PromoSQAD Privacy Policy

Account Information

When you register for PromoSQAD, we collect:

• Name and email address
• Account type (Ambassador, Organizer, or Admin)
• Profile information and bio
• Password (encrypted)
• Account preferences and settings

Business and Event Information

• Event details (titles, descriptions, dates, locations)
• Promotional content and assets uploaded by organizers
• Campaign requirements and guidelines
• Ambassador applications and status
• Message communications between users

Social Media Integration Data

When you connect social media accounts (like Instagram), we collect:

• Social media user IDs and usernames
• Account type verification (Business/Creator status)
• Follower counts and basic metrics
• Access tokens (encrypted and securely stored)
• Posted content URLs and metadata
• Publication timestamps and engagement data

Platform Usage Information

• Login activity and session data
• Feature usage and interaction patterns
• Device information and browser details
• IP addresses and location data
• API request logs for troubleshooting

Platform Services

• Account Management: Create and maintain your PromoSQAD account, authenticate logins, and manage user preferences
• Event Operations: Enable organizers to create events and ambassadors to discover and apply to campaigns
• Communication: Facilitate messaging between organizers and ambassadors, send notifications about campaign updates
• Campaign Tracking: Monitor campaign progress, track task completion, and provide analytics to organizers

Social Media Integration

• Account Verification: Verify social media accounts are Business/Creator accounts to enable posting features
• Content Publishing: Use access tokens to publish promotional content to connected social media accounts on your behalf
• Metrics Tracking: Fetch follower counts and engagement metrics to display current statistics and campaign performance
• Connection Management: Monitor token validity and refresh access tokens as needed to maintain platform connections

Business Operations

• Provide customer support and respond to user inquiries
• Improve platform features and user experience
• Ensure platform security and prevent fraud
• Comply with legal obligations and enforce our terms of service
• Send important service announcements and updates

Security Measures

• All user passwords are encrypted using industry-standard hashing algorithms
• Social media access tokens are encrypted before storage in our database
• All data transmission uses HTTPS encryption
• Database access is restricted and monitored with audit logging
• Regular security assessments and updates to protect against vulnerabilities
• Secure session management with proper authentication validation

Data Retention

• Account information is retained while your account is active
• Social media access tokens are stored until you disconnect the respective accounts
• Event and campaign data is retained for business analytics and historical records
• Posted content URLs and metadata are kept for campaign tracking and verification
• Session data is automatically cleared after logout or expiration
• User data is deleted within 30 days of account deletion requests

Account Management

• Disconnect: You can disconnect your Instagram account at any time through our platform
• Access: You can request information about data we've collected from your Instagram account
• Deletion: When you disconnect your account, we remove your Instagram access tokens and can delete associated data upon request

Social Media Permissions

When connecting social media accounts, our application may request the following permissions:

• Instagram: instagram_business_basic (access to basic account information) and instagram_business_content_publish (ability to publish content on your behalf)
• Other Platforms: Similar permissions for account verification and content publishing as we expand to additional social media platforms

You can revoke these permissions through each platform's app settings at any time. Disconnecting social media accounts will disable related features but won't affect your main PromoSQAD account.

Data Protection Rights

Depending on your location, you may have rights including:

• Right to access your data
• Right to rectify inaccurate data
• Right to erase your data
• Right to restrict processing
• Right to data portability
• Right to object to processing

Social Media Platforms

• Instagram: Comply with Instagram's Platform Policy and Meta's terms of service
• Only access data you explicitly authorize through proper OAuth flows
• Use platform data solely for authorized features and functionality
• Respect API rate limits, usage guidelines, and content policies
• Maintain current API permissions and review status

Additional Terms

Your use of PromoSQAD and connected services is also governed by:

• PromoSQAD Terms of Service
• Instagram's Terms of Use and Platform Policy
• Meta's Privacy Policy and Community Standards
• Other connected platform terms as applicable