← Back to SMR
SOCIAL MEDIA REMINDER

Privacy Policy

Last updated: 16 October 2026

Who we are

Social Media Reminder (SMR) is an invited pilot for social media routines, brand content and approved publishing. The SMR pilot operator is responsible for information handled through this service. For privacy questions, access requests or deletion requests, contact socialmediareminder@gmail.com.

Information we process

We process your email, account identifier and sign-in information; routine settings, channels, strategy, time zone and preferred time; task actions, follower counts and notes; and brand membership, briefs, profile links, uploaded or imported media, drafts, approvals, schedules and delivery history. Our hosting providers may process technical request information, including IP addresses and error logs, to operate and secure the service.

Connected social accounts

If you connect LinkedIn or Meta services such as Facebook and Instagram, we receive the account or page identifiers, names, permissions and access tokens needed for the connection. Tokens are stored encrypted on the server. We use these connections to display accounts and attempt publishing actions you authorise, including approved scheduled posts. We do not request your social platform password. Connecting an account does not itself approve a post.

Disconnect accounts using the available SMR controls or revoke permissions in the platform settings. Disconnecting stops future use of that connection but does not remove posts already published. Contact us to request deletion of retained connection or workspace records.

How we use information

We use information to authenticate users, maintain workspaces, prepare routines and content, record approvals, deliver requested reminders, publish authorised content, prevent duplicate actions and investigate service problems. We do not sell personal information or use workspace content for advertising. No advertising trackers are installed.

Providers and optional features

Vercel hosts the app. Google Firebase provides authentication and database storage. Connected social platforms receive the information and content needed for authorised actions. Providers process information under their applicable terms and privacy policies and may process it outside your country, including in the United States.

Requested AI voice proposals and sample concepts send the saved brief, selected website text and up to two selected photographs to OpenAI through the operator’s API account. API response storage is disabled for these requests. Videos are not sent for analysis. Generated concepts and review decisions are saved in the brand workspace and require review before publication.

Optional Pixabay searches send your query and personal Pixabay API key to Pixabay. The key stays in memory for the open editor and is not saved by SMR. Search queries, results and a one-way cache identifier are stored for caching; cached results expire after 24 hours. Selected media passes through SMR for import. Saved branded renders retain source and licence references.

Google Drive access is read-only through the SMR pilot identity and limited in the app to the saved brand folder and its subfolders. Revoke folder sharing in Drive to stop access. Requested website reviews read the public page and up to two same-site stylesheets to suggest brand colours, fonts and logos.

If Telegram reminders are enabled for a brand, captions, finished-media links and gap alerts go to the configured private pilot chat. Telegram processes these messages. Disable Telegram in brand settings to stop future reminders. Delivery attempts and actions are recorded to prevent duplicates. WhatsApp is not connected and the pilot does not collect a WhatsApp phone number.

Security and retention

We use account authentication, workspace access controls and server-side protection for connection credentials. No online service can guarantee absolute security. Workspace data is retained while the workspace is in use or until deletion. The pilot does not currently apply one automatic deletion period to every record.

Security records, delivery history and provider backups may remain after an in-app deletion where needed to resolve issues or meet applicable obligations. Contact us for a review and deletion of information still held. Content already sent to social platforms, Telegram and other providers is subject to their controls.

Your controls and rights

You can pause your routine and export or delete routine records from My routine. This does not delete your Firebase authentication account or all brand records. For full account or workspace deletion, email us from your registered address and identify the workspace. We may verify your identity before acting.

Depending on your location, you may have rights to access, correct, delete or obtain a copy of your information, restrict or object to processing, withdraw consent where processing relies on consent, and complain to your local data protection authority. Contact us to exercise these rights.

Essential storage and children

Browser storage and authentication mechanisms support sign-in and essential app functions. The pilot is intended for adults and is not directed at children. Avoid placing sensitive personal information or information about children in briefs and notes.

Changes

We may update this policy as the service changes. The date above identifies the current version. We will communicate material changes through the app or registered contact details where appropriate.

Terms of Service