Privacy Policy

Marketing Desk ("we", "us", or "our") is a marketing management platform operated by Scaleify LLC, a limited liability company organized under the laws of the State of Wyoming, United States. This Privacy Policy describes how we collect, use, store, and share information when you use our websites and services (collectively, the "Service"), including data from the third-party accounts you choose to connect — such as Google Business Profile, Facebook, Instagram, and LinkedIn.

By using the Service, you agree to the collection and use of information in accordance with this policy.

Information we collect

Account information. When you create an account we collect information such as your name, email address, and business details you provide.

Usage information. We collect information about how the Service is used, such as log data and device information, to operate and secure the Service.

Connected-account data.When you connect a Google, Facebook, Instagram, or LinkedIn account, we access certain data from those platforms' APIs as described in the sections below. We access this data only with your authorization and use it only to provide the Service at your direction.

How we use data from connected accounts

For every account you connect, the same principles apply. We use the data only to provide the features you ask for — such as displaying your connected profiles, and composing, scheduling, and publishing posts, photos, and other content at your direction. We do not sell, rent, or license connected-account data; we do not use it for advertising or to build or augment user profiles; and we do not use it to develop, improve, or train generalized artificial intelligence or machine learning models. We do not transfer it to third parties except to the sub-processors listed below as necessary to operate the Service, as required by law, or as part of a merger or acquisition with prior notice to you. LinkedIn data, however, is never transferred to any third party under any circumstances — including in a merger, acquisition, or sale of assets, and including to your own customers — consistent with the LinkedIn API Terms.

Google user data

When you sign in with Google or connect a Google account to the Service, we receive basic profile information from your Google account: your name, email address, and profile picture. We use this to create and identify your account and to show which Google account is connected.

When you connect a Google account to the Service, we also request authorization to access Google Business Profile data for the business locations you choose to connect. Depending on the permissions you grant, this may include business profile information (such as business name, address, hours, and attributes), posts, photos and media, reviews and review replies, and performance insights.

We use this data solely to provide our core services — including displaying and managing connected business profiles, publishing posts and photos at your direction, monitoring and responding to reviews, and generating performance reports. We do not use this data for any other purpose.

Some features use an AI service (Google's Gemini API) to draft content — such as suggested review replies or post text — at your direction. Data sent for this purpose is used only to generate the requested output and is not used to train generalized artificial intelligence or machine learning models.

Marketing Desk's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Facebook and Instagram (Meta) data

When you connect a Facebook Page or an Instagram account to the Service, we receive and store the information needed to publish on your behalf. For Facebook, this includes the Pages you manage and their identifiers, the Page access tokens used to publish, and basic business information associated with those Pages. For Instagram (through Instagram Login), this includes your Instagram Business or Creator account identifier and username and the access token used to publish. We also store the content you create, schedule, or publish through the Service.

We use this data solely to let you compose, schedule, and publish posts, photos, and videos to the Facebook Pages and Instagram accounts you connect, at your direction. We do not use it for any other purpose. We do not sell, rent, or license this data, and we do not use it for advertising or to build or augment user profiles.

Our use and transfer of information received from the Meta platforms complies with the Meta Platform Terms and Developer Policies. Access tokens are stored encrypted, and you can disconnect a Page or account at any time, which revokes and deletes the stored tokens.

LinkedIn data

When you connect a LinkedIn account to the Service, we receive your basic LinkedIn profile information through Sign In with LinkedIn (your name, LinkedIn member identifier, profile picture, and email address), the LinkedIn Pages you administer, and the access and refresh tokens used to act on your behalf. When you publish through the Service we store the posts we create for you; where you choose to view engagement, we access comments and reactions on those posts.

We use this data solely to let you manage your own LinkedIn Pages and profile through Marketing Desk — composing and publishing posts and viewing engagement — at your direction. LinkedIn data is shown only to the people associated with the account or Page being managed, and is never exported, transferred, or sold, including to other customers. We do not use LinkedIn data for advertising, lead generation, audience building, sales prospecting, or to enrich any CRM or marketing-automation feature.

We handle LinkedIn data in accordance with the LinkedIn API Terms and LinkedIn's data-storage requirements, and our handling of LinkedIn data is at least as protective as LinkedIn's own Privacy Policy. In particular, we do not retain other LinkedIn members' profile data beyond a short cache, and member post and engagement content is retained only for the limited periods LinkedIn permits. You can withdraw consent at any time by disconnecting your LinkedIn account; deletion timing is described under "Data retention and deletion" below.

How we store and protect data

Data is encrypted in transit using TLS and encrypted at rest. OAuth access and refresh tokens are stored encrypted. Access to production systems is restricted to authorized personnel, and connected-account data is isolated per account so that it is accessible only to the users authorized for that account.

Data retention and deletion

We retain data from connected accounts only for as long as needed to provide the Service. When you disconnect an account or revoke our access, we immediately delete the stored access and refresh tokens for that connection. When you delete your account, the other data we obtained through your connections — such as posts and media we managed, reviews and replies, and performance data — is deleted no later than 90 days after account closure, except where retention is required by law.

For LinkedIn data we apply LinkedIn's stricter requirements:we delete LinkedIn data immediately upon your request or when you close your account, and within ten days when a client ceases using the Service. Other LinkedIn members' profile data is cached for no more than 24 hours and not stored, and member post and engagement content is retained only for the limited periods LinkedIn permits.

You can revoke our access at any time: for Google, from your Google Account security settings; for Facebook, under Settings → Business Integrations; for Instagram, under Settings → Apps and Websites; and for LinkedIn, under Settings → Permitted Services. You may also request deletion of your data at any time by emailing support@promarketingdesk.com or by following our data deletion instructions.

Sub-processors

We use a small number of service providers to operate the Service. These include cloud hosting and content delivery (Vercel), database and authentication infrastructure (Supabase), Google APIs and AI content generation (Google Cloud, including the Gemini API), payment processing (Stripe), background job processing (Inngest), transactional email (Resend), error monitoring (Sentry), and product analytics (PostHog). Sub-processors act only on our behalf and at our direction, may not use the data for their own purposes, and are bound by data protection obligations consistent with this policy.

Cookies

This website does not use analytics or advertising cookies. The Service uses essential cookies required for authentication and session management, and first-party product analytics to understand how the Service is used. Analytics data is not used for advertising and is not shared with advertisers.

Children's privacy

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date above. Material changes will be communicated to account holders by email or in-product notice.

Contact us

If you have questions about this Privacy Policy or our data practices, contact us at support@promarketingdesk.com. Marketing Desk is operated by Scaleify LLC, Wyoming, United States.