Privacy Policy

1. Information We Collect

a) Information You Provide

• Account information: name, email address, and password when you register.
• Workspace data: organization name, team member details, and role assignments.
• Content: text, images, videos, and other media you create, upload, or schedule for publishing.
• Brand kits: logos, color palettes, fonts, and brand guidelines you configure.
• Payment information: billing details processed securely through our payment provider. We do not store credit card numbers on our servers.
• Communications: messages you send to our support team.

b) Information from Connected Social Platforms

When you connect a social media account via OAuth, we may receive:

• Account identifiers (usernames, page IDs, channel IDs).
• OAuth access tokens and refresh tokens (stored encrypted).
• Profile information (name, profile picture) from connected accounts.
• Post performance analytics and engagement metrics.
• Audience demographic data (when available via the platform API).

We access only the permissions (scopes) you explicitly authorize during the connection process. We do not store your social media passwords.

e) TikTok Platform Data

When you connect a TikTok account, AI Media Agency OS uses TikTok's Login Kit and Content Posting API under the scopes you explicitly authorize (user.info.basic, video.publish, video.upload). Through these, we may access:

• Your TikTok open ID, display name, and avatar — used only to confirm the connected account.
• Authorization to publish or upload videos you schedule, to your own TikTok account, on your behalf.
• Post performance metrics returned by the TikTok API for content you publish.

We use TikTok data solely to operate the features you request — confirming your connection and publishing your own content to your own TikTok account. We do not sell TikTok data, use it for advertising or profiling, or share it with third parties except as strictly necessary to deliver the Service. You may revoke access at any time in your TikTok account settings or by disconnecting the account in AI Media Agency OS, which deletes the stored access and refresh tokens. Our collection, use, and transfer of information received from the TikTok API adhere to the TikTok Privacy Policy and the TikTok Developer Terms of Service.

c) Automatically Collected Information

• IP address, browser type, and device information.
• Usage data: features used, pages visited, and timestamps.
• Cookies and similar technologies for session management and authentication.

d) AI Interaction Data

• Content generation prompts and preferences you provide to our AI tools.
• AI-generated output associated with your account.

2. How We Use Your Information

• Provide, maintain, and improve the Service.
• Schedule and publish content to your connected social media accounts.
• Generate AI-powered content suggestions and recommendations.
• Provide analytics, reporting, and performance insights.
• Process payments and manage subscriptions.
• Send service-related communications (account notifications, security alerts).
• Detect and prevent fraud, abuse, and security threats.
• Comply with legal obligations.

3. Data Sharing

We share your information only in the following circumstances:

• Social media platforms: We transmit your content to the platforms you have connected, solely to publish on your behalf.
• Service providers: Cloud hosting, payment processing, and email delivery providers who assist in operating the Service, bound by confidentiality agreements.
• Legal requirements: When required by law, regulation, or valid legal process.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Security

• All data is encrypted in transit using TLS/SSL.
• OAuth tokens are stored using encryption at rest.
• Access to production systems is restricted and authenticated.
• We conduct regular security reviews of our infrastructure.

While we implement industry-standard safeguards, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

• Account data is retained while your account is active.
• OAuth tokens are retained while the platform connection is active and deleted upon disconnection.
• Content and analytics data may be retained for up to 90 days after account closure for backup and recovery purposes.
• You may request deletion of your data at any time by contacting us.

6. Cookies

We use cookies for:

• Essential cookies: Session management, authentication, and security (required for the Service to function).
• Analytics cookies: Understanding how the Service is used to improve performance and features.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent the Service from functioning properly.

7. Your Rights

All Users

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Disconnect social media accounts and revoke OAuth access at any time.
• Export your data in a portable format.

EEA/UK Residents (GDPR)

If you are in the European Economic Area or United Kingdom, you have additional rights under the General Data Protection Regulation:

• Right to restrict processing of your data.
• Right to data portability.
• Right to object to processing based on legitimate interests.
• Right to withdraw consent at any time.
• Right to lodge a complaint with your local data protection authority.

Our legal bases for processing are: performance of our contract with you (providing the Service), your consent (for optional features), and our legitimate interests (security, fraud prevention, service improvement). We will respond to data rights requests within 30 days.

California Residents (CCPA)

• Know what personal information we collect and how it is used.
• Request deletion of your personal information.
• Opt out of the sale of personal information. We do not sell personal information.
• Non-discrimination for exercising your privacy rights.

We will respond to verifiable consumer requests within 45 days.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such data, we will delete it promptly.

9. International Data Transfers

Your data is processed and stored on servers in the United States. If you are accessing the Service from outside the United States, your information will be transferred to and processed in the United States. We implement appropriate safeguards for international data transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 14 days before they take effect. The “Last Updated” date at the top reflects the most recent revision.

11. Contact Us

For privacy-related questions or to exercise your data rights, contact us at: privacy@serviceline247.com

Tech Savvy Corp
15051 Royal Oaks Lane, Ste 1203
North Miami, FL 33181