Privacy Policy

• Account data: your email address, your name if you sign in with Google, your workspaces, brands, team members and roles.
• Connected social accounts: for each account you connect, its id, name, handle, profile picture and the access tokens the network gives us. Details per network are below.
• Content: the text, images, videos and files you ask us to post or schedule, and the results (post ids, links, errors).
• Billing: your plan, Stripe customer id and invoices. Stripe handles card details; we never see them.
• Usage and security logs: actions taken, when, by whom and from which app (for example "Claude"), IP addresses of sign-ins, and error logs.
• Support: emails you send us.

• To publish, schedule, edit and delete posts you request, on the accounts you choose.
• To show you previews, status, links and errors.
• To sign you in, keep workspaces separate and enforce roles.
• To bill you and send service emails (sign-in codes, failed posts, expiring connections, billing).
• To keep the service secure, prevent abuse and fix problems.

Legal bases (EU/UK): performing our contract with you; our legitimate interest in security and preventing abuse; legal obligations such as tax records. We do not send marketing email unless you opt in.

• Sell or rent personal data or platform data.
• Use it for advertising, profiling or building audiences.
• Use your content or platform data to train or improve AI models, ours or anyone else's.
• Read or collect your followers, messages, comments or insights beyond what is needed to report on posts made through Saymany.
• Post anything you did not ask for.

We request only the permissions needed to publish and to read the status of posts made through Saymany. We use platform data only to provide the features you use, keep it only as long as needed (see retention), and delete it when you disconnect or ask us to. We comply with each network's developer terms and policies.

Google and YouTube. Saymany's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Saymany uses YouTube API Services: by connecting YouTube you agree to the YouTube Terms of Service, and the Google Privacy Policy applies. You can revoke Saymany's access at any time on the Google security settings page. Google user data is never used for advertising, never transferred to third parties except as needed to provide the service or required by law, and never read by people except with your consent, for security, or as required by law.

Meta (Facebook, Instagram, Threads). We process Meta Platform Data only to publish for you and report on those posts, under the Meta Platform Terms. When you remove Saymany in Facebook, Instagram or Threads, Meta notifies us and we delete the data automatically (details).

TikTok. Before every TikTok post we show your TikTok name and the choices TikTok requires (who can see it, comments, duets, stitches); we never pick a privacy level for you.

X. Posts to X go through our partner bundle.social, which receives the content and the X connection needed to publish it and processes them on our behalf.

Exactly what we ask each network for and keep:

• Access tokens: until you disconnect the account, delete the workspace, or the network tells us you removed Saymany. Then deleted immediately.
• Media: a file is deleted 30 days after its last post is published, or 30 days after upload if it was never posted, unless you keep it in your library. Files a draft or scheduled post still needs are kept.
• Posts and results: while your workspace exists.
• Audit records: 12 months.
• Payment webhook records: 90 days. Invoices: as long as tax law requires.
• Sign-in codes, connect links and expired sessions: cleared within a day.
• Backups: overwritten within 30 days.