Privacy Policy

Information We Collect

• Account & Identity: Name, email, and authentication provider identifiers (e.g., Google OAuth).
• Platform Connections: Access tokens, refresh tokens, and platform IDs for integrated services (X, Facebook, LinkedIn, TikTok, Google/YouTube, Reddit, WordPress) stored securely to enable publishing, analytics, and ads management.
• Content & Media: Posts, drafts, captions, hashtags, uploaded images/videos, landing pages, and campaign settings (budgets, targeting inputs).
• Usage & Device: Log data such as IP, user agent, timestamps, feature usage, and crash/performance metrics.
• Billing: Transaction metadata (amount, plan, payment status). Card data is handled by the payment processor; full card numbers are not stored.
• Support: Messages, attachments, and feedback you send to our team.

How We Use Information

• Provide and operate posting, scheduling, analytics, and ads features.
• Create and manage ad campaigns across connected platforms.
• Secure accounts, detect abuse, and enforce platform policies.
• Improve product performance, accuracy of AI features, and user experience.
• Communicate updates, security notices, and service messages.
• Comply with legal obligations and platform terms.

Sharing & Disclosure

• Third-Party Platforms: We transmit content, media, and campaign settings only as needed to execute your requested actions.
• Service Providers: Hosting, storage, analytics, email, and payment processors operate under confidentiality obligations.
• Legal/Compliance: When required by law, to protect rights, or prevent fraud/abuse.
• Business Transfers: In mergers or acquisitions, data may transfer under equivalent safeguards.

We do not sell personal data.

Data Retention

• Account data is retained while your account is active.
• Tokens and drafts are deleted when you disconnect a platform or delete your account, subject to legal holds and backup cycles.

Security

• Encryption in transit (TLS) and at rest for stored tokens.
• Principle of least privilege for internal access.
• Regular monitoring and remediation of vulnerabilities.

Your Choices & Rights

• Disconnect any platform at any time.
• Request access, correction, export, or deletion of your data (subject to legal limits).
• Opt out of non-essential communications.
• If you are in the EU/UK, you may exercise GDPR/UK GDPR rights and lodge a complaint with your supervisory authority.

International Transfers

Data may be processed globally. We apply contractual and technical safeguards appropriate to the destination.

Children

The service is not intended for individuals under 16. We do not knowingly collect data from children.

AI Features

Inputs and outputs for AI-assisted content may be logged to improve quality and safety. Sensitive data should not be provided in prompts.

Changes

We’ll post updates here and adjust the “Last updated” date. Material changes will be notified via email or in-app.

Contact

Privacy inquiries: privacy@bonce.ai (or your configured support channel).