Privacy Policy

• Account info: email address, encrypted password
• Profile info: business name, phone number (optional), business description
• Connected accounts: when you connect Facebook, Instagram, or TikTok, we store encrypted access tokens (AES-256) to publish content on your behalf
• Usage data: campaigns created, posts generated, login activity

• Service delivery: generate ad strategies, create content, publish to your connected social media accounts
• Communication: account verification, service updates, promotional offers (you can opt out)
• Improvement: analyze usage patterns to improve the platform

We do not sell your personal information. We share data only with:

• Meta (Facebook/Instagram) and TikTok, solely to publish content you authorize
• Service providers that help us operate (hosting, email delivery, AI content generation) under confidentiality agreements

All social media access tokens are encrypted using AES-256-GCM. Passwords are hashed with bcrypt. We use HTTPS for all data in transit.

You can request access to, correction of, or deletion of your personal data by contacting us at the email below. You can disconnect any social media account at any time from your dashboard.

We retain your account data while your account is active. Generated videos and images are automatically deleted after 7 days. You can request full account deletion at any time.

SpotFlow is not directed to individuals under 18. We do not knowingly collect data from minors.

We may update this policy. We will notify users of material changes via email or in-app notice.

For privacy questions or data requests: contact@spotflow.pro