Privacy Policy

1. Information we collect

Account and workspace data: name, email address, profile image, organization or tenant membership, roles, settings, authentication events, and support communications.

Content and operations data: prompts, uploaded or generated media, captions, schedules, approvals, publication history, usage, billing records, device and security logs, and diagnostic data.

Connected-platform data: only after you authorize a platform, we may receive account identifiers, username or channel name, profile image, granted scopes, access and refresh tokens, token expiry, creator or channel capabilities, post identifiers, publishing status, and permitted analytics. We do not receive your platform password through OAuth.

2. How we use information

We use information to authenticate users; provide creation, storage, collaboration, scheduling, publishing, analytics, and support features; maintain security and audit records; prevent fraud and abuse; comply with law; and improve reliability.

We use connected-platform data only to provide or secure the integration you request. We do not sell personal information or platform data, and we do not use platform data to build advertising profiles.

3. Platform-specific use

TikTok: with your authorization, EMS may read basic creator information and creator posting options, upload or instruct TikTok to retrieve media, publish under your selected privacy and disclosure settings, and query publishing status. Use of TikTok data is limited to the scopes you approve and TikTok's developer terms.

Google/YouTube: EMS uses Google user data to identify an authorized YouTube channel, upload videos at your direction, set title, description, privacy and related metadata, and query the resulting video or channel as permitted. EMS does not use Google user data for advertising. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Meta/Instagram: for eligible professional accounts, EMS may identify the Instagram account connected to a Facebook Page, create media containers, publish Reels or other supported media at your direction, and query publishing status or permitted insights. Use is subject to Meta Platform Terms and the permissions you approve.

4. Legal bases and your choices

Where applicable, we process information to perform our contract with you, based on your consent for optional platform connections, for legitimate interests such as security and service reliability, and to comply with legal obligations.

You can choose not to connect a platform. You may revoke a connection in EMS and in TikTok, Google, or Meta account settings. You may also request access, correction, export, restriction, objection, or deletion where applicable by contacting us.

5. Sharing

We share information only with workspace members you authorize; connected platforms when carrying out your request; infrastructure and service providers that process data for us under appropriate obligations; professional advisers; authorities when legally required; and a successor in a merger, financing, reorganization, or sale subject to this Policy.

Publishing necessarily sends your media, caption, settings, and account authorization to the selected platform. Public posts and profile information are then governed by that platform's privacy practices.

6. Storage, security, and transfers

We use access controls, tenant isolation, encryption in transit, and encryption of stored OAuth tokens. Platform client secrets and tokens are kept server-side and are not returned to the browser after connection.

Information may be processed in countries other than yours, including through Cloudflare, Google Cloud, OpenAI, and connected social platforms, with safeguards required by applicable law. No system is completely secure; please contact us if you suspect misuse.

7. Retention and deletion

We keep account, content, and audit data only as long as reasonably needed for the purposes described, contractual and security needs, dispute resolution, and legal obligations. OAuth authorization state expires within minutes. Platform tokens are deleted or made unusable when you disconnect, subject to short backup or legal-retention periods.

To delete a connected account's data, disconnect it in EMS and contact [email protected] with the account email and platform. We will verify the request and delete or de-identify applicable personal and platform data unless retention is legally required. You should also revoke EMS in the platform's own security settings to invalidate platform-side access immediately.

8. Children

EMS is a business and creator workstation not directed to children. You must be at least 18 to use the service. We do not knowingly collect personal information from children.

9. Cookies and logs

We use strictly necessary local storage, cookies, or similar technologies for authentication, security, language, and user preferences. Public Terms and Privacy pages do not require sign-in and do not include behavioral-advertising trackers.

10. Changes and contact

We may update this Policy as the service or law changes. Material changes will be identified by a new effective date and, where appropriate, an in-product notice.

For privacy questions, rights requests, or deletion requests, contact [email protected]. Please do not email passwords, access tokens, or sensitive media.