Privacy Policy

Introduction

Esflow Social ("Company", "we", "us", or "our") operates the Esflow Social website and service. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our service and the choices you have associated with that data.

Information We Collect

Personal Information

When you register for an account or use our service, we may collect:

• Email address
• Name
• Phone number (optional)
• Company name (optional)
• Payment information (processed securely)

Usage Data

We automatically collect certain information about your device and how you interact with our service, including:

• IP address
• Browser type and version
• Pages visited and time spent
• Device type and identifiers
• Referring/exit pages

Content Data (Privacy-First Processing)

When you upload documents or provide URLs for content extraction, we do not store the actual content:

• Files and URLs are processed in-memory only
• Content is not persisted to our databases
• After processing completes, all temporary data is discarded
• Only the generated post ideas and metadata are stored (at your request)

How We Use AI

Esflow Social uses Google Gemini API to analyze your documents and URLs. Here's what you need to know:

• Enterprise-Grade Processing: If you use our paid tier, your data is processed through Google's enterprise-grade infrastructure
• No Training Data: Your data is not used to train or improve the underlying Gemini AI models
• Inline Processing: Document content is discarded immediately after your posts are generated
• No Long-Term Storage: AI processing happens in real-time; no copies of your original content are kept

Social Media Data & Permissions

When you connect your social media accounts (Facebook, Instagram, TikTok, LinkedIn, X/Twitter), here's what we do:

• Minimal Permissions: We only request the minimum permissions required to deliver our service (e.g., pages_manage_posts)
• No Audience Data Storage: We do not store your social media audience data, analytics, or demographics
• No Private Messages: We cannot and do not access, store, or view your private messages
• No Credentials Storage: We never store your login credentials for any social platform
• Secure Authentication: Authentication is handled securely via Clerk.com and official OAuth 2.0 flows

How We Use Your Data

We use the information we collect to:

• Provide and maintain our service
• Process your requests and send related information
• Send technical notices, updates, and security alerts
• Respond to your comments, questions, and requests
• Monitor and improve the service and detect fraud
• Send marketing communications (with your consent)
• Comply with legal obligations

Data Security

We take the security of your personal data seriously and implement comprehensive security measures:

• All data in transit is encrypted using HTTPS/TLS
• Passwords are hashed using industry-standard algorithms
• Payment information is processed through PCI-DSS compliant providers
• Access to personal data is restricted to authorized personnel only
• We regularly audit and update our security practices
• No method of transmission over the internet is 100% secure; we strive to use reasonable means

Data Retention

We retain personal data only as long as necessary for the purposes outlined in this Privacy Policy:

• Account information: Duration of account plus 24 months after closure
• Customer support data: Up to 24 months from ticket closure
• Usage data: Up to 24 months from collection
• Content data: Only as long as you retain generated posts
• Backups: May retain residual copies for limited periods for security purposes

How We Share Information

We may share your information with:

• Service Providers: Third-party vendors who assist us (payment processors, analytics providers, etc.)
• API Partners: Google (for AI processing), Clerk (for authentication), and social media platforms (to post content)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In the event of merger, acquisition, or sale of assets

We do not sell, trade, or otherwise transfer your personally identifiable information to third parties for marketing purposes.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Necessary Cookies: Required for authentication and service functionality (always enabled)
• Analytics Cookies: Help us understand how users interact with our service
• Marketing Cookies: Used to show you relevant content and ads

You can control cookie preferences at any time using our Your Privacy Choices link. You can also manage cookies through your browser settings.

Your Privacy Rights

You have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request that we correct inaccurate data
• Right to Deletion: Request that we delete your personal data (subject to legal obligations)
• Right to Opt-Out: Unsubscribe from marketing communications at any time
• Right to Data Portability: Receive your data in a structured, portable format

To exercise these rights, please contact us at privacy@esflow.social.

Third-Party Links

Our service may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites before providing personal information.

Children's Privacy

Our service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will promptly delete it.

International Data Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using Esflow Social, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, and other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the service following the posting of revised Privacy Policy means that you accept and agree to the changes.