Privacy Policy

This policy applies to everyone who uses the Service — our team, our clients, and, as we grow, other agencies who license the Service and their clients. Where we handle information on behalf of a customer (for example, content and connected-account data an agency manages for its own clients), we act as that customer's service provider and process the data only to provide the Service.

• Account information — your name, email, business name, password, and role.
• Content you upload — photos, videos, captions, and related files you add for review, storage, or publishing.
• Connected social accounts — when you connect an account (Instagram, Facebook, TikTok, Google, YouTube, and similar), the platform gives us an access token and basic profile details (such as the account name and ID) so we can publish on your behalf. We request only the permissions needed to provide the Service.
• Usage and device data — log data, IP address, browser and device type, and actions taken in the Service, used to keep it secure and working.
• Cookies — we use only essential cookies needed to keep you signed in and keep the Service secure. We do not use advertising or tracking cookies.

• To provide, operate, and secure the Service.
• To publish, schedule, and manage content to the social accounts you connect, at your direction.
• To communicate with you about your account, support, and updates.
• To improve the Service and prevent abuse.

We do not sell your personal information, and we do not use content from your connected accounts for advertising or for any purpose other than providing the Service to you.

• Social media platforms — when you publish, we send your content and the required tokens to the platform you chose (for example, Meta, TikTok, or Google). Their handling of that data is governed by their own policies.
• Service providers — we use trusted vendors to run the Service, currently including Vercel (hosting), Supabase (database), Cloudflare (media storage and video), and Apify (data processing), plus others we add over time. They may access data only to perform services for us.
• Legal reasons — to comply with law, enforce our terms, or protect rights and safety.
• Business transfers — if Ra Media is involved in a merger or acquisition, data may transfer as part of that transaction.

We use data from these platforms only to provide the features you ask for. We follow the developer terms and platform policies of each service. If you disconnect an account or delete your data, we delete the tokens and platform-derived data we hold for that account, except where we must keep records to comply with law.

We keep your information for as long as your account is active or as needed to provide the Service. You can request deletion at any time — see our Data Deletion page. When you disconnect a social account, its access token is revoked and removed.

Depending on where you live (including under California's CCPA/CPRA and the EU and UK GDPR), you may have the right to access, correct, delete, or export your personal information, and to opt out of certain processing. To exercise these rights, contact us using the details below. We will not discriminate against you for exercising them.

We protect your information with encryption in transit, access controls, and secure storage of credentials and tokens. No system is perfectly secure, but we work to safeguard your data and will notify you of a breach as required by law.

The Service is for businesses and is not directed to children under 16. We do not knowingly collect their information.

We may update this policy. We will post the new effective date and, for material changes, notify you in the Service.