Privacy Policy

When you work with Social Branch Co., you or your team may provide us with:

• Account and contact information (name, email address, and login credentials for our client portal).
• Business information used to guide your marketing (business identity, products and services, target audience, offers and promotions, brand preferences, and similar details you share during onboarding or ongoing work with us).
• Brand assets and files you upload (logos, photos, videos, and related materials) for use in content we create for you.
• Content requests, direction, and feedback you give us, including approvals and requested changes on content we prepare.
• Records of communications between you and our team.

If you choose to connect a Facebook Page and/or a linked Instagram professional account to Social Branch Co., we access certain information from Meta's platform through Meta's official APIs — only to the extent needed to provide our services, and only within the permissions you grant when you connect your account. Depending on the permissions granted, this may include:

• Identifiers for your connected Facebook Page and Instagram professional account, and their public names/usernames.
• The ability to publish content (posts, images, and supported video formats) that you have approved through our review process to your connected Page and/or Instagram account.
• Identifiers for content published through our platform, so we can track and report on it.
• Analytics and insights made available by Meta for content published through our platform and for the connected account — for example reach, views, reactions, comments, shares, saves, and account-level metrics such as follower counts, to the extent Meta's APIs provide them.

We only request the Meta permissions necessary to provide these features, and we only access data for the specific Page(s) and Instagram account(s) you connect — never any other account.

We use the information described above to:

• Plan, draft, and prepare social media content on your behalf, and route it through our internal review and your approval process.
• Publish content you have approved to the Facebook Page and/or Instagram account you connected.
• Retrieve and store performance analytics for content we publish, so we can build reports for you.
• Prepare reports and recommendations about your social media performance.
• Operate, maintain, and improve our platform and the services we provide to you.

We do not sell your information, and we do not use your Meta data for advertising or for any purpose unrelated to providing our services to you.

Client data is stored on managed infrastructure provided by our hosting and database providers (see Section 5). Access to client information within our platform is limited to authorized Social Branch Co. personnel and, for a client's own information, to that client's authorized users.

Facebook/Instagram access tokens are stored securely on our servers, are encrypted, and are never exposed in any browser, client-side code, or log output. Only our server-side systems use these tokens to make requests to Meta's APIs on your behalf. We apply reasonable technical and organizational measures designed to protect the information we hold, though no method of storage or transmission can be guaranteed 100% secure.

We use a small number of third-party providers to operate our platform:

• A database, authentication, and file-storage provider that hosts the underlying data described in this policy.
• An application hosting provider that runs our platform.
• An AI service provider we use to help draft social media content, using the business information described in Section 1.
• Meta Platforms, Inc. — for publishing content and retrieving analytics from connected Facebook and Instagram accounts, as described above. Meta's own privacy policy also governs their handling of this data.

These providers only receive the information necessary to perform their function for us. We do not sell or rent your information to any third party.

We retain your information for as long as your account with Social Branch Co. remains active, and as needed to provide our services to you. If your account is closed, or you request deletion (see Section 8), we delete your stored information, other than what we are required to retain for legal, accounting, or legitimate business record-keeping purposes.

You can revoke Social Branch Co.'s access to your Facebook Page or Instagram account at any time, directly through Meta — in Facebook's Business Integrations settings, or through Meta Business Suite. Once revoked, we can no longer publish content to or retrieve analytics from that account, and we will reflect this in our platform.

You may request deletion of your information, or removal of Social Branch Co.'s connection to your Facebook or Instagram account, at any time by contacting us using the information below. We will delete your account and associated stored information upon request, except where we are required to retain certain records by law.

Our services are intended for business use by our clients and are not directed to children. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify our clients directly.

If you have questions about this Privacy Policy, or would like to request deletion of your information, please contact us at socialbranchco@gmail.com.