Skip to main content

Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your information when you use our AI marketing services.

Last updated: June 8, 2026

Effective date: June 8, 2026

Information We Collect

  • Personal information you provide when contacting us or using our services (name, email, company name, phone number)
  • Website usage data through analytics tools to improve our services
  • First-party website and onboarding activity, including visited pages, referral source, onboarding progress, and partially completed setup details you enter before final submission
  • Communication records when you interact with our support team
  • Technical information about your website when providing our services
  • Social media account information when you connect your accounts through our platform, including Facebook Page data, Instagram Business account data, and other social media profile information (described in detail below)
  • Google account, YouTube channel, Google Business Profile, and Google Drive data when you authorize those connections, limited to the account identifiers, authorized business locations, channel details, files, folders, posts, analytics, and tokens needed to provide the selected service
  • TikTok account and content-posting data when you authorize the TikTok app ScaleSmall.ai, limited to the account identifiers, display information, authorization tokens, uploaded media references, captions, post status, and permissions needed for the TikTok workflows you choose
  • Photo and file source data from services you authorize, including CompanyCam, Dropbox, Google Drive, Jobber, and manual uploads, limited to authorized projects, folders, photos, files, metadata, captions, tags, and related job context needed to create proof-of-work content
  • CRM and customer-system data from services you authorize, including HubSpot, Salesforce, GoHighLevel/LeadConnector, Jobber, and other connected business systems, limited to the contacts, companies, deals, opportunities, jobs, visits, requests, and related records needed for onboarding, reporting, follow-up, and service delivery

Social Media Account Data

When you authorize Scale Small AI to manage social media on your behalf, we collect and store the following information from third-party platforms:

Facebook and Instagram

When you connect your Facebook or Instagram account through our platform, we access the following data via the Meta (Facebook) APIs:

  • Facebook Page information: Page name, Page ID, and Page access tokens necessary to publish content on your behalf
  • Instagram Business account information: Instagram Business account ID linked to your Facebook Page, used to publish content on your behalf
  • Page and Instagram engagement data: post status, comments/counts, impressions, reach, engagement, and other permitted metrics needed to report on content we publish or manage for you

We use this data exclusively to:

  • Publish photo and text content to your Facebook Page and Instagram Business account as part of our automated social media management service
  • Monitor the performance of posts we create on your behalf
  • Maintain active authorization so our service can continue posting on your schedule

We do not access or store: your personal Facebook profile data, private messages, friend lists, photos or content not related to the Pages you authorize, or any data from users who interact with your Page.

TikTok App ScaleSmall.ai

The TikTok app for Scale Small AI is called ScaleSmall.ai. ScaleSmall.ai helps small businesses create, review, and publish job-result videos to their own TikTok accounts.

When you authorize ScaleSmall.ai with TikTok Login Kit, we request the user.info.basic scope to receive your TikTok open ID, display name, and avatar so you can confirm which TikTok account is connected to your Scale Small AI service.

If you choose TikTok publishing workflows, ScaleSmall.ai uses TikTok's Content Posting API scopes video.publish and video.upload only for user-initiated actions. The Direct Post workflow lets you preview the video, review the caption, select an available privacy option, accept required confirmations, and click Publish. The upload workflow sends approved video to your TikTok inbox or drafts so you can finish editing and posting in TikTok.

ScaleSmall.ai does not post content to TikTok without your action. We use TikTok account identifiers, authorization tokens, uploaded media references, captions, post status, and permitted metrics only to connect the account, prepare approved content, publish or upload content you choose, show processing status, confirm delivery, troubleshoot the service, and report on content for the TikTok account you authorized.

Other Social Media Platforms

When you connect additional platforms such as X, LinkedIn, Google Business Profile, YouTube, TikTok, Threads, or Reddit, we collect only the account identifiers, authorization tokens, publishing permissions, uploaded media references, post status, and permitted performance metrics necessary to publish, confirm delivery, and report on content for the accounts you authorize.

We do not use connected social platform data for surveillance, profiling unrelated to your service, data broker activity, ad targeting, or resale. We only take posting actions after you authorize the account connection and service workflow.

Google API, YouTube, and Google Business Profile Data

If you connect Google services, we may use Google APIs to access only the Google Business Profile locations, YouTube channel data, YouTube upload permissions, YouTube analytics data, Google Drive files or folders, and account identifiers needed for the Scale Small AI service you selected.

Scale Small AI uses YouTube API Services when YouTube publishing or YouTube reporting features are enabled. You can review Google's Privacy Policy at https://policies.google.com/privacy.

Scale Small AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Google or YouTube authorization at any time through your connected-account settings with us or through Google's security permissions page at https://security.google.com/settings/security/permissions.

Photo Feed, File Source, and CRM Data

For photo feeds and file sources such as CompanyCam, Dropbox, Google Drive, Jobber, and manual uploads, we access only the authorized projects, folders, photos, videos, files, tags, captions, timestamps, location or job metadata, and related account identifiers needed to import proof assets, avoid duplicate processing, and prepare approved marketing content.

For CRM and customer systems such as HubSpot, Salesforce, GoHighLevel/LeadConnector, Jobber, and similar tools, we access only the authorized customer, company, deal, opportunity, request, job, visit, and lifecycle fields needed to configure onboarding, report outcomes, trigger allowed follow-up, and operate the contracted service.

We do not sell customer lists, combine customer records across unrelated clients, or use connected CRM, file, photo, or platform data to train generalized AI models. Client data is kept separated by client account and used only to provide, secure, support, and improve that client's services.

