Privacy Policy
Last updated: May 6, 2026
1. Information We Collect
We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support.
Personal Information
- Name and contact information (email)
- Account credentials managed through our authentication provider (Clerk)
- Business information and content preferences
- Social media platforms you wish to target
- Communication preferences
Usage Information
- Interactions with our AI content planning assistant
- Content plans generated and saved
- Posting streaks and engagement metrics
- Device information and IP address
- Browser type and operating system
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our content planning services
- Generate personalised content strategies for your business
- Send notifications about your content plans and posting streaks
- Personalise AI recommendations based on your industry and preferences
- Communicate with you about our services and updates
- Analyse usage patterns to improve our AI content generation
3. Information Sharing
We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:
- With your explicit consent
- To comply with legal obligations
- To protect our rights and safety
- With service providers who assist in our operations
3a. Connected Social Accounts (Facebook & Instagram)
When you connect a Facebook Page or Instagram Business account to Stratvowe use the official Meta Graph API. The connection is fully optional, scoped to the accounts you explicitly select during the OAuth flow, and you can revoke it at any time from your Facebook account settings or from the "Connected accounts" tab in the Stratvo dashboard.
Permissions we request
- pages_show_list, pages_read_engagement, pages_manage_metadata — let you choose which Facebook Page to connect and read that Page's name + ID for display.
- pages_manage_posts — publishes content you have authored and explicitly scheduled inside Stratvo to your selected Page. We never post on your behalf without an explicit, item-level scheduling action by you.
- instagram_basic, business_management — read the connected IG Business account's username and profile picture so you know which account is connected.
- instagram_content_publish — publishes images and Reels you have authored and scheduled inside Stratvo to your selected IG Business account, only when you trigger a publish or auto-publish toggle.
What we store
- An encrypted Meta access token (AES-128 via Fernet) used only to call the Meta Graph API on your behalf.
- The Facebook Page ID, Instagram Business user ID, account username, and profile picture URL for display.
- Posts you author inside Stratvo together with their scheduled publish time.
- The platform-side post ID we receive after a successful publish, so you can deep-link from the calendar.
What we do not do
- We do not use Meta data to train AI models. Generated content is created from your in-app inputs and your business profile; Meta-derived data is never sent to model providers as training input.
- We do not sell, rent, or share Meta data with advertisers or other third parties.
- We do not read your Facebook friends, messages, private profile, or photos. We only access the Pages and IG Business accounts you explicitly connect.
- We do not post anything you have not authored and scheduled.
How to remove your data
- In-app: Dashboard → Settings → Connected accounts → Disconnect. We immediately revoke the stored token, delete every scheduled post tied to that connection, and remove the connection record.
- On Facebook: Settings & Privacy → Settings → Apps and Websites → remove "Stratvo Publishing". Meta will notify our deauthorize callback and we will mark your connection revoked within seconds.
- Full data-deletion request: visit https://stratvo.ai/data-deletion or email support@stratvo.com from the address on your account.
Retention
Encrypted Meta tokens are retained only while your connection is active. When you disconnect or remove the app, tokens are deleted within 24 hours. Published-post metadata (post IDs, timestamps) is retained for up to 24 months for analytics and deleted on full account deletion.
4. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
5. Your Rights
Under applicable data protection laws, you have the right to:
- Access your personal information
- Correct inaccurate information
- Delete your personal information
- Object to processing of your information
- Data portability
6. Cookies and Tracking
We use cookies and similar tracking technologies to enhance your experience, analyze usage, and provide personalized content. You can control cookie settings through your browser preferences.
7. Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations. You can request deletion of your account and associated data at any time.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
Email: info@stratvo.com
Address: 86 Broad Street, Glasgow, G40 2BA