This Privacy Policy describes how AD Partners ("we", "us") collects, uses and protects information when you use our social media management platform (the "Service").

1. Information We Collect

2. How We Use Information

We use the information above to operate the Service: publishing scheduled content to the accounts you connect, generating AI captions and images from the context you provide, computing analytics and reports, powering the client approval workflow, and sending transactional emails such as password resets and expiry warnings.

3. Third-Party Services We Share Data With

To provide the Service, data is shared with: the social platforms you explicitly connect (Meta, LinkedIn, Google, X), our AI provider for generating captions and images from the prompts you submit, our payment processors (Razorpay and/or Stripe) for billing, and our email delivery provider for transactional email. Each of these third parties processes data under its own privacy terms.

4. Data Storage and Security

Social account access tokens are stored encrypted at rest, separately from your login session, and are only decrypted at the moment they are needed to make an API call on your behalf. Passwords are stored using industry-standard hashing, never in plain text. Access to another agency's data is not possible through normal use of the Service; every tenant's data is isolated at the application and database level.

5. Data Retention

We retain account and content data for as long as your subscription is active, and for a reasonable period afterward to allow you to export it or reactivate your account, or as required by law. You may request deletion of your agency's data at any time.

6. Your Rights

Depending on your location, you may have rights to access, correct, export or delete your personal data. The Service provides a self-service data export. For deletion requests or other rights requests, contact us using the details below.

7. Cookies

We use cookies and similar technologies necessary for login sessions, security (including CSRF protection) and basic usage analytics. Disabling cookies in your browser may prevent parts of the Service from functioning.

8. Children's Privacy

The Service is intended for business use by adults working at or with a marketing agency. It is not directed at children, and we do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email.

10. Contact

Questions about this Privacy Policy, or requests to access, export or delete your data, can be sent to the support address listed in your account or on our website.