Privacy Policy

5. How We Use Data from Connected Social Media Accounts

We use data received from Facebook, Instagram, LinkedIn, and X only to:

• publish the content you create or approve in Collablly DMA to the accounts you connected; and
• show you the status of your connections and a history of what was published and whether it succeeded.

We do not sell this data, use it for advertising, share it with data brokers, or use it to build profiles about you or anyone else.

We do not publish anything to your accounts unless you created or approved it, or you turned on automated publishing yourself. Our use of this data also follows the platform terms of Meta, LinkedIn, and X.

6. How We Share Information

We do not sell, rent, or lease your personal information or customer lists. We share information only as follows:

• Service providers that help us run the Services, under contracts that require them to protect your information and use it only to provide services to us:
  • Microsoft Azure (United States): application hosting, database, sign-in, secure key storage, and the AI service that writes text;
  • OpenAI: AI image generation;
  • our email delivery provider: account and notification emails;
  • our payment provider, if you purchase a paid plan.
• Social media platforms, at your direction: when you publish, your content goes to the platforms you connected, and it is then governed by that platform's own terms and privacy policy.
• Your workspace: content and activity in a workspace are visible to the other members of that workspace, according to their roles.
• Legal and safety reasons: we may disclose information if required by law, or in the good-faith belief that it is necessary to comply with legal process, to protect the rights or property of Collablly, or to protect the safety of our users or the public.
• Business transfers: if Collablly is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.

7. How We Protect Your Information

We use administrative, technical, and physical safeguards to protect your information. Access tokens for connected social media accounts and other workspace credentials are encrypted at rest using AES-256-GCM, with the encryption key held separately in Azure Key Vault.

Data is encrypted in transit using HTTPS. Access to production systems is limited to authorized personnel.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. How Long We Keep Information

• Access tokens for connected accounts are kept only while the account is connected. When you disconnect an account, its token is deleted.
• Account information and workspace content are kept while your account is active, and deleted when you ask us to delete them (see Section 10), unless we must keep certain information to meet legal obligations, resolve disputes, or enforce our agreements.
• Billing records are kept as long as required by tax and accounting laws.

9. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, download, or delete your personal information, to object to or restrict certain processing, and to withdraw consent.

You can:

• update your account information within the Services or by contacting us;
• disconnect any social media account at any time in Collablly DMA under Settings > Social Platforms;
• opt out of marketing emails using the unsubscribe link in any such email (service messages will still be sent while your account is active); and
• make any other request by emailing info@collablly.com.

We will respond to verifiable requests within the time required by applicable law, and we will not discriminate against you for exercising your rights.

California residents: we do not sell or share personal information for cross-context behavioral advertising.

We may be unable to delete certain information if we need it to complete a transaction or perform a contract with you; to detect security incidents or protect against fraud or illegal activity; to debug and repair errors; to comply with legal obligations, including the California Electronic Communications Privacy Act; or for other internal uses permitted by law that are compatible with the context in which you provided it.

10. Data Deletion, Including Facebook and Instagram Data

You can remove Collablly DMA's access to your data and ask us to delete it at any time:

1. Disconnect in the app: in Collablly DMA, go to Settings > Social Platforms and click Disconnect next to the account. The stored access token is deleted immediately.
2. Remove the app from Facebook: in Facebook, go to Settings & privacy > Settings > Business Integrations (or Apps and Websites), select Collablly DMA, and remove it. This revokes our access on Facebook's side.
3. Request deletion of all your data: email info@collablly.com with the subject "Data Deletion Request," from the email address on your account, and include your workspace name. We will delete your account data, including any data received from Meta, LinkedIn, and X, within 30 days, and confirm by email when it is done.

Posts that were already published to your social media accounts remain on those platforms until you delete them there.

11. Children

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

12. Where Your Information Is Stored

Your information is stored and processed in the United States, on servers provided by third-party hosting vendors we have contracted with.

If you use the Services from outside the United States, you understand that your information will be transferred to and processed in the United States.

13. Email Communications

From time to time, we may email you announcements, alerts, confirmations, surveys, and other communications about the Services.

You can opt out of promotional emails at any time; service messages related to your account will continue while your account is active.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example when our Services, our data practices, or the law change.

We will update the date at the top of this policy, and when changes are significant we will notify you by email to the primary address on your account or by a prominent notice in the Services.

Your continued use of the Services after changes take effect means you accept the updated policy.

15. Contact Us

If you have questions about this Privacy Policy, want to exercise your rights, or believe we have not followed this policy, contact us: