Privacy Policy

1. Who we are

Social Media Automator (the "Service") is operated by Cain & Co. ("we", "us"). This policy explains what information the Service collects, why, and what we do with it. The Service is a private, invitation-only tool used to plan and publish our own social media content; it is not a consumer product open to public sign-up.

2. Information we collect

Account information

Your name, email address, and a hashed (never plaintext) password.

Session information

When you sign in we record the session, including the IP address and browser user agent, so you can stay signed in and so we can detect unauthorized access.

Connected platform credentials

When you connect Instagram, Facebook, YouTube, or TikTok, we store the access and refresh tokens those platforms issue, their expiry times, and the account identifiers and usernames they return. These tokens let the Service publish on your behalf. We do not receive or store your password for any connected platform.

Media and content

Images and video you add to the Service, along with captions, hashtags, scheduling information, and technical metadata such as file size, dimensions, duration, and format.

Location data in media

Photos often carry GPS coordinates in their EXIF metadata. Where present, the Service reads those coordinates and converts them into a human-readable place name (address, city, state, country) to help organize your library. You can remove this data by editing or deleting the media asset.

People recognition

The Service can analyze images to identify which people from your own saved list of known people appear in them, so posts can be organized and captioned. This analysis produces labels stored alongside the media asset. It is used only within your account and is never used to identify strangers or shared for advertising.

Assistant conversations

If you use the built-in assistant, we store your messages, its responses, and records of the actions it took, so conversations persist between visits.

3. How we use information

• to operate the Service and publish content you schedule;
• to authenticate you and keep your account secure;
• to retrieve engagement metrics for posts you have published;
• to organize and search your media library;
• to diagnose failures and improve reliability.

We do not sell your information, use it for advertising, or use it to build profiles of anyone.

4. Who we share it with

We share information only with service providers that make the Service work:

• Meta, Google, and TikTok — content, captions, and metadata you choose to publish are sent to whichever platform you are publishing to, under the permissions you granted.
• DigitalOcean — hosting and media file storage.
• AI model providers — when you use the assistant or automated media analysis, the relevant text or images are sent to the model provider to generate a response.
• Geocoding providers — coordinates from media metadata are sent to a geocoding service to resolve a place name.

We may also disclose information if required by law, or to protect our rights or the safety of others.

5. Retention

We keep information for as long as your account is active. Media assets, planned posts, and conversations remain until you delete them. Disconnecting a platform deletes the stored tokens for that platform. Deleting your account removes your account record and the content associated with it. Content already published to a third-party platform is governed by that platform and must be removed there.

6. Security

Traffic is encrypted in transit over HTTPS. Passwords are stored using a one-way hash. Platform tokens are stored in our database and filtered out of application logs, and access to the Service is limited to invited accounts. No system is perfectly secure, and we cannot guarantee absolute security.

7. Your choices

• Disconnect any social media platform at any time from the admin area.
• Revoke our access directly in your Instagram, Facebook, Google, or TikTok account settings.
• Edit or delete individual media assets, planned posts, and conversations.
• Request a copy of your information or deletion of your account by emailing michael.cain@2100enterprises.com.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect information from them.

9. Changes

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above.

10. Contact

Questions or requests about this policy can be sent to michael.cain@2100enterprises.com.