Privacy policy

1. What we collect

When you create an account

• Your name, email address and password. The password is stored only in a scrambled form we can't read back.
• Your team (its name and the people in it, with their roles).

When you set up a brand

• The website address you give us, and the text of public pages on that website, which we read to learn about the business.
• What you or our AI write about the business: description, tone, audience, topics, goals and dates, posting days and times, time zone, country and region.
• Your logo and brand colours.

When you connect Instagram or Facebook

• The account or Page ID, name and handle, the permissions you granted, and the access codes (“tokens”) Meta gives us to post for you. Tokens are stored encrypted. We never ask for or see your Meta password.
• The numbers Meta reports for posts we publish: likes, comments, saves, shares, reach and similar results.

When you use the service

• The posts we create for you: ideas, captions, hashtags, headlines and images, your edits, approvals and rejections, and when and where each post was published.
• If you add your own AI provider keys, those keys (stored encrypted).
• Records of each AI task we run (which task, which AI service, cost), used for billing and to keep costs in check.
• Feedback you send us from the app, including the page you were on and a screenshot if you attach one.
• Answers to pilot surveys, and notes our team writes after a check-in with you.

When you ask to join the pilot

• Your name, business name, email, website, Instagram handle, what you want from the service, and whether you agree to receive news from us. We keep a scrambled form of your IP address to stop spam.

Automatically

• Technical records such as sign-in times and error logs, kept to run and protect the service.

We do not use advertising or analytics trackers. We use only the cookies needed to keep you signed in and protect your account, and your browser stores small settings like your light or dark theme choice.

2. Why we use it

• To provide the service: learn about your business, plan and write posts, make and check images, publish them, and show your results.
• To email you about your account: verification, password resets, posts waiting for approval, failed posts, and your monthly results. You can turn the monthly results email off in Settings.
• To support you, fix problems and improve the service during the pilot.
• To keep the service secure and prevent misuse.
• To send news about the service, only if you agreed to it. You can unsubscribe at any time (Canada's anti-spam law, CASL).
• To meet legal obligations.

We do not sell your personal information, and we do not share it for advertising.

3. Who we share it with

We share information only with services that help us run Social by Sklentr, and only what each needs:

If you add your own AI provider key, the tasks you choose run on your account with that provider, under your agreement with them.

We may also share information if the law requires it, to protect our rights or someone's safety, or as part of a sale or merger of our business (the buyer would have to follow this policy).

4. Where your information is stored

We are in Canada, and some of the services above store or process information in the United States and other countries. Information stored outside Canada is subject to the laws there, and authorities there may be able to access it. We choose providers that protect information to a standard comparable to ours.

5. How long we keep it

• Your account, team, brands, posts and results: for as long as your account is open.
• Images from rejected attempts (when an image fails our check and is made again): deleted after 7 days.
• Screenshots attached to feedback: deleted 90 days after the issue is closed.
• Error logs of failed background tasks: deleted after 7 days.
• When you delete your account, we delete its information from the service right away, and from backups within 30 days.
• We keep a record of actions our staff take in the admin area (for example, adding credits to a team) to stay accountable. These records hold the team name and what changed, never passwords, tokens or keys.

6. Your choices and rights

You can:

• See and correct your information: most of it is in the app (brands, settings, team). For anything else, email us.
• Disconnect Instagram or Facebook at any time from the brand's Connections tab. We delete our copy of the token.
• Delete your account from Settings → Team → Delete account. See How to delete your data.
• Withdraw consent to news emails at any time, using the unsubscribe link or by emailing us.
• Ask for a copy of your information, or ask questions about how we handle it.

We answer requests within 30 days. If you live in a US state with its own privacy law (for example, California), you may have additional rights, such as knowing what we collect and asking us to delete it; email us to use them. We do not sell or share personal information for targeted advertising.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), or in Quebec to the Commission d'accès à l'information (cai.gouv.qc.ca).

7. How we protect it

• Connections use HTTPS.
• Meta tokens and your own AI keys are encrypted, and never shown in full, not even to our staff.
• Each team can see only its own information.
• Only a few Sklentr staff can use the admin area, and what they change is recorded.

No system is perfectly secure. If a breach creates a real risk of significant harm, we will tell you and the authorities as the law requires.

8. Children

The service is for businesses and is not meant for anyone under 16.

9. Changes to this policy

We will post changes here and update the date at the top. If a change matters, we will tell account owners by email before it takes effect.

10. Contact

Sklentr Inc., Ontario, Canada
Privacy Officer: Michael
support@sklentr.com