How We Use Your Information

  • Provide and improve our AI marketing automation services
  • Publish social media content to your connected accounts on your behalf and on your schedule
  • Generate AI-written captions and select photos for social media posts based on your business profile and preferences
  • Import authorized job photos, files, CRM records, and business context from connected systems only for the services you enable
  • Communicate with you about our services and support
  • Save onboarding progress, help you resume setup, and send onboarding reminder emails if setup is incomplete
  • Analyze content performance to improve posting quality and timing
  • Comply with legal obligations and protect our rights

Information Sharing

  • We do not sell, trade, or rent your personal information to third parties
  • We do not sell, trade, or rent any data obtained from Facebook or Instagram APIs to third parties
  • We do not sell, trade, or rent data obtained from Google APIs, YouTube API Services, TikTok, X, LinkedIn, Dropbox, CompanyCam, Jobber, HubSpot, Salesforce, GoHighLevel/LeadConnector, or other connected platforms
  • We may share information with trusted service providers who assist in our operations (such as cloud hosting and workflow automation providers), subject to appropriate data protection agreements
  • We share connected-platform data with subprocessors only as needed to host, secure, automate, publish, report, support, or troubleshoot the service you requested
  • We may disclose information when required by law or to protect our rights
  • Business transfers: Information may be transferred if we are acquired or merged

SMS Privacy Notice

Scale Small.AI LLC may send account, service, support, onboarding, and reminder text messages only to users who provide a mobile number and opt in through our onboarding flow, authenticated dashboard settings, service setup forms, or another documented Scale Small AI consent process.

We do not sell, rent, or share mobile phone numbers or SMS consent information with third parties or affiliates for marketing or promotional purposes. Mobile numbers and SMS consent records are used only to provide, support, secure, and document Scale Small AI services and required messaging compliance.

SMS message frequency varies based on account activity, enabled services, and notification preferences. Message and data rates may apply. Users may reply STOP to opt out or HELP for help.

Data Retention

  • Social media access tokens are stored securely for as long as your account is active and you maintain authorization with our service
  • OAuth access tokens, refresh tokens, account identifiers, and source-system credentials for all connected platforms are retained only while the connection is active, the service requires the connection, or retention is legally required
  • TikTok authorization tokens, account identifiers, media references, captions, and post-status records for the ScaleSmall.ai TikTok app are retained only while your TikTok connection is active, the service requires the records, or retention is legally required
  • Post history and performance data are retained for the duration of your service agreement
  • YouTube API Data that must be refreshed or deleted under YouTube API Services policies is refreshed from YouTube or deleted within the required 30 calendar day period, unless a shorter deletion period applies
  • LinkedIn Marketing API and Community Management data is stored only within the storage windows permitted by LinkedIn, including shorter limits for member social activity and member profile data where those limits apply
  • X Content stored or displayed through our service is kept current with the state available from X and deleted or modified within required platform timelines after deletion, modification, or removal requests
  • If you disconnect a connected account or cancel your service, we delete the associated access tokens and credentials within 30 days unless a platform policy requires a shorter period
  • When Google or YouTube authorization is revoked, we delete stored Authorized Data associated with that authorization as soon as practical and no later than 7 calendar days where required by YouTube API Services policies

Data Security

  • We implement industry-standard security measures to protect your data, including all social media credentials and access tokens
  • All data transmission is encrypted using SSL/TLS protocols
  • Social media tokens are stored in encrypted databases with access restricted to authorized systems only
  • Access to personal information is restricted to authorized personnel only
  • Regular security audits and updates to maintain data protection

Your Rights

Access & Portability

You have the right to access and receive a copy of your personal data, including information about which social media accounts are connected and what data we hold.

Correction

You can request correction of inaccurate or incomplete personal data.

Deletion

You can request deletion of your personal data and social media credentials under certain circumstances. Upon request, we will delete all stored access tokens and disconnect your social media accounts from our platform.

Opt-Out

You can opt out of marketing communications at any time.

Revoke Social Media Access

You can revoke our access to your social media accounts at any time by:

  • Facebook and Instagram: Visit your Facebook Settings > Business Integrations and remove Scale Small AI from the list of authorized apps. You may also contact us directly to disconnect your accounts.
  • Other platforms: Contact us to disconnect any connected social media account, or revoke access directly through that platform's app authorization settings.
  • TikTok: Revoke access to the ScaleSmall.ai TikTok app through TikTok's app authorization settings, through our connected-account controls where available, or by contacting us to disconnect the integration.
  • Google and YouTube: Revoke access through our connected-account controls, by contacting us, or through Google's security permissions page at https://security.google.com/settings/security/permissions.
  • Business systems and photo sources: For Dropbox, CompanyCam, Jobber, HubSpot, Salesforce, GoHighLevel/LeadConnector, and similar systems, revoke access in the provider's connected-app settings or contact us to disconnect the integration.

Once access is revoked, we will no longer be able to post to the disconnected accounts, and we will delete the associated credentials within 30 days.

Cookies and Tracking

We use cookies and similar technologies to:

  • Analyze website traffic and usage patterns
  • Improve our website performance and user experience
  • Remember your preferences and settings

You can control cookies through your browser settings.

Children's Privacy

Our services are designed for businesses and are not directed at individuals under the age of 13. We do not knowingly collect personal information from children.

Contact Us About Privacy

If you have questions about this privacy policy, want to exercise your rights, or want to request deletion of your data, contact us:

Policy Updates

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Return to Home