Privacy policy

• People who use ESMM: name, email address, role in each business, time zone and notification settings. Passwords are stored only as a one-way hash (Argon2id), never as themselves, and an authenticator app's secret is stored encrypted. For each sign-in, ESMM keeps when it happened, the IP address and the browser or device.
• Connected accounts: for each Facebook Page, Instagram account, Google Business Profile, TikTok account or WordPress site a business connects, its name, ID and profile picture, and the access tokens (for WordPress, an application password) that let ESMM work with it. Tokens are encrypted (AES-256) and decrypted only on ESMM's servers, to talk to the platforms. The web and iPhone apps never receive them.
• Posts and media: posts with their captions, schedules and approvals; the photos and videos in each business's library, with the tags and descriptions made for them; and the business's brand voice, goals and posting plan.
• Stats from the platforms: followers, reach, views, engagement and similar numbers for each account and post; a Google Business Profile's star rating, number of reviews and numbers such as profile views, calls and website clicks (not the reviews themselves); and the link, date and start of the caption of posts a business made outside ESMM, so its calendar and stats are complete.
• Staff uploads: photos and videos sent through a business's upload link, with the sender's name, their note, and the consent text they agreed to and when. The upload page also keeps a random ID for the device, to limit how much one device can send.
• Notifications: the push token of each iPhone that allows ESMM's notifications, and a business's Slack webhook address, encrypted, if it adds Slack.
• Activity log: each change made in ESMM, who made it, when, and the IP address it came from.

The copies of photos and videos that ESMM makes for publishing leave out the location and camera details stored in the files. The original files are kept as they were uploaded.

ESMM sets two cookies: one keeps you signed in, and one remembers which business you opened last. Your browser also keeps a few display settings, such as Reduce transparency. ESMM has no advertising or analytics cookies and no third-party trackers.

• To sign people in and keep their accounts safe.
• To publish the posts a business approves, when it chooses, and check that they went out.
• To show each business its stats and the best times to post, and to send reminders and alerts by email, in the apps, as iPhone notifications and in Slack.
• To suggest tags, captions and posts with Claude, as the next section explains.

Nothing else. We don't sell or rent data, we don't use it for advertising, and we don't share it with data brokers or ad networks.

ESMM uses Anthropic's Claude API to suggest tags, captions and posts. It sends only what each feature needs:

• Photos in a business's library, and three frames from each video, so Claude can describe them and suggest tags.
• To write captions and draft posts: the post idea someone typed, the descriptions and tags of the photos, the business's brand voice and the channels the posts are for.
• For the weekly summary: the week's posts with their numbers, the business's goals and its open alerts.

Claude never receives passwords or platform tokens. Under Anthropic's Commercial Terms of Service, Anthropic doesn't train its models on what ESMM sends. Anthropic's Privacy Policy explains how it handles that data.

ESMM runs on Amazon Web Services (AWS) in the United States. If you use ESMM from another country, your data is transferred to the United States.

Photos, videos and backups are kept in private, encrypted storage, and links to them stop working after an hour. Tokens and other secrets are encrypted with keys kept in AWS's key management service. Every change is recorded in the activity log.

• Amazon Web Services hosts ESMM, stores its files and sends its email: invitations, password resets, alerts and weekly summaries.
• Anthropic receives what Claude needs, as described above.
• The platforms a business connects receive the posts it publishes and ESMM's requests for its stats.
• Apple delivers iPhone notifications.
• Slack receives a business's alerts, if the business adds Slack.
• The people each business invites see its content, as their roles allow.

We also disclose data when the law requires it. Nobody else receives it.

• A post someone archives can be restored for 30 days. Then it's deleted for good.
• Disconnecting an account deletes the tokens ESMM kept for it straight away. Facebook Pages and Instagram accounts use the organization's Meta token instead, which stays until it's removed in Meta's settings or we delete it on request (see Data deletion).
• Records of sign-ins, with their IP addresses, are deleted 30 days after they end.
• Server logs are kept for 30 days.
• The database is backed up every night, encrypted. Backups are kept for 30 days, and one a month is kept for a year, so deleted data leaves the backups within a year.
• Everything else is kept while the business uses ESMM, until the business asks us to delete it.

• Anyone can change their name, time zone, password and notifications in ESMM.
• A business's owners can remove people, disconnect accounts and turn off upload links at any time.
• To get a copy of your data, correct it or have it deleted, write to [privacy email address]. We answer within 30 days.

ESMM is a tool for businesses and isn't meant for children.

ESMM asks Google for one permission: to manage a business's Business Profile. With it, ESMM reads the Profile's locations, posts, star rating, number of reviews and performance numbers, and publishes the posts the business approves. ESMM uses this data only for those features. It doesn't sell it, use it for advertising or use it to train AI models, and it shares it only as this policy describes.

Endless Social Media Manager's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Each platform's own privacy policy covers what it does with your data:

• Facebook and Instagram: Meta Privacy Policy
• Google Business Profile: Google Privacy Policy
• TikTok: TikTok Privacy Policy
• WordPress: ESMM talks only to the business's own site, with an application password made there. For a site on WordPress.com, Automattic's Privacy Policy applies too.

When this policy changes, we'll update this page and the date at the top.

[operator's legal name] runs ESMM. For questions about privacy or your data, write to [privacy email address]. To have data deleted, see Data deletion.