Privacy Policy

1 Data We Collect

1.1 Account Information

When you register we collect your name, email address, and organisation details (name, industry, team size).

1.2 Social Media Credentials

To schedule and publish posts on your behalf we store OAuth access tokens for connected platforms (Facebook, Instagram, YouTube, LinkedIn, X/Twitter, Telegram, WhatsApp). Tokens are used exclusively to post content you authorise and are never shared with third parties.

1.3 Content You Upload

Images, videos, and other media you upload to the Content Library, as well as post captions and scheduling data.

1.4 Payment Information

Payment details are processed directly by our payment partners (Razorpay for India, Paddle for international users). We do not store credit card numbers, UPI IDs, or bank account details on our servers. We receive only subscription status, plan type, and transaction identifiers.

1.5 Usage Data

We collect standard server logs (IP addresses, request timestamps, browser type) for security and performance monitoring. We do not use third-party advertising trackers on the dashboard.

2 How We Use Your Data

• To provide the service: scheduling, publishing, team collaboration, and analytics.
• To process payments: subscription management via Razorpay or Paddle.
• To send notifications: post confirmations, failure alerts, team invites. We do not send marketing emails unless you opt in.
• To improve the service: aggregated, anonymised usage patterns to understand which features are most useful.
• For security: detecting abuse, investigating errors, preventing unauthorised access.

We do not use your data to train machine learning models, build advertising profiles, or sell insights derived from your data.

3 Data Sharing

We do not sell your personal data. We share data only in these limited circumstances:

3.1 Service Providers

• Google Cloud / Firebase — hosting and infrastructure
• Razorpay — payment processing (India)
• Paddle — payment processing (international)

3.2 Legal Requirements

We may disclose data if required by law, court order, or to protect the rights, safety, or property of Promote-x AI, its users, or the public.

3.3 Business Transfer

If Promote-x AI is acquired or merges with another company, your data may be transferred. We will notify affected users and provide an opportunity to delete their data before any transfer.

4 Data Retention

• Account data: retained while your account is active; deleted within 30 days of an account deletion request.
• Social tokens: retained until you disconnect the account or delete your organisation.
• Uploaded content: retained until you delete it or close your account.
• Server logs: retained for up to 90 days.

5 Cookies & Tracking

We use essential cookies only — session cookies for authentication and localStorage for user preferences. We do not use advertising cookies, third-party trackers, or analytics cookies on the dashboard.

6 Security

We take reasonable measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews. No system is 100% secure. If you discover a vulnerability, please report it to security@promotex.ai.

7 Children’s Privacy

Promote-x AI is intended for users aged 18 and over. We do not knowingly collect data from children under 13. If we become aware of such collection, we will delete it immediately.

8 International Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place in compliance with applicable data protection laws, including GDPR and India’s DPDP Act 2023.

9 Changes to This Policy

We may update this policy when we add features or when legal requirements change. Material changes will be communicated by email or in-app notification. The “Last updated” date reflects the most recent revision.

10 Contact Us

We aim to respond to all privacy requests within 30 days.