Privacy
Account sign-in uses Google or X through our auth provider. We store the name, email, and image that provider sends. We don’t ask for an Instagram password or a card number.
If you connect Instagram, the access token is encrypted at rest and used only to publish or read what the official API allows. It is not shown in the dashboard.
Website scans store the public facts we found: name, products, colors, images URLs. That information was already public. Contact form messages are stored so an operator can reply.
Paddle processes payments. We keep a customer id and subscription status from verified webhooks. We never see full card details.
We don’t sell personal information. To ask for a copy or deletion of your workspace, email agency.slmarketing@gmail.com.