Privacy Policy

We may collect:

• Account information such as name and email address
• Payment metadata and transaction records (we do not store full card numbers)
• Analytics and click data on SayEase Links
• Device, browser, IP, and referrer information
• Content you upload, including product files, images, and copy

We use information to operate SayEase, process payments, deliver purchased items, prevent fraud and abuse, provide support, and improve the product.

Payments are processed by Stripe. Stripe collects and processes payment details under its own privacy policy.

We use cookies and similar technologies for authentication, session management, security, and product analytics.

We share data with infrastructure, payment, email, and analytics providers only as needed to run the service. We do not sell personal information.

We retain account, transaction, and content data while your account is active and for as long as needed to comply with legal, tax, and accounting obligations.

If you connect a social account (such as an Instagram Professional account) to SayEase, then depending on the permissions you grant and the features you enable, SayEase may process:

• Instagram professional account ID
• Instagram username and basic profile/account information needed to identify the connected account
• OAuth/access credentials, stored securely
• Granted permissions and scopes
• Token expiration and connection-state information
• Instagram media IDs and comment IDs
• Commenter/user identifiers, and commenter usernames where supplied by Meta and needed for the feature
• Comment text, when required to evaluate a creator-defined automation trigger
• Message IDs, sender/recipient identifiers, and timestamps
• Limited messaging content where necessary for approved messaging functionality
• Webhook events from connected platforms
• Creator-configured automation rules and creator-selected SayEase Links
• Delivery, failure, duplicate-prevention, abuse-prevention and troubleshooting logs

We process this information only to:

• connect and authenticate an Instagram Professional account
• identify the connected account
• receive user-triggered Instagram events
• evaluate creator-defined automation triggers
• send the creator-configured response and insert the selected SayEase Link
• prevent duplicate responses
• enforce rate limits and anti-abuse controls
• maintain connection status and troubleshoot delivery failures
• protect the security and integrity of SayEase

SayEase does not sell Meta Platform Data. SayEase does not use Meta Platform Data for third-party advertising. SayEase does not use Meta Platform Data to create profiles of Instagram users unrelated to the features described here. SayEase uses Meta Platform Data only as needed to provide, secure, maintain and support the connected social-account features described in this policy. SayEase does not ask for your Instagram or TikTok password, and uses official platform APIs only.

Contracted infrastructure, database, hosting and support providers may process limited Meta Platform Data on SayEase's behalf, solely as necessary to operate, secure and support the integration, and subject to applicable agreements and safeguards. Meta Platform Data is not shared with unrelated third parties.

Retention of connected social-account data

• Raw social-platform webhook payloads: retained for up to 30 days where needed for processing, security and troubleshooting.
• Auto-DM execution and delivery logs: retained for up to 90 days, unless longer retention is required for security, dispute, legal or compliance purposes.
• OAuth/access credentials: retained only while the social account remains connected, and removed from SayEase when the connection is disconnected.
• Automation configuration: retained while the automation and account exist, unless deleted earlier.
• Aggregated or de-identified operational data may be retained where it no longer reasonably identifies an Instagram user.

You can disconnect a connected social account at any time from Settings → Social Connections. Disconnecting removes SayEase's stored access credentials for that account, disables associated automations, and stops SayEase from using that connection. SayEase does not currently send a provider-side revocation request to Meta; you can also remove SayEase from your Instagram or Facebook account settings at any time. You can request deletion of your account data and connected social data on the Data Deletion page — this is available to Instagram users who do not have a SayEase account as well.

Some products featured by SayEase — for example in Discover, post-purchase recommendations, or SayEase-owned promotional pages — may be offered through affiliate partnerships. Where affiliate offers are used:

• SayEase may send the shopper to a third-party merchant through an affiliate tracking link.
• The affiliate network or merchant may receive tracking parameters or anonymous identifiers needed to attribute the referral.
• SayEase may later receive conversion, transaction, or commission information from the network or merchant.
• SayEase does not receive the merchant's entire customer account or unrelated personal information merely because an affiliate link was clicked.

Checkout, payment, fulfillment, and customer service for affiliate offers remain with the merchant, under the merchant's own privacy policy. See Affiliate Partners for details. Some recommendations on SayEase are affiliate links, and SayEase may earn a commission from qualifying purchases.

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal information. Contact us to exercise these rights.

We use industry-standard safeguards to protect data. No system is fully secure, and we cannot guarantee absolute security.

Privacy questions: support@sayease.io.