Privacy Policy

1. Introduction

Welcome to SS-Sales ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our real estate sales management platform and associated Instagram automation services (collectively, the "Service").

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and Meta Platform Terms.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use our Service.

2. Information We Collect

2.1 Information You Provide to Us

• Account Information: Name, email address, phone number, company name, and role
• Profile Information: Avatar, professional details, and preferences
• Real Estate Data: Property listings, client information, project details, and sales data
• Payment Information: Billing address and payment method details (processed by Stripe)
• Communications: Messages, emails, and other communications with us or through our platform

2.2 Instagram Data

When you connect your Instagram account, we collect:

• Basic Profile Information: Instagram username, profile picture, and user ID
• Messages: Direct messages sent to your Instagram account (for automation purposes)
• Comments: Comments on your posts that trigger automation rules
• Engagement Data: Metrics related to your Instagram interactions
• Media Information: Post IDs and captions for automation targeting
• Access Tokens: Securely stored tokens to maintain your Instagram connection

Important: We only access Instagram data that you explicitly authorize. You can revoke this access at any time through your Instagram settings or our platform.

2.3 Automatically Collected Information

• Device Information: IP address, browser type, operating system, and device identifiers
• Usage Data: Pages visited, features used, and interaction patterns
• Log Data: Access times, referring URLs, and error reports
• Location Data: General geographic location based on IP address

3. How We Use Your Information

3.1 General Uses

• Provide, maintain, and improve our Service
• Process transactions and manage your account
• Send administrative information and updates
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms

3.2 Instagram Data Uses

We use Instagram data specifically to:

• Automate Responses: Send automated messages based on your configured rules
• Lead Generation: Convert Instagram interactions into sales leads
• Analytics: Provide insights about your Instagram marketing performance
• Workflow Automation: Trigger actions based on Instagram events
• Content Management: Help you manage and respond to Instagram engagement

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Service Providers

• Clerk: Authentication and user management
• Convex: Database and real-time sync services
• Neon: PostgreSQL database hosting
• AWS S3: Secure file storage
• Stripe: Payment processing
• Vercel: Application hosting

4.2 Within Your Organization

Information may be shared with other members of your company or team based on permissions and roles you establish.

4.3 Legal Requirements

We may disclose information if required by law, court order, or government request, or if necessary to protect our rights, property, or safety.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS
• Access Controls: Role-based access controls and authentication requirements
• Secure Storage: Encrypted storage for sensitive data including Instagram access tokens
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Regular privacy and security training for our team
• Incident Response: Established procedures for handling security incidents

Instagram access tokens are encrypted and stored securely. We use OAuth 2.0 for Instagram authentication, meaning we never have access to your Instagram password.

6. Your Rights and Choices

6.1 Access and Portability

You can access and download your data at any time through your account settings.

6.2 Correction and Update

You can update your information through your account profile or by contacting us.

6.3 Deletion

You can request deletion of your account and associated data. Some information may be retained for legal or legitimate business purposes.

6.4 Instagram Permissions

You can revoke our access to your Instagram account at any time through:

• Instagram Settings → Apps and Websites
• Our platform's Integration settings

6.5 Marketing Communications

You can opt-out of marketing emails through the unsubscribe link in any marketing message.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records

Instagram Data: Instagram messages and automation data are retained for 90 days after the last interaction, unless converted to a lead. Lead data is retained according to your company's data retention policy.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses approved by regulatory authorities
• Ensuring recipients are in countries with adequate data protection laws
• Implementing appropriate security measures

9. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected information from a child under 18, we will delete that information promptly.

10. Third-Party Links and Services

Our Service may contain links to third-party websites or services, including Instagram. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

Instagram/Meta Privacy Policy: https://www.facebook.com/privacy/policy

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

12. European Privacy Rights

If you are in the European Economic Area (EEA), you have additional rights under the GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Legal Basis for Processing: We process your data based on:

• Contract performance (to provide our services)
• Legitimate interests (to improve and secure our services)
• Legal obligations
• Your consent (for Instagram data processing)

13. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for the Service to function properly
• Analytics Cookies: Help us understand how you use our Service
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may limit your ability to use some features of our Service.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification for material changes
• Displaying a notice in our Service

Your continued use of our Service after changes indicates acceptance of the updated policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us:

For Instagram-specific privacy concerns, you can also contact Meta directly through their privacy support channels.

16. Meta Platform Requirements

In accordance with Meta's Platform Terms and Developer Policies:

• We only request permissions necessary for our Service's functionality
• We do not use Instagram data for advertising or marketing unrelated to your use of our Service
• We comply with Meta's data deletion requirements
• We provide clear information about how we use Instagram data
• We maintain the security of Instagram access tokens and user data
• We respect Instagram's rate limits and API usage guidelines