Privacy Policy

1. Who we are

Adaptick is a social media content and scheduling service operated by HEC CONSULTANTS LTD, a company registered in the United Kingdom. For any question or request about your personal data, contact [email protected].

2. What we collect

• Account details: your name, username and email address when an account is created for you or by you.
• Facebook profile information: your name and Facebook ID when you sign in or connect with Facebook.
• Page access tokens: the credentials Meta issues so we can publish to the Facebook Pages and Instagram accounts you choose to connect. We only receive access to Pages you explicitly grant.
• Your content: images, videos, captions, drafts, schedules and review feedback you upload or create in the app.
• User-provided API keys: if you add your own OpenAI key for AI features, it is stored on your account and used only for your requests.
• Research queries: the public communities and searches you run in the research tools.
• Usage data: basic analytics (page views, performance) collected via Cloudflare.

3. How we use it

• To operate your account and keep you signed in.
• To publish and schedule posts to the Facebook and Instagram accounts you connect, only when you or a workflow you approved triggers a post.
• To generate AI content you request, using your saved brand details and, where provided, your own OpenAI key.
• To store and serve your media library.
• To secure, maintain and improve the service.

We do not sell your personal data. We do not use your content or data to train AI models.

4. Where your data lives

Your data is stored on servers we control in the United Kingdom and the European Union (Netherlands). The UK Government has determined that the EU provides adequate protection for personal data transferred from the UK. Media you upload for publishing is hosted at a public URL so Meta's platforms can retrieve it when a post is published.

5. Who we share it with

• Meta Platforms (Facebook and Instagram): post content, captions and media are sent to Meta's Graph API when you publish or schedule. Meta's own privacy policy applies on their platforms.
• OpenAI: when you use AI features, the relevant text and instructions are sent to OpenAI to generate content. If you saved your own API key, requests are billed to your OpenAI account.
• Reddit: research features fetch publicly available posts; your queries go to Reddit's public endpoints.
• Cloudflare: provides our analytics and content delivery.

We never share your data with advertisers or data brokers.

6. How long we keep it

We keep your data while your account is active. When you ask us to delete it, your personal data, media and access tokens are deleted within 30 days, except records we must keep to meet legal obligations.

7. Disconnecting Facebook and Instagram

• In the app: Settings, Connected accounts, then Remove next to any Page. The Page's access token is deleted immediately.
• Via Facebook: Facebook Settings and privacy, Settings, Apps and websites, Adaptick, Remove. This revokes our access at the source.

8. Delete your data

You can have all personal data Adaptick holds about you deleted at any time:

• Email [email protected] from the address on your account, or ask your admin contact. We confirm and complete deletion within 30 days.
• Removing Adaptick in Facebook's Apps and websites settings (section 7) also signals us to delete the data linked to your Facebook login.
• Deletion covers your account details, uploaded media, drafts, tokens and API keys. Posts already published to your own social pages stay on those platforms and remain under your control there.

9. Your rights (UK GDPR)

Under UK data protection law you can:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Have your data deleted.
• Restrict or object to processing.
• Receive your data in a portable format.

To exercise any of these, email [email protected]. You may also complain to the UK Information Commissioner's Office at ico.org.uk.

10. Cookies

We use essential cookies to keep you signed in, cookies set by Facebook during login, and Cloudflare analytics. We do not use advertising or cross-site tracking cookies.

11. Security

Access tokens and API keys are stored server-side and never exposed to other users. Accounts are isolated: each client sees only their own content, media and pages. Traffic is encrypted in transit over HTTPS.

12. Children

Adaptick is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children.

13. Changes to this policy

If we make material changes we will update this page and the effective date above. Continued use of Adaptick after a change means you accept the updated policy.