Privacy Policy

2.1 Information You Provide Directly

When you register for and use our Service, you provide us with the following information:

• Account Information: Name, email address, password, phone number, business name, and company information
• Profile Information: Profile picture, bio, time zone, language preferences, and other profile customizations
• Payment Information: Billing address, payment method details (processed securely through third-party payment processors)
• Content Data: Posts, images, videos, captions, scheduled content, and any other content you create or upload through our Service
• Communication Data: Messages, emails, support tickets, and other communications with our team
• Team Collaboration Data: Information about team members you invite, their roles, and collaboration activities

2.2 Information We Collect Automatically

When you access or use our Service, we automatically collect certain information:

• Device Information: IP address, browser type and version, device type, operating system, unique device identifiers
• Usage Information: Pages viewed, features used, time spent on pages, click patterns, navigation paths
• Log Data: Access times, error logs, performance data, API calls, and other diagnostic information
• Location Data: Approximate geographic location based on IP address
• Cookie Data: Information collected through cookies and similar tracking technologies (see Section 11)

2.3 Information from Third-Party Platforms

When you connect social media accounts to our Service, we collect:

• Profile Information: Username, display name, profile picture, bio, and other public profile information
• Account Permissions: Authorization tokens and permissions granted to PeekPosting
• Analytics Data: Engagement metrics, follower counts, post performance, audience demographics (aggregate data only)
• Publishing Data: Information necessary to publish content on your behalf
• Content History: Previously published posts and their performance (when retrieving analytics)

The specific information we collect from third-party platforms depends on your privacy settings and permissions granted through those platforms. We only request the minimum permissions necessary to provide our Service.

2.4 Information from Other Sources

We may receive additional information from:

• Third-Party Services: Analytics providers, marketing partners, security services
• Public Sources: Publicly available information from social media platforms and business directories
• Referral Partners: Information from users who refer you to our Service

3.1 Provide and Maintain the Service

• Create and manage your account
• Process your subscription and payments
• Schedule and publish content to connected social media platforms
• Retrieve and display analytics from connected platforms
• Enable team collaboration features
• Provide AI-powered content suggestions (for applicable plans)

3.2 Communicate with You

• Send transactional emails (account confirmations, password resets, payment receipts)
• Provide customer support and respond to your inquiries
• Send service announcements, updates, and security alerts
• Request feedback and conduct surveys (with your consent)
• Send marketing communications (with your consent, where required)

3.3 Improve and Optimize the Service

• Analyze usage patterns and trends to improve features
• Monitor and analyze the effectiveness of our Service
• Develop new features and functionality
• Conduct research and development
• Test and optimize the user experience
• Train and improve AI models for content suggestions

3.4 Ensure Security and Prevent Fraud

• Detect, prevent, and address technical issues
• Protect against fraud, abuse, and unauthorized access
• Monitor for security threats and suspicious activity
• Enforce our Terms and Conditions and other policies
• Comply with legal obligations and protect legal rights

3.5 Personalize Your Experience

• Customize content and recommendations based on your preferences
• Remember your settings and preferences
• Provide localized content based on your location
• Tailor AI-generated suggestions to your content style

3.6 Comply with Legal Obligations

• Comply with applicable laws, regulations, and legal processes
• Respond to lawful requests from public authorities
• Maintain records for tax and accounting purposes
• Protect the rights, property, and safety of PeekPosting, our users, and the public

4.1 Contract Performance

We process your personal data to perform our contract with you (our Terms and Conditions). This includes:

• Creating and managing your account
• Providing the core Service features
• Processing payments
• Publishing content to social media platforms
• Providing customer support

4.2 Legitimate Interests

We process your personal data based on our legitimate interests, provided these interests are not overridden by your rights and freedoms. Our legitimate interests include:

• Improving and optimizing the Service
• Ensuring the security and integrity of the Service
• Preventing fraud and abuse
• Analyzing usage patterns and conducting research
• Marketing our services to existing customers
• Enforcing our legal rights

4.3 Consent

We process certain personal data based on your explicit consent, including:

• Marketing communications (where consent is required)
• Non-essential cookies and tracking technologies
• Connecting social media accounts and granting platform permissions
• Sharing data with specific third-party services you authorize

You have the right to withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before withdrawal.

4.4 Legal Obligation

We process your personal data to comply with legal obligations, such as:

• Maintaining records for tax and accounting purposes
• Responding to lawful requests from authorities
• Complying with court orders and legal processes
• Meeting regulatory requirements

5.1 Service Providers

We share your information with third-party service providers who perform services on our behalf, including:

• Cloud Hosting Providers: For data storage and server infrastructure
• Payment Processors: To process subscription payments securely
• Email Service Providers: To send transactional and marketing emails
• Analytics Providers: To analyze usage and improve the Service
• Customer Support Tools: To provide customer service
• Security Services: To protect against fraud and security threats

These service providers are contractually obligated to protect your information and only use it for the specific purposes we authorize.

