Privacy Policy

1. Scope

This Policy applies to personal information we process about users of the Service, including agency account holders, personal-brand users, and client portal users invited by a workspace administrator.

This Policy does not apply to third-party websites, social networks, or services you connect to or link from the Service. Those services have their own privacy policies.

2. Information we collect

We collect information in the following categories:

• Account & profile: name, email address, password (stored in hashed form), workspace name, role, preferences (timezone, date format, landing page), and authentication session data
• Workspace & client data: brand names, package details, deliverables, voice notes, pillars, posts, captions, schedules, tasks, invoices, billing notes, and invite records you or your team enter
• Content you upload: images, videos, filenames, and related metadata stored in our cloud storage
• Usage & device: log data, IP address, browser type, pages viewed, actions taken in the app, and diagnostic information used to secure and improve the Service
• Communications: messages you send us (support requests, feedback)
• Subscription & payment data: if you purchase a paid plan, payment card details and billing address are collected and processed by Stripe, Inc. We do not store your full payment card number on our systems

3. How we collect information

Directly from you when you register, complete forms, upload assets, create posts, or contact support.

From workspace administrators who invite you to a client portal and assign your role.

Automatically through cookies, session tokens, and similar technologies necessary to authenticate you and operate the Service.

From service providers that host infrastructure, authentication, storage, email, analytics, or payment processing on our behalf.

4. How we use information

We use personal information to:

• Provide, maintain, and secure the Service
• Authenticate users and enforce role-based access (agency vs. client portal)
• Store and display your content, calendars, assets, approvals, and billing records
• Operate optional automated features (for example, suggesting content pillars or captions)
• Process subscription payments, renewals, cancellations, and billing-related communications through Stripe
• Send transactional messages (account creation, invites, security notices, billing receipts)
• Respond to support requests and communicate about the Service
• Analyze usage to fix bugs, prevent abuse, and improve features
• Comply with law and protect our rights, users, and the public

5. Legal bases (where applicable)

Where required, we rely on: performance of a contract (providing the Service you signed up for); legitimate interests (security, improvement, fraud prevention); consent (where we ask for it explicitly, such as certain optional communications); and legal obligation.

6. When we share information

We do not sell your personal information. We share information only as described below:

• Within your workspace: agency users, and client portal users invited to a brand, can see information according to role and visibility settings configured in the Service
• Payment processing: Stripe, Inc. receives payment card and billing information you provide at checkout to process subscriptions on our behalf. Stripe’s privacy policy is available at https://stripe.com/privacy
• Other service providers: hosting, database, authentication, storage, email delivery, and analytics vendors who process data under contractual obligations
• Legal & safety: when required by law, court order, or to protect rights, safety, and security
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy or notice to you

7. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

When a workspace or client is archived or deleted, we delete or anonymize data within a reasonable period unless retention is required by law or legitimate business needs (for example, billing records).

8. Security

We implement administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, access controls, and secure cloud infrastructure.

No method of transmission or storage is completely secure. You are responsible for using a strong password and safeguarding your credentials.

9. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information we hold about you, to opt out of certain processing, or to appeal a denial of a request.

Residents of certain U.S. states (including California, Colorado, Connecticut, Virginia, and others) may have additional rights under state privacy laws. New York residents are protected under New York law, including requirements applicable to businesses that maintain private information.

To exercise your rights, email privacy@entiresocials.com. We may verify your identity before responding. You may designate an authorized agent where permitted by law.

We will not discriminate against you for exercising privacy rights.

10. Children’s privacy

The Service is not directed to children under 13 (or 16 where applicable), and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact privacy@entiresocials.com and we will delete it.

11. U.S. operations & international users

We are based in the United States. If you access the Service from outside the U.S., you understand that information may be processed and stored in the U.S. and other countries where our providers operate, which may have different data protection laws than your country.

12. Cookies & similar technologies

We use essential cookies and similar technologies to keep you signed in, remember preferences, and protect the Service. We do not use non-essential advertising cookies on the core application without notice.

You can control cookies through browser settings; disabling essential cookies may prevent you from using the Service.

13. Third-party services

The Service relies on third-party infrastructure (for example, cloud hosting, authentication, and file storage). Those providers process data on our instructions and are contractually required to protect it.

For subscriptions, Stripe, Inc. is our payment processor. Stripe may collect device and fraud-prevention data in addition to payment details. We receive from Stripe limited information needed to manage your account, such as the last four digits of your card, card brand, expiration date, billing email, subscription status, invoice history, and payment success or failure notices. We do not receive or store your complete card number or CVC.

Links to social platforms or external sites are not controlled by us.

14. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the revised Policy on this page and update the “Last updated” date. Material changes may be communicated by email or in-product notice where appropriate.

15. Contact us

Privacy inquiries: privacy@entiresocials.com

General contact: legal@entiresocials.com

Mailing address: New York, NY, United States

Effective date: June 9, 2025