Privacy Policy

This Privacy Policy explains how Ayvo("we", "us") collects, uses and protects personal information when you use the social media scheduling service available at https://social.ayvo.ai(the "Service"). By using the Service you agree to the practices described here.

• Account information — the name, email address and password hash you provide when you register, plus any team or organization details you add.
• Content you create — the posts, captions, comments, images and videos you upload or schedule through the Service, together with their scheduling metadata.
• Connected social account data — when you connect a social media or messaging channel, we receive the access and refresh tokens issued by that platform, together with the public profile information the platform returns (such as the account id, display name, username and avatar) and the analytics the platform exposes for your own account.
• Usage and technical data — log data such as IP address, browser type, pages visited and timestamps, used to operate and secure the Service.
• Billing data — if the instance you use offers paid plans, payments are handled by a third-party payment processor. We do not store your full card details.

When you authorize a third-party platform (for example TikTok, X, LinkedIn, Facebook, Instagram, YouTube, Threads, Mastodon, Discord, Slack, Telegram or any other supported channel), you grant the Service permission to act on your behalf within the scopes you approved at the moment of authorization.

• We use platform access tokens only to publish the content you scheduled, to read back the performance of the posts you published, and to display the connected account in your dashboard.
• We do not sell, rent or share platform data with advertisers, data brokers or any third party for their own purposes.
• We do not use platform data to train machine learning models, and we do not access content that does not belong to the account you connected.
• Access tokens are stored encrypted and are refreshed automatically for as long as the channel stays connected.
• Disconnecting a channel inside the Service deletes the stored tokens for that channel. You can additionally revoke access at any time from the privacy or security settings of the platform itself.

• To provide the Service: authenticating you, storing your drafts and publishing scheduled posts at the requested time.
• To display analytics and reporting about the channels you connected.
• To communicate with you about your account, security notices and service changes.
• To detect, prevent and investigate abuse, fraud and violations of our Terms of Service.
• To comply with legal obligations.

Where the GDPR or a comparable law applies, we process personal data on the basis of the performance of our contract with you (providing the Service), our legitimate interests (securing and improving the Service), your consent (where you explicitly connect a third-party account), and compliance with legal obligations.

We share personal data only in the following situations: with the social media platforms you explicitly connected, in order to publish your content; with infrastructure and processing providers acting on our instructions (hosting, storage, email delivery, error monitoring and payment processing); when required by law, regulation or valid legal process; and with an acquiring entity in the event of a merger or acquisition, subject to this policy.

We keep your account data for as long as your account is active. Posts and media are retained until you delete them or delete your account. When you delete your account, personal data is removed within 30 days, except where we are required to retain records for legal, accounting or fraud-prevention purposes.

We apply technical and organizational measures appropriate to the risk, including encryption in transit, encryption of third-party access tokens at rest, access controls and audit logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent at any time. You can exercise most of these rights directly in the application, or by contacting us at social@ayvo.ai. You also have the right to complain to your local data protection authority.

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

The Service is not directed at children under 13, and where local law sets a higher digital-consent age, under that age. We do not knowingly collect personal data from children. If you believe a child provided us with personal data, contact us and we will delete it.

We use cookies that are strictly necessary to keep you signed in and to remember your interface preferences, and, where enabled by the operator of this instance, privacy-friendly analytics cookies that measure aggregate usage. You can block cookies in your browser, but the Service may stop working correctly.

We may update this policy from time to time. Material changes will be announced in the application or by email, and the "last updated" date above will change.

For any privacy question or request, write to social@ayvo.ai.