5.2 Social Media Platforms

When you use our Service to publish content to social media platforms, we share the necessary content and account information with those platforms according to their APIs and terms of service. This includes platforms such as Facebook, Instagram, Twitter/X, LinkedIn, TikTok, YouTube, and others you choose to connect.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of the transaction. We will notify you via email and/or prominent notice on our website of any such change in ownership or control of your personal information.

5.4 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, warrants)
• Requests from government or regulatory authorities
• Legal claims or disputes
• Emergencies involving danger of death or serious physical injury

5.5 Protection of Rights

We may disclose your information when we believe it is necessary to:

• Enforce our Terms and Conditions or other policies
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users or the public
• Detect, prevent, or address fraud, security, or technical issues

5.6 With Your Consent

We may share your information with other third parties when you explicitly consent to such sharing, such as:

• Authorizing integrations with additional third-party services
• Participating in surveys or research studies
• Sharing content publicly through our platform

5.7 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you. This may include usage statistics, industry trends, and benchmarking data.

6.1 Platform Permissions

The permissions we request from social media platforms typically include:

• Read Access: To retrieve your profile information and analytics data
• Write Access: To publish content on your behalf at scheduled times
• Analytics Access: To retrieve engagement metrics and performance data

We only request the minimum permissions necessary to provide our Service. You can review and modify these permissions through your connected platform's settings.

6.2 Data Retrieved from Platforms

We may retrieve the following types of information from connected platforms:

• Account profile information (username, display name, profile picture)
• Post performance metrics (likes, comments, shares, views)
• Audience demographics and insights (aggregate data)
• Follower and following counts
• Previously published content (for analytics purposes)

6.3 Platform Data Usage

We use data from social media platforms exclusively to:

• Display analytics and insights within your PeekPosting dashboard
• Enable content publishing functionality
• Provide AI-powered content recommendations
• Help you optimize your social media strategy

We do not share your social media data with other third parties except as necessary to provide the Service or as described in Section 5.

6.4 Revoking Platform Access

You can revoke PeekPosting's access to your social media accounts at any time through:

• Your PeekPosting account settings (disconnect accounts)
• The respective social media platform's app permissions settings

Revoking access will prevent us from publishing content or retrieving analytics from that platform, but will not delete data already collected and stored in accordance with our retention policies.

7.1 Active Account Data

While your account is active, we retain:

• Account Information: For the duration of your account
• Content Data: As long as you maintain it in your account
• Analytics Data: Up to 24 months of historical data
• Usage Logs: Up to 12 months

7.2 Account Deletion

When you delete your account or your account is terminated:

• Grace Period: Your data is retained for 90 days to allow for account reactivation
• Permanent Deletion: After 90 days, your personal data is permanently deleted from our active systems
• Backup Systems: Data may persist in backup systems for up to an additional 90 days before final deletion

7.3 Legal and Regulatory Retention

Certain data must be retained longer to comply with legal obligations:

• Financial Records: Payment and billing information retained for 7 years for tax purposes
• Legal Matters: Information relevant to legal disputes retained until resolution
• Fraud Prevention: Data related to fraud or security incidents may be retained longer

7.4 Anonymized Data

We may retain anonymized or aggregated data indefinitely for analytical and research purposes. This data cannot be used to identify you personally.

8.1 Technical Safeguards

Our security measures include:

• Encryption: Data in transit is encrypted using TLS 1.2 or higher; data at rest is encrypted using industry-standard encryption
• Access Controls: Role-based access controls limit employee access to personal data
• Authentication: Secure password requirements and optional two-factor authentication
• Network Security: Firewalls, intrusion detection, and DDoS protection
• Monitoring: Continuous monitoring for security threats and anomalies
• Regular Audits: Periodic security assessments and penetration testing

8.2 Organizational Safeguards

• Employee Training: Regular security and privacy training for all staff
• Confidentiality Agreements: All employees sign confidentiality agreements
• Limited Access: Access to personal data is granted on a need-to-know basis
• Incident Response: Documented procedures for responding to data breaches
• Vendor Management: Security requirements for all third-party service providers

8.3 Your Responsibility

You also play a role in protecting your data:

• Use a strong, unique password for your account
• Enable two-factor authentication when available
• Keep your login credentials confidential
• Log out of your account when using shared devices
• Notify us immediately of any unauthorized access

8.4 Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify you within 72 hours of becoming aware of the breach (as required by GDPR)
• Provide information about the nature and scope of the breach
• Describe the likely consequences and the measures being taken
• Notify relevant supervisory authorities as required by law

9.1 Right of Access

You have the right to request access to your personal data. This includes the right to obtain:

• Confirmation of whether we process your personal data
• A copy of your personal data
• Information about how we use your personal data

You can access most of your personal data directly through your account settings. For additional information, contact us at peekposting@gmail.com.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. You can update most information directly in your account settings, or contact us for assistance.

