Privacy Policy

Affinly.io ("Affinly," "we," "us," or "the App") provides tools that enable users to manage and publish content across connected platforms. We are committed to protecting your privacy and handling data responsibly.

This Privacy Policy explains what information we collect, how we use it, how it is stored, and the rights you have in relation to your data.

1. Scope of This Policy

This Privacy Policy applies to:

• The Affinly.io web application
• User accounts created within the App
• Third-party platform integrations explicitly enabled by the user

This policy does not apply to third-party platforms themselves, which are governed by their own privacy policies.

2. Information We Collect

2.1 Information Provided Through Integrations

When you connect third-party services, we may process the following information as required to provide the requested functionality:

• Account, page, or profile identifiers
• Board, category, or CMS collection identifiers
• Access tokens and refresh tokens required for authentication and publishing
• Public account metadata (such as usernames or page names)

We do not collect or store:

• Account passwords
• Private messages or direct messages
• Private follower data
• Personal data of end users or followers on connected platforms

2.2 Technical and Operational Data

We may automatically collect limited technical data, including:

• IP address
• Browser type
• Device information
• Server logs and timestamps

This data is used solely for security, monitoring, and service reliability.

3. How We Use Information

We use collected information strictly to:

• Enable you to publish content to connected platforms using features you explicitly initiate within the App
• Authenticate and maintain secure connections with third-party APIs
• Execute automation workflows configured and controlled by the user
• Maintain, secure, and improve the App
• Comply with platform policies and legal obligations

All publishing and automation actions occur only based on user configuration or direct user initiation. Affinly does not post content autonomously or without user authorization.

We do not sell, rent, or share personal data with third parties for advertising or marketing purposes.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process personal data under the following legal bases:

• Consent — when you connect third-party accounts
• Contractual necessity — to provide the services you request
• Legitimate interest — to operate, secure, and improve the App

You may withdraw consent at any time by disconnecting integrations or contacting us.

5. Data Processing & Controller/Processor Roles (DPA-Style Disclosure)

For the purposes of applicable data protection laws:

• You are the Data Controller of content and account data connected to third-party platforms
• Affinly.io acts as a Data Processor, processing data solely on your instructions

Affinly:

• Processes data only to provide the requested services
• Does not determine the purposes of content publication
• Does not use connected data for independent profiling or analytics

We implement appropriate technical and organizational measures to protect data against unauthorized access, loss, or misuse.

6. Third-Party Services and Integrations

Affinly.io integrates with third-party platforms only when explicitly connected by the user.

Supported integrations include:

• Meta (Facebook Pages & Instagram Business Accounts)
• TikTok
• Pinterest
• Webflow

When enabled, these integrations allow Affinly to authenticate, upload media, create or update posts, and manage content destinations according to user-defined settings.

Affinly does not receive passwords for any third-party service.

Affinly is not affiliated with, endorsed by, or sponsored by any of these platforms. Use of each service is governed by its own terms and privacy policies.

7. Platform-Specific Compliance Notes

TikTok

• Affinly uses TikTok APIs only to publish content authorized by the user
• No TikTok user data is shared with third parties
• Data access is limited to what is necessary for publishing

Pinterest

• Pinterest integrations are used solely to create or publish Pins and related content
• No Pinterest user data is sold or reused for unrelated purposes

Affinly complies with all applicable TikTok and Pinterest developer policies regarding data access, storage, and usage.

8. Data Storage and Security

• Access tokens and identifiers are stored securely
• Data is encrypted in transit where applicable
• Access is restricted to authorized systems only

While no system can guarantee absolute security, we take reasonable and industry-standard measures to protect your information.

9. Data Retention

We retain integration data only for as long as:

• Your account remains active, or
• An integration remains connected, or
• Required to fulfill legal obligations

When an integration is disconnected or deletion is requested, associated tokens and identifiers are deleted within a reasonable timeframe.

10. Data Deletion and User Rights

You may request:

• Access to the data we store about you
• Correction of inaccurate data
• Deletion of your data
• Restriction or objection to processing

Requests can be made by contacting:

Email: hello.xstack@gmail.com

Verified requests will be fulfilled in accordance with applicable law.

11. International Data Transfers

Your data may be processed in jurisdictions outside your country of residence. We take reasonable steps to ensure appropriate safeguards are in place consistent with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted with a revised "Last updated" date. Continued use of the App constitutes acceptance of the revised policy.

13. Contact Information

For questions or concerns regarding this Privacy Policy or data practices, contact:

Email: hello.xstack@gmail.com