, write to hello@tryrecto.com.

What we store

• Account. Your email, a password hash (argon2id, never the password itself), your role and your team.
• Access requests. Your email, the product URL if you gave one, and the date.
• Products. The URL you add and what Recto reads from your public site: page text, llms.txt, design.md, stylesheets and logos. Also the positioning, strategy, brand settings, launch plan and weekly reviews Recto writes from them.
• Posts. Drafts, your edits with up to 20 earlier versions, the final text, links to published posts, clicks on Recto links, Bluesky reactions and revenue credited to each post.
• AI usage. The type and cost of each AI request, so we can apply the daily budget.

Connected accounts

When you connect Bluesky we keep your handle, account ID and app password. When you connect LinkedIn we keep the access token, your member ID and your name. The app password and access token are encrypted with AES-256-GCM using a server secret before they are saved. Disconnecting a channel deletes them.

If you connect an agent such as Claude Code or Cursor, we store its registration and hashed tokens. Access tokens last 1 hour and refresh tokens 30 days. You can disconnect every agent from Settings.

Sales data from Creem

Your Creem webhook sends Recto paid orders. We verify each one with the webhook secret you saved in Recto, then keep only the order ID and amount to credit the post. We do not store your buyers' names, emails or card details.

Services that see your data

• Anthropic. Recto uses Claude through the Anthropic API to write positioning, posts, launch copy and reviews. Requests include your site text, your strategy, your edited posts and their results. Anthropic's commercial terms say API data is not used to train their models.
• Bluesky and LinkedIn. Posts you approve are published through their APIs. Bluesky reactions are read from its public API.
• X and Reddit. Recto opens their compose pages in your browser with the text filled in. We send them nothing directly.
• Google Fonts. Your browser loads fonts from Google, which sees your IP address when it does.
• DigitalOcean. Recto and its Postgres database are hosted on DigitalOcean App Platform.

Cookies and local storage

Recto sets one cookie, recto_auth, to keep you signed in. It is signed, HttpOnly, SameSite=Lax, sent only over HTTPS in production, and expires after 30 days.

Your browser also keeps a few interface preferences in local storage: the sidebar state, your posts view and the product you last opened. There are no analytics, ad trackers or third-party cookies.

IP addresses and logs

We use your IP address in memory to rate limit requests and do not save it. Server logs record the method, path and status of failed requests.

Who can see your products

Members of your team see the products you add, except demo products. Admins of Recto can see account, team and access request lists to run the invite beta. We do not sell or rent your data.

Deleting your data

• Deleting a product removes it and all of its posts.
• Disconnecting a channel or an agent removes its stored credentials.
• To close your account or remove an access request, email hello@tryrecto.com and we delete it within 30 days.

Changes

When this policy changes we update the date above, and we email account holders about material changes.