Privacy Policy

Information we collect and process

We may process contact and business information that a client or authorized user provides, including names, email addresses, business details, service requests, content drafts, media assets, approval records, and support communications.

When an authorized user connects a third-party account, we may receive account identifiers, profile information, OAuth permissions, access and refresh tokens, media or post metadata, publishing status, analytics, comments, and other information covered by the scopes the user approves. We do not ask clients to share social-platform passwords.

We may also collect limited technical information needed to secure and operate the service, such as timestamps, browser or device information, IP-derived security signals, integration health, and audit logs.

How we use information

We use information to provide requested services, authenticate users, connect authorized accounts, prepare and route content for approval, publish only approved content, retrieve authorized account data, measure results, provide support, prevent abuse, and maintain reliable business records.

S4 does not sell personal information. We do not use connected-account information to send unapproved messages or publish content without the applicable authorization and approval.

Prospect service-request communication choices

When optional consent capture is enabled on our contact form, a prospect may separately choose service-request email messages, automated service-request text messages, both, or neither. These choices are initially unchecked and are not required to submit an inquiry or purchase services.

We may retain the submitted destination, selected choices, disclosure version, inquiry receipt identifier, timestamp, and limited request evidence needed to document and honor the choice. Capturing a choice does not establish that email or SMS delivery is active or that a message was delivered.

Mobile information and SMS consent are not sold or shared with third parties or affiliates for marketing or promotional purposes. They may be disclosed to messaging providers and aggregators only as needed to operate the requested messaging service.

Third-party platforms and service providers

Our services may connect to platforms such as Meta, Instagram, Facebook, Threads, TikTok, Google, and other providers selected by a client. Information is sent to or received from those providers only as needed for authorized workflows, and each provider applies its own terms and privacy policy.

We may use vetted infrastructure, hosting, database, security, analytics, and communications providers to operate the service. They receive only the information needed to perform their services and are expected to protect it appropriately.

SMS account alerts

For optional S4 AI Agency SMS account alerts, we collect and retain the business owner’s saved mobile number, authenticated account identity, consent or withdrawal action, disclosure version, timestamp, and delivery records. We use this information to send authorized new-lead, assistant-review, and service-update notifications and honor communication preferences.

Message frequency varies. Message and data rates may apply.

Mobile information and SMS opt-in data or consent are not sold or shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent are excluded from other information-sharing categories in this policy, except disclosure to messaging providers and aggregators needed to operate the SMS service. Twilio processes the destination number and message content for delivery.

You can withdraw consent in your portal’s Notifications settings or reply STOP. Automated lead and assessment alerts link to your authenticated portal rather than including uploaded photos or private lead details. Contact rajat@s4aiagency.com with privacy questions.

Credential security and retention

OAuth grants and other secrets are stored server-side using approved encrypted secret storage. Public client applications do not receive server-only credentials, and secrets are not intentionally placed in public source code.

We keep information only while it is needed to provide the service, maintain security and audit records, meet legal obligations, or resolve disputes. Connected-account tokens are revoked or deleted when the integration is disconnected or when a verified deletion request is completed, subject to limited lawful retention requirements.

Your choices and rights

Authorized users may disconnect a platform through the relevant provider or request that S4 disconnect an integration. You may also request access, correction, or deletion of personal information by contacting us. We may need to verify the requester and their authority over the affected business or account before acting.

For step-by-step deletion instructions, visit our Data Deletion page.

Children, changes, and contact

Our business services are not directed to children under 13, and we do not knowingly collect their personal information. We may update this policy as our services or legal obligations change; the date above shows the latest revision.

Questions or privacy requests may be sent to rajat@s4aiagency.com.