Say42 legal

Privacy policy

Updated September 26, 2026

1. Introduction

Say42 ("we," "our," or "us") operates a platform for scheduling and publishing social media posts, built for people who write a lot on Threads and LinkedIn. You write posts and threads, schedule them into the posting times you set, and Say42 publishes them to the accounts you connect and shows how they performed. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our integrations with Pinterest, Instagram, TikTok, LinkedIn, and Threads.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, business information when you create an account
  • Brand Data: Brand names, voice profiles, asset libraries, product catalogs, content briefs, and workflow configurations you create for the brands in your workspace
  • Content Data: Text, images, videos, and other content you create or upload through our platform
  • Communication Data: Messages, feedback, and other communications with us or through our platform

2.2 Information from Social Media Platforms

When you connect your social media accounts (Pinterest, Instagram, TikTok, LinkedIn, and Threads), we may collect:

  • Account information (username, profile details, account ID)
  • Board information (for Pinterest) and similar organizational data from other platforms
  • Published content metadata for performance tracking
  • Engagement metrics and analytics data
  • Comments and direct messages — only if you turn Inbox sync on. Inbox sync is off by default, and comments and direct messages are two separate switches you control per connected account. While a switch is off we discard that content the moment it reaches us: we keep a record that a message arrived, never what it said. Turn a switch off later and we permanently delete everything stored under it, including the original payloads — there is no grace period and nothing kept to restore from.

Who can read your Inbox. Comments and direct messages you sync are readable by everyone you invite to your workspace, not only by people working on the brand the account belongs to. Reading and replying to them is part of running the account, so this is by design. Consider it before turning direct message sync on for an account whose messages are personal.

2.3 Automatically Collected Information

  • Usage data (how you interact with our platform)
  • Device information (IP address, browser type, operating system)
  • Log data (access times, pages viewed, features used)

3. How We Use Your Information

We use the collected information to:

  • Provide Our Services: Enable content creation, management, and collaboration features
  • Platform Integration: Connect with and publish to social media platforms on your behalf
  • Brand Voice Learning: Analyze each brand's existing social content and website copy to build AI voice profiles used for content generation. This analysis uses Claude (Anthropic) for writing quality and GPT-4o (OpenAI) for visual analysis
  • Content Generation: Run publishing workflows that prepare drafts from your brand assets, route them through your review and approval queue, and publish on the schedule you set
  • Analytics: Provide insights and performance metrics for your content
  • Platform Improvement: Enhance our services, develop new features, and fix issues
  • Communication: Send service updates, security alerts, and support messages
  • Compliance: Meet legal obligations and enforce our terms of service

4. Social Media Platform Integration

4.1 Pinterest Integration

Our Pinterest integration complies with Pinterest Developer Guidelines. We:

  • Only access your Pinterest account with explicit authorization through OAuth 2.0
  • Use information from your Pinterest account solely to provide services to you
  • Do not store Pinterest data except for campaign analytics about your own account
  • Do not combine your Pinterest information with data from other users
  • Do not sell or share your Pinterest data with third parties
  • Require your specific knowledge and consent before taking actions on your behalf
  • Ensure all published content links back to its source on Pinterest

4.2 Other Social Media Platforms

Similar privacy and data handling principles apply to our integrations with Pinterest, Instagram, TikTok, LinkedIn, and Threads. We comply with each platform's developer guidelines and data use policies. Specifically, we only access accounts with explicit OAuth authorization, use platform data solely to provide the service, and do not sell or share platform data with third parties.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

  • With Your Consent: When you explicitly authorize us to share information
  • Service Providers: With trusted third-party providers who assist in platform operations (hosting, analytics, AI services)
  • Approval Workflows: Brand data and content drafts may be shared with the people you invite to review or approve them
  • Legal Requirements: When required by law, regulation, or valid legal process
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • Safety and Security: To protect rights, property, or safety of our users or others

6. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

  • Encryption of data in transit and at rest
  • Secure storage of API credentials and access tokens
  • Regular security assessments and updates
  • Access controls and authentication mechanisms
  • Monitoring for unauthorized access or suspicious activity

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. Specifically:

  • Account data: Until you delete your account or request deletion
  • Brand data, assets, and workflow configurations: Until you delete the brand or your account
  • Social media tokens: Until you disconnect the account or tokens expire
  • Analytics data: Up to 2 years for performance insights
  • Log data: Up to 1 year for security and operational purposes

8. Your Rights and Choices

You have the following rights regarding your information:

  • Access: Request a copy of your personal information
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal information
  • Portability: Request your data in a portable format
  • Disconnect: Remove social media account connections at any time
  • Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at [email protected].

9. Online Behavioral Advertising

If you use our platform to provide advertising services that involve online behavioral advertising:

  • You must provide clear notice to users about data collection for advertising purposes
  • You must obtain necessary consents for data sharing with third parties
  • You must provide opt-out instructions, such as through AdChoices (optout.aboutads.info)
  • You must not send us information about users who have opted out
  • You must regularly update data to remove opted-out users

10. Children's Privacy

Our platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our platform and updating the "Last updated" date. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

13. Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Email[email protected]

14. Platform-Specific Compliance

14.1 Pinterest Compliance

In accordance with Pinterest Developer Guidelines:

  • We do not store Pinterest API data except for your account's campaign analytics
  • We call the Pinterest API each time we need to access information
  • We only use information from your Pinterest account to provide services to you
  • We do not offer features that circumvent Pinterest restrictions
  • We ensure all published content maintains proper attribution to Pinterest

14.2 Meta (Instagram) Compliance

We comply with Meta's Platform Policy and Data Use Policy, ensuring proper handling of Instagram data.

14.3 LinkedIn Compliance

We follow LinkedIn's API Terms of Use and ensure proper handling of LinkedIn data and integrations.

14.4 TikTok Compliance

We comply with TikTok's Developer Terms of Service and Content Posting API policies. We only publish content that you have explicitly approved, and we do not access TikTok account data beyond what is required to provide the publishing service.

14.5 Threads (Meta) Compliance

Our Threads integration operates under Meta's Platform Policy. We access Threads accounts solely to publish approved content on your behalf and do not store Threads data beyond what is necessary to confirm successful publication.