Privacy Policy

We may process contact and business information that a client or authorized user provides, including names, email addresses, business details, service requests, content drafts, media assets, approval records, and support communications.

When an authorized user connects a third-party account, we may receive account identifiers, profile information, OAuth permissions, access and refresh tokens, media or post metadata, publishing status, analytics, comments, and other information covered by the scopes the user approves. We do not ask clients to share social-platform passwords.

We may also collect limited technical information needed to secure and operate the service, such as timestamps, browser or device information, IP-derived security signals, integration health, and audit logs.

We use information to provide requested services, authenticate users, connect authorized accounts, prepare and route content for approval, publish only approved content, retrieve authorized account data, measure results, provide support, prevent abuse, and maintain reliable business records.

S4 does not sell personal information. We do not use connected-account information to send unapproved messages or publish content without the applicable authorization and approval.

Our services may connect to platforms such as Meta, Instagram, Facebook, Threads, TikTok, Google, and other providers selected by a client. Information is sent to or received from those providers only as needed for authorized workflows, and each provider applies its own terms and privacy policy.

We may use vetted infrastructure, hosting, database, security, analytics, and communications providers to operate the service. They receive only the information needed to perform their services and are expected to protect it appropriately.

OAuth grants and other secrets are stored server-side using approved encrypted secret storage. Public client applications do not receive server-only credentials, and secrets are not intentionally placed in public source code.

We keep information only while it is needed to provide the service, maintain security and audit records, meet legal obligations, or resolve disputes. Connected-account tokens are revoked or deleted when the integration is disconnected or when a verified deletion request is completed, subject to limited lawful retention requirements.

Authorized users may disconnect a platform through the relevant provider or request that S4 disconnect an integration. You may also request access, correction, or deletion of personal information by contacting us. We may need to verify the requester and their authority over the affected business or account before acting.

For step-by-step deletion instructions, visit our Data Deletion page.

Our business services are not directed to children under 13, and we do not knowingly collect their personal information. We may update this policy as our services or legal obligations change; the date above shows the latest revision.

Questions or privacy requests may be sent to s4aiagency@gmail.com.