Privacy

Information we use

We store your name, email, optional profile picture, membership role, shared social post links and their previews, viewed status, member-confirmed likes/comments/shares, points, blocks, reports, and team chat messages. Team chat messages are visible within your workspace. Direct conversations are visible only to their participants. Workspace owners can review reports they are authorized to access. You can remove your own messages. Other team members can see your name, shared posts, and activity. The team owner can see member emails and reports, whether the app was recently active in the foreground, and the last time it was active. We store session activity timestamps and vacation/snooze periods to show participation status and pause missed-deadline penalties while you are away. We use sign-in cookies and hashed sign-in tokens to secure your account. Request information may be processed by our hosting provider for security.

Services and previews

Netlify hosts the app and workspace data. Resend delivers sign-in emails. Loading previews or opening linked videos contacts YouTube, Instagram, TikTok, or Facebook; their privacy policies apply. We do not ask for your social account passwords, sell your personal information, or verify your engagement with those platforms.

Notifications

Browser notifications, when enabled, use a stored subscription. If you enable iPhone notifications, we store an Apple device push token associated with your signed-in account and session. Netlify processes the token and sends new-post alerts through Apple Push Notification service. Alerts contain the posting member’s name, the social platform, and a post identifier. Your iPhone can mirror alerts to a paired Apple Watch according to your Apple notification settings. You can turn off these alerts in Account or in iPhone Settings; signing out removes that session’s notification subscription. Device tokens are used to deliver notifications, not for advertising or tracking.

Optional Instagram connection

If you connect Instagram, Meta provides your professional account ID, username and media through its basic profile and media permission. We store the access token encrypted on our server and periodically refresh it while connected. We check for new video posts and share their links and captions with your Organic Growth team. We do not publish to Instagram or read private messages, and this does not verify likes, comments or shares. Disconnect in Account to stop imports and remove the stored token; existing shared posts remain until deleted. Account deletion removes the connection and import records. You can also revoke Organic Growth-IG in Instagram’s Apps and websites settings. This optional connection is available to active team members, subject to platform account eligibility and approval.

Optional YouTube connection

Active team members can optionally connect YouTube. When you connect YouTube, Organic Growth uses YouTube API Services to read your channel identity and recent video metadata. Only new public videos published after connection are shared with your team; private and unlisted videos are not shared. Access and refresh tokens are encrypted on our server. Disconnect in Account to stop imports and remove the stored tokens, or revoke access in Google account permissions. Account deletion removes the connection and imported posts. We do not sell Google user data or use it for advertising or AI training. Organic Growth’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements. See Google’s Privacy Policy and YouTube’s Terms of Service.

Optional TikTok connection

When you connect TikTok, we read your account ID, display name and public video metadata using user.info.basic and video.list. We encrypt access and refresh tokens on our server and refresh them while connected. New public video links and captions are shared with your Organic Growth team after connection; we do not publish to TikTok, access private messages or verify likes, comments or shares. Disconnect in Account stops future imports and removes stored tokens; existing shared posts remain until deleted. Account deletion removes the connection and import records. This optional connection is available to active team members, subject to platform account eligibility and approval.

Retention and deletion

Workspace information is kept until you delete your account or contact us for removal. Account deletion removes your membership, shared links, recorded activity, and associated account records from the active workspace. It does not delete original social media posts. Hosting logs and provider backups may remain under the providers’ retention practices. Security rate-limit records do not contain your name or email in plain text.

Use Account → Delete my account, or visit Support & account deletion. Only the team administrator can hide posts or block members. Members can report concerns to the administrator. This service is intended for adults.

Contact

Questions or requests: antonnovikovre@gmail.com

Password sign-in

If you choose password sign-in, we store a salted password hash, never the password itself. Email codes remain available for sign-in and password recovery. A password reset signs out previous sessions. Your password hash is removed when your account is deleted.