Privacy Policy

Mr. Right Site LLC ("Social Marketing Aid," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use Social Marketing Aid — our social-media management and AI comment-response service, including its web application and related tools (collectively, the "Service").

1. Scope of This Policy

This policy applies to people who use the Service to manage their own or their clients' social media accounts (each, a "User"), and to the data the Service processes from the social-media platforms a User connects. It does not govern the privacy practices of Facebook, Instagram, LinkedIn, or any other third-party platform, which are governed by their own policies.

2. Information We Collect

2.1 Information you provide

• Account & profile: your name, email address, phone number, company name, and company website(s).
• Team members: if you invite teammates, their name, email, and assigned role.
• Content you create: posts you schedule, captions, hashtags, links, uploaded images and video, brand voice settings, and answer-bank entries.
• Support communications: messages you send us.

2.2 Information from connected platforms

When you connect a Facebook Page, Instagram Business account, LinkedIn profile/page, or similar account, you authorize the Service to access certain data through that platform's official API. This may include:

• Access tokens that allow the Service to act on your behalf for the permissions you grant (stored encrypted).
• Page/account details (name, ID, connected profile information).
• Posts and their content that you publish or schedule through the Service.
• Comments and public commenter information — comment text and the public name/username of the person who left it — so the Service can read and reply to comments on your behalf.
• Reactions, likes, and engagement metrics used to power analytics and best-time recommendations.

2.3 Information collected automatically

• Log and usage data (actions taken in the app, timestamps), device/browser type, and IP address, used for security and to keep the Service reliable.

2.4 AI processing

To generate and vary posts and to draft replies to comments, relevant content (such as a comment's text and the post it is under) is processed by AI language-model providers acting as our service providers. This processing is used solely to operate the Service's features for you. See Section 5.

3. How We Use Your Information

• To schedule, publish, and manage posts across the platforms you connect.
• To read comments and generate and post on-brand replies on your behalf, and to react to comments where supported.
• To detect leads, sales signals, and issues that need your attention, and to notify you.
• To provide analytics, reporting, and best-time-to-post insights.
• To enforce content uniqueness (so posts are not repeated or flagged as spam).
• To secure the Service, prevent abuse, and comply with law.
• To communicate with you about the Service.

4. Facebook & Instagram Platform Data

With your authorization, the Service accesses Facebook and Instagram data through Meta's official APIs to provide the features you request — for example, permissions to read Page engagement, manage and publish Page posts, and read and respond to comments on your Pages and Instagram Business account.

We commit that we:

• Use Meta Platform Data only to provide and improve the features you have enabled within the Service.
• Do not sell Meta Platform Data, and do not use it for advertising or to build user profiles for advertising.
• Do not transfer Meta Platform Data to data brokers or use it for any purpose prohibited by the Meta Platform Terms.
• Retain Meta Platform Data only as long as needed to provide the Service, and delete it when you disconnect an account, delete your account, or on request (see Sections 8 and 10).
• Protect access tokens and Platform Data with encryption and access controls.

You can revoke the Service's access at any time from your Facebook or Instagram settings (Business Integrations), or by disconnecting the account within the Service. On the Instagram platform, comment replies are limited to what the Instagram API permits.

5. Third-Party Service Providers

We share information with a limited set of service providers strictly to operate the Service. They are bound to use it only for that purpose:

A current list of specific subprocessors is available on request at the contact address below.

6. How We Share Information

We do not sell your personal information. We share information only: (a) with the service providers above; (b) when required by law or to protect rights, safety, and security; (c) with your direction (for example, publishing a post you scheduled); and (d) in connection with a merger, acquisition, or asset sale, subject to this policy.

7. Data Security

We use industry-standard safeguards, including encryption of access tokens and sensitive data at rest and in transit, access controls, and audit logging. No method of transmission or storage is 100% secure, but we work to protect your information and to notify you of material incidents as required by law.

8. Data Retention

• Comments & commenter data: retained while needed to manage responses, and by default no longer than 90 days after collection unless you need it retained for reporting.
• Scheduled and published content: retained while your account is active for your records and analytics.
• Access tokens: deleted when you disconnect an account or delete your account.
• Account data: deleted or anonymized after account deletion, except records we must keep for legal, tax, or security reasons.

9. Your Rights & Choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us below.

GDPR (EEA/UK): where applicable, we process data to perform our contract with you, for our legitimate interests in operating the Service, to comply with law, or with your consent. You may lodge a complaint with your local supervisory authority.

California (CCPA/CPRA): we do not sell or "share" personal information as defined by California law. California residents may request access to or deletion of their information and will not be discriminated against for exercising these rights.

10. Deleting Your Data

You may delete your account and associated data at any time — directly on our account deletion page (no login required). For full instructions, including how automatic deletion works when you remove the Service from your Facebook account, see our Data Deletion page.

11. Children's Privacy

The Service is intended for businesses and adults. It is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information.

12. International Data Transfers

We are based in the United States. If you access the Service from outside the U.S., your information may be processed in the U.S. and other countries, with appropriate safeguards where required by law.

13. Changes to This Policy

We may update this policy from time to time. We will revise the "Last Updated" date and, for material changes, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance.

14. Contact Us