Privacy Policy

1. About the Service

NotMarketing is a private, invite-only tool used to manage the social media presence of the creators we represent. Access is limited to authorized staff and the creators themselves. The Service is not open to the general public and is intended only for users aged 18 or older.

2. Information we collect

• Account information. When you are invited to the Service, we create an account using your email address and authentication credentials, managed through our authentication provider.
• Instagram data. When an Instagram account is connected through Meta’s Instagram API, we access that account’s profile information, media and reels, and performance insights so the Service can display analytics and manage a posting schedule. Access is granted by you and can be revoked at any time.
• Google account data. If you choose to connect a Google account, we access (a) your primary Google Account email address, to identify which account is connected, and (b) your Google Calendar, to create and manage posting-reminder events. See Section 4 for details.
• Usage data. Standard technical logs (such as request timestamps and error information) generated when you use the Service.

3. How we use information

We use the information above only to operate and improve the Service: to authenticate users, display Instagram analytics, manage posting schedules, create calendar reminders, secure the Service, and respond to support requests. We do not use it for advertising, and we do not sell it.

4. Google user data and Limited Use

If you connect a Google account, the Service requests these scopes:

• See your primary Google Account email address — used solely to show which Google account is connected in your settings.
• View and edit events on your Google Calendar — used solely to create, update, and delete posting-reminder events on your calendar so you are reminded to post on schedule. We do not read or use any other calendar data for any other purpose.

NotMarketing’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for serving advertisements, do not allow humans to read it except as necessary for security, to comply with law, or with your explicit consent, and do not transfer or sell it.

5. Instagram and Meta data

Our access to and use of Instagram data obtained through Meta’s platform complies with Meta’s Platform Terms and applicable developer policies. Instagram data is used only to provide the analytics and scheduling features described above.

6. How we store and protect data

Access tokens for connected Instagram and Google accounts are encrypted at rest (AES-256-GCM) and are accessible only to the Service’s backend. Data is stored with our database provider (hosted in the EU) and our hosting provider, both under their respective security and data-processing terms. Access within the Service is restricted by role-based permissions.

7. Subprocessors and sharing

We do not sell personal information. We share data only with service providers that help us run the Service — our authentication and database provider, our hosting provider, and the Meta and Google platforms you connect — and only to the extent needed to provide the Service. We may disclose information if required by law.

8. Data retention and deletion

You can disconnect a connected Instagram or Google account at any time from your settings, which revokes the Service’s access. Disconnecting Google removes the reminder events the Service created on your calendar. To request deletion of your account and associated data, contact us at support@notmarketingapp.com and we will delete it within a reasonable period, except where retention is required by law.

9. Your choices

You may disconnect connected accounts, request access to or deletion of your data, and contact us with privacy questions at any time using the address below.

10. Children

The Service is restricted to adults aged 18 and older and is not directed to anyone under 18.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

12. Contact

NotMarketing — support@notmarketingapp.com