Privacy Policy

1. Who We Are

RocketSloth Consulting ("we," "us," or "our") operates the RocketSloth Consulting platform ("Platform"). This Privacy Policy explains how we collect, use, and protect your information when you use our Platform, including any features that integrate with third-party services such as Facebook and Instagram.

2. Information We Collect

We collect the following categories of information:

• Account Information: Name, email address, and password when you create an account.
• Business Information: Company name, contacts, pipeline data, and other CRM data you enter into the Platform.
• Social Media Data: When you connect your Facebook or Instagram account, we receive and store your Facebook Pages, Instagram Business accounts, page access tokens, and basic profile information (name, page name, profile picture URL). We use the following Facebook permissions:pages_show_list,pages_read_engagement,pages_manage_posts,instagram_basic, andinstagram_content_publish.
• Usage Data: Actions performed within the Platform for audit logging and security purposes.

3. How We Use Your Information

• To provide and maintain the Platform and its features.
• To publish and manage social media posts on your behalf on Facebook Pages and Instagram accounts you have connected.
• To display analytics and engagement data from your connected social accounts.
• To send transactional emails (password resets, onboarding invitations).
• To process payments and manage subscriptions.
• To maintain audit logs for security and compliance.

4. Data Storage and Security

All social media access tokens are encrypted using AES-256-GCM before storage. Your data is stored securely using industry-standard infrastructure (Supabase with row-level security). We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Third-Party Services

The Platform integrates with the following third-party services:

• Meta (Facebook/Instagram): For social media management. Subject to Meta's Privacy Policy.
• Stripe: For payment processing. Subject to Stripe's Privacy Policy.
• Resend: For transactional email delivery.
• Google: For review management and business profile links.

6. Data Deletion

You can request deletion of your data at any time by emailing Ben@RocketSlothConsulting.com. We will remove all stored data associated with your account, including any Facebook or Instagram data, within 30 days of your request.

You can also disconnect your Facebook or Instagram accounts at any time from the Marketing → Social section of your dashboard, which immediately removes stored tokens and account data.

For automated data deletion requests from Meta, see our data deletion callback.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Disconnect third-party accounts at any time.
• Export your data upon request.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at: Ben@RocketSlothConsulting.com