Beacon
Start trial
Features Pricing Score your post FAQ Blog
Log in

Privacy Policy

Last updated: November 2026

This Privacy Policy explains how Alpha2Zulu LLC ("Alpha2Zulu," "we," "us," or "our"), operating the Beacon service by H1L (One Human Left) ("Beacon"), collects, uses, discloses, and protects information when you use getbeacon.1humanleft.com and the Beacon application (together, the "Service"). By using the Service, you agree to the collection and use of information as described here.

1. Information We Collect

We collect the following categories of information:

  • Account information: name, email address, password (hashed, never stored in plaintext), and billing details you provide when you register.
  • Content you create: posts, drafts, scheduled content, uploaded media, and the inputs you give Beacon's AI features (FingerPrint™, DNA™, Mira).
  • FingerPrint™ voice profile data: writing samples and interview responses used to build your personal voice model.
  • Connected social account data: OAuth access tokens and profile/engagement data from platforms you connect (LinkedIn, Facebook, Instagram, Bluesky, Threads, X), limited to what each platform's API exposes for the permissions you grant.
  • Payment information: processed directly by our payment processor, Stripe. We do not receive or store your full card number.
  • Usage data: log data, device/browser type, IP address, and interaction data (e.g. feature usage, session length) collected automatically.
  • Communications: messages you send us via email or support channels.

2. How We Use Your Information

  • To provide, operate, and maintain the Service, including generating, scheduling, and publishing content on your behalf.
  • To build and refine your FingerPrint™ voice model and DNA™ content strategy.
  • To process payments and manage your subscription.
  • To communicate with you about your account, updates, and support requests.
  • To monitor, secure, and improve the Service, including diagnosing technical issues.
  • To comply with legal obligations.

Beacon does not sell your personal information, and does not use your content to train third-party AI models beyond what is strictly required to generate your own outputs during your active use of the Service.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area or UK, we process your personal data on the following legal bases: performance of a contract (to provide the Service you signed up for), legitimate interests (to secure and improve the Service), consent (where you have explicitly granted it, e.g. connecting a social account), and compliance with legal obligations.

4. Who We Share Data With

We share information only with service providers ("subprocessors") who help us operate the Service, under contractual confidentiality and data-protection obligations:

  • Stripe — payment processing and subscription billing.
  • Anthropic — underlying AI model provider for content generation features.
  • Social platforms (LinkedIn, Facebook, Instagram, Bluesky, Threads, X) — to publish and manage content you direct us to post, via the OAuth permissions you grant.
  • Infrastructure/hosting providers — to host the application and store data securely.

See our Data Protection statement for the full subprocessor list and retention schedule. We do not sell your personal information to third parties, and we do not share it for third-party advertising purposes.

4A. Connecting Claude or ChatGPT

You can connect Beacon to an AI assistant such as Claude (Anthropic) or ChatGPT (OpenAI) so that it can work with your Beacon account while you chat. The connection uses OAuth: you sign in to Beacon, choose which brands the assistant may use, and choose what it may do. Beacon asks for this approval every time an assistant connects.

  • What the assistant can access: the names of the brands you allowed; scheduled posts and, for managers and admins, posts waiting for review, as short excerpts with their platform, time and status; and performance figures for posts Beacon published. It can also save drafts or text you provide into your Approvals queue and, if you allow it and your role is manager or admin, reject a post waiting for review. It cannot publish, schedule or approve a post, send replies or messages, change settings, billing, your team or your connected social accounts, or delete anything.
  • What Beacon receives from the assistant: only what the assistant sends in a request, such as a post topic or the text you want queued. Beacon does not receive the rest of your conversation. A topic you send to have a draft written is processed by our AI provider (Anthropic) as described in section 4, and the first 200 characters of it are stored with the draft in your queue.
  • What Beacon records: a log of each request (the tool used, the brand, the outcome, the length of what was sent but not its text, and the IP address and browser or app user-agent of the request) and the connection itself (the app, the brands, the permissions, when it was connected and last used). Request logs are kept for 13 months, including after an account is deleted, for security and abuse investigation, and then deleted. Access and refresh tokens are stored only in hashed form.
  • What the assistant provider receives: what Beacon returns to the assistant, such as brand names, post excerpts and performance figures, becomes part of your conversation with that provider and is handled under that provider's own terms and privacy policy.
  • How to revoke access: in Beacon, go to Settings, then Connected AI apps, and select Disconnect (or Disconnect all). Access stops immediately. Account owners and admins can disconnect every connection on the account; other users can disconnect their own. Connections also end automatically when you change or reset your password, when a team member is removed, when an account is deleted, when every brand on the connection is deleted, after 30 days without use, and at the latest 90 days after the connection was made. Removing Beacon inside the assistant does not reliably notify Beacon, so please also disconnect it in Beacon.

5. Data Retention

We retain account and content data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain records for legal, tax, or billing purposes (e.g. billing records are retained for 7 years), and except the AI-assistant request logs described in section 4A. See our Data Deletion page for details on how to request deletion.

6. Data Security

We use industry-standard security measures to protect your data, including encryption in transit (TLS), encrypted storage of social media credentials, access controls, and firewalled infrastructure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your personal data ("right to erasure").
  • Restrict or object to certain processing.
  • Port your data to another service in a machine-readable format.
  • Know / opt out of the sale of personal information (California, CCPA) — we do not sell personal information, so there is nothing to opt out of.
  • Non-discrimination for exercising any of the above rights.

To exercise any of these rights, contact us at privacy@1humanleft.com. We will verify your identity before acting on a request and respond within the timeframe required by applicable law.

8. Cookies & Tracking

We use essential cookies required for the Service to function (e.g. session authentication) and may use analytics cookies to understand product usage. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Service from working.

Visitor counts on this website. On some pages of this marketing site (currently the home, features, why-beacon, welcome, contact and privacy pages) we count page views with Sounding, a small counter we run ourselves. Cloudflare Web Analytics also runs on this site. Sounding sets no cookies. It records only how many times each page was viewed each day, with the time of the first and latest view, and keeps those totals for about a month. As with any web request, your IP address passes through our hosting and Cloudflare on the way. Sounding does not keep it in its records, and our web server does not keep an access log for the counter. Cloudflare Web Analytics does not use cookies. We do not use these counts for advertising.

9. International Data Transfers

Beacon is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.

10. Children's Privacy

The Service is not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date, and for material changes we will provide a more prominent notice (e.g. email or in-app notification).

12. Contact Us

Email: privacy@1humanleft.com
Company: Alpha2Zulu LLC (Beacon by H1L / One Human Left)
Registered address: 4240 Baker Road, Albany, Ohio 45710