9.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data in certain circumstances:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Deletion is required to comply with a legal obligation

This right is not absolute and we may retain certain data for legal or legitimate business reasons.

9.4 Right to Restriction of Processing

You have the right to request restriction of processing in certain situations:

• You contest the accuracy of the personal data
• Processing is unlawful but you oppose deletion
• We no longer need the data but you need it for legal claims
• You have objected to processing pending verification of legitimate grounds

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller. This applies to data:

• You provided to us
• Processed based on consent or contract
• Processed by automated means

You can export your content and data through your account settings or by contacting us.

9.6 Right to Object

You have the right to object to:

• Processing based on legitimate interests: We must stop processing unless we demonstrate compelling legitimate grounds
• Direct marketing: We will stop processing your data for marketing purposes
• Profiling: Related to direct marketing

9.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time. This will not affect the lawfulness of processing before withdrawal. You can withdraw consent by:

• Updating your account settings
• Clicking "unsubscribe" in marketing emails
• Disconnecting social media accounts
• Contacting us directly

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of alleged infringement. For users in the EU, you can find your data protection authority at: https://edpb.europa.eu/about-edpb/board/members_en

9.9 Exercising Your Rights

To exercise any of these rights, please contact us at:

• Email: peekposting@gmail.com
• Data Protection Officer: peekposting@gmail.com

We will respond to your request within one month (extendable by two months for complex requests). We may request additional information to verify your identity before processing your request.

10.1 Data Transfer Mechanisms

When we transfer personal data from the EEA to countries outside the EEA, we ensure an adequate level of protection through:

• Adequacy Decisions: Transfers to countries recognized by the EU Commission as providing adequate protection
• Standard Contractual Clauses (SCCs): Using EU-approved contractual terms with data recipients
• Binding Corporate Rules: For transfers within our corporate group (if applicable)
• Specific Derogations: Based on your explicit consent or other lawful grounds

10.2 Data Processing Locations

Your data may be processed in the following regions:

• European Union (primary data center location)
• United Kingdom
• United States (cloud service providers with EU-approved safeguards)

10.3 Safeguards for International Transfers

We implement additional safeguards for international data transfers:

• Encryption of data in transit and at rest
• Regular security assessments of service providers
• Contractual obligations for data protection
• Compliance monitoring and audits

10.4 Your Rights Regarding International Transfers

You have the right to obtain information about the safeguards we use for international data transfers and to obtain a copy of such safeguards. Please contact us at peekposting@gmail.com for more information.

11.1 Types of Cookies We Use

Strictly Necessary Cookies:

• Essential for the Service to function properly
• Enable core functionality like authentication and security
• Cannot be disabled without affecting Service functionality

Functional Cookies:

• Remember your preferences and settings
• Enhance functionality and personalization
• Store language preferences and interface customizations

Performance/Analytics Cookies:

• Help us understand how visitors use the Service
• Collect anonymous usage statistics
• Improve Service performance and user experience
• Require your consent (where legally required)

Marketing/Targeting Cookies:

• Track your activity across websites
• Build a profile of your interests
• Deliver relevant advertisements
• Require your explicit consent

11.2 Third-Party Cookies

We may use third-party services that set cookies on your device:

• Google Analytics: For usage analytics and reporting
• Payment Processors: For secure payment processing
• Customer Support Tools: For chat and support functionality

These third parties have their own privacy policies governing their use of cookies.

11.3 Managing Cookies

You can control and manage cookies in several ways:

• Cookie Settings: Use our cookie consent banner to manage your preferences
• Browser Settings: Most browsers allow you to refuse or accept cookies
• Browser Extensions: Use privacy-focused browser extensions
• Opt-Out Tools: Use industry opt-out tools for advertising cookies

Please note that disabling certain cookies may affect the functionality of the Service.

11.4 Other Tracking Technologies

In addition to cookies, we may use:

• Web Beacons: Small graphic images to track page views and email opens
• Local Storage: To store data locally in your browser
• Device Fingerprinting: To identify devices for security purposes
• Session Replay: To understand user interactions (with consent)

11.5 Do Not Track

We respect Do Not Track (DNT) signals. When a DNT signal is detected, we will not set non-essential tracking cookies without your consent.

14.1 Contact Information

14.2 Response Time

We aim to respond to all privacy-related inquiries within:

• General Inquiries: 5 business days
• Data Rights Requests: 30 days (as required by GDPR)
• Urgent Security Matters: 24-48 hours

14.3 Filing a Complaint

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with:

• Your Local Supervisory Authority: For EEA residents, contact your national data protection authority
• Lead Supervisory Authority: [To be specified based on company location]
• European Data Protection Board: https://edpb.europa.eu

We would appreciate the opportunity to address your concerns before you approach a supervisory authority, so please contact us first.

14.4 Additional Resources

For more information about data protection and your rights:

• Terms and Conditions: Here