Privacy policy
Last updated: [date]
Marketing Desk is run by [Company legal name] ("we", "us"). It helps teams plan, write, approve, publish and measure social media posts. This page explains what we collect, why, who helps us run the service, and how to delete your data. Questions: [contact email].
What we collect
- Account details: your name, email address and a scrambled (hashed) version of your password. We never store the password itself.
- Project details: project names, team members and their roles, invites, settings and the posts you write, approve or schedule.
- Your website's content: when you add a website, we read its public pages (text, headings, links) to learn about your business and suggest posts.
- Social channel access: when you connect LinkedIn, Facebook or Instagram, we store the access tokens those services give us. They're encrypted before they're saved and are only used to post and read numbers for the channels you connected.
- Post numbers: views, likes, comments, shares and similar counts for posts published through Marketing Desk.
- Tracked-link clicks: when someone clicks a post's tracked link, we record the time, the referring site and whether it looks like a bot. If your website uses our tracking script, we also record signups or other goals it reports. We don't use these to build profiles of individual people.
- Technical data: a login cookie that keeps you signed in, and server logs (such as IP addresses) used for security, like limiting repeated wrong passwords.
Why we use it
- To run the service: sign you in, draft and publish your posts, and show how they perform.
- To send emails you need: invites, password resets and posts waiting for approval.
- To keep the service secure and fix problems.
We don't sell your data, and we don't use it for advertising.
Who helps us run it
We share data only with the services needed to run Marketing Desk:
- Anthropic (Claude AI): writes and reviews drafts and analyzes your website. It receives your website content, brand details and post text.
- [Email provider]: delivers our emails. It receives the recipient's address and the email text.
- Meta (Facebook, Instagram) and LinkedIn: receive the posts you publish through their APIs and send back the post numbers. Their own privacy policies apply to what you post there.
- [Hosting provider]: runs our servers and database.
How long we keep it
We keep your data while your account or project exists. When you delete a project or your account, we delete the related data from our database right away, and from backups within [30] days. Server logs are kept for up to [30] days.
Deleting your data
You can delete a project or your whole account in the app. See how to delete your data for the steps, or email [contact email].
Your rights
Depending on where you live, you may have the right to see, correct, export or delete your personal data. Email [contact email] and we'll respond within [30] days.
Changes
If we change this policy in a way that matters, we'll tell account owners by email before it takes effect.