Privacy Policy

1. Information we collect

Account information: name, email address, password hash, and role assignments for each workspace member.

Workspace content: posts, drafts, media assets, campaigns, notes, approval decisions, reports, and settings created within the Service.

Connected platform data: when you authorize a social platform connection (for example Meta, Google Business Profile, LinkedIn, or Yelp), we receive and store profile identifiers, access tokens (encrypted at rest), published post results, comments, messages, reviews, and engagement metrics as permitted by the scopes you grant.

Usage and log data: authentication events, audit log entries of workspace actions, and technical logs used for security and reliability.

2. How we use information

To operate the Service: publish and schedule content you compose, sync inboxes and reviews, compute analytics, generate reports, and deliver notifications you enable.

To secure the Service: authenticate sign-ins, rate-limit abusive attempts, audit administrative actions, and investigate incidents.

We do not sell personal information, and we do not use your workspace content or connected platform data for advertising.

3. Data from social platforms

Data received from Meta platforms (Facebook and Instagram) and other connected networks is used solely to provide the workspace features you request — publishing, inbox care, review responses, and reporting — consistent with each platform's terms, including the Meta Platform Terms and Developer Policies.

Access tokens are stored encrypted with rotating keys. Disconnecting a profile revokes our use of its tokens; you can also revoke access from the platform's own security settings at any time.

4. Sharing

Within your workspace, content and metrics are visible to members according to their roles. Client report links you create share the specific report contents with anyone holding the link until the link is refreshed or the report is archived.

We use service providers to operate the platform — hosting and database infrastructure, email delivery, and payment processing — each bound to use data only to provide their service to us. We may disclose information if required by law.

5. Retention and deletion

Workspace data is retained while your workspace is active. After termination, data is retained for up to 30 days for export and then deleted from production systems, subject to routine backup cycles.

You may request deletion of your data at any time — see the data deletion instructions at /data-deletion, which also cover deletion requests originating from Meta platforms.

6. Security

Passwords are stored using industry-standard one-way hashing. Social platform tokens are encrypted at rest with rotating key support. Access to production systems is restricted, and administrative actions inside workspaces are audit logged.

7. Cookies

The Service uses strictly necessary cookies for authentication sessions and security. We do not use third-party advertising or tracking cookies.

8. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information. Workspace members should direct requests to their workspace owner; workspace owners can contact us directly and we will respond within 30 days.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced through the Service or by email before they take effect.

10. Contact

Kraken Social is operated by Ignite Graphic Design Studio, LLC. Privacy questions and requests can be sent to [email protected].