How we handle your data

We persist:

• Your account: email, name, hashed password (bcrypt, never plaintext).
• Your workspace: dealership profile, brand voice, automation guardrails.
• OAuth tokens for connected platforms — encrypted at rest in production.
• Agent task history, posts, campaigns, and analytics rollups for the workspace.
• Audit log of every agent action and team change for 365 days.

We do not sell, share, or train third-party models on your data. Agent outputs are stored for your workspace and your workspace only.

We use three categories of cookies:

• Essential — sign-in session tokens and your theme preference. Always enabled.
• Functional — workspace switcher state and feature-flag overrides. Always enabled.
• Analytics — anonymous product-usage metrics to help us improve. Enabled when you accept the cookie banner; disabled if you pick "Essential only".

We integrate with the platforms you choose to connect: Meta (Facebook, Instagram), Google (Ads, GA4, Business Profile), TikTok, YouTube, LinkedIn, Snapchat, Pinterest. We send the minimum data required to publish and read campaign performance. Each connection is revocable from /integrations.

Billing is handled by Stripe; we never see card data. Email delivery is handled by our transactional provider; opt-out links ship with every non-essential email.

Export your workspace data, correct an inaccuracy, or delete your account at any time from /settings. Deletion is irreversible and cascades — every campaign, post, audit log entry, and platform connection is removed within 30 days.

Transport: TLS 1.2+ on every endpoint. At rest: AES-256 for OAuth tokens and PII fields. Two-factor authentication is required for Owner and Admin roles. We rotate keys quarterly and review audit logs weekly.

Questions, requests, or breach reports: privacy@promopilot.ai