Privacy policy

What we collect

• Account details: your email address and sign-in information, managed by Amazon Cognito.
• Business content you enter or generate: brands, websites, campaigns, content ideas, drafts, images and schedules.
• Connected Facebook Pages and Instagram professional accounts: the account IDs, names, usernames, profile pictures, categories, the permissions you granted, and access tokens that let us publish for you.
• Publishing records: which posts were published, when, and the post IDs returned by Meta.
• Photos you choose to import from Google Drive (see below).
• Billing details: your plan and subscription status. Card details are entered on Stripe's checkout page and are never sent to or stored by us.
• Usage and audit records: actions taken in your organization and AI usage costs.

How we use it

• To run the service: generate content, keep your calendar, and publish posts you approved to the accounts you connected.
• To keep it secure: authentication, access control between organizations, and audit logs.
• We do not sell your data, use it for advertising, or publish anything you have not approved and scheduled.

Facebook and Instagram data

We access only the Pages and Instagram accounts you select when connecting, and only to list them, show their status, and publish approved posts. Access tokens are encrypted with AWS Key Management Service before they are stored and are never shown in the app. Disconnecting an account deletes its stored token immediately. You can also remove our access at any time in your Facebook settings under Business Integrations.

Google Drive photos

If you use "Import from Google Drive", we ask Google only for the drive.file permission, which lets us see the specific files you pick in Google's file picker and nothing else in your Drive. Your browser downloads the photos you picked and uploads them to your media library, where they are stored like any other image you upload. We do not store your Google access token, do not read other files, and do not keep any ongoing access to your Google account. You can revoke access at any time at myaccount.google.com/permissions.

WhaatWhy AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Imported photos are used only to create and publish your own posts; they are not used for advertising, sold, or used to train AI models.

Service providers

We use Amazon Web Services to host the app, store data and send email, OpenAI to generate text and images from the instructions you give, Meta's APIs to publish to your connected accounts, Google's APIs for Drive photos you pick, and Stripe to process payments. Each receives only what it needs for that task.

Retention and deletion

We keep your data while your organization uses the service. See how to delete your data, or email info@dashingproperties.com.

Contact

Questions about this policy: info@dashingproperties.com. See also our Terms of Service.