Privacy policy

What we collect

When you submit our contact form we collect what you type: your name, business name and email, and optionally your phone number, website or social profile, role, budget range, interests and message. Our server also records a one-way hashed form of your IP address to limit spam; the inquiry record does not store your raw IP address. Hosting, security and delivery logs may contain IP addresses.

How we use it

Only to respond to your inquiry and, if you become a client, to deliver our services. We do not sell or rent your information, and we do not add you to marketing lists without asking.

Who we share it with

Your submission is emailed to us through our email provider so we can reply. Videos on this site may be embedded from YouTube (using its privacy-enhanced mode), TikTok or Vimeo; those services apply their own privacy policies when you press play. This website is delivered through Cloudflare, which processes basic request data to protect and serve the site.

Cookies

We use a first-party session cookie to protect forms, keep Studio users signed in, limit repeated event submissions, and retain campaign tags from a tagged visit until you submit an inquiry or the session ends. We count contact-button clicks, email/phone-link clicks and completed inquiries on our own server. These aggregate event records contain a date, page path, action and count, without a visitor ID. Inquiry records may include campaign source, medium and campaign name to help us understand where inquiries came from. We do not use third-party advertising trackers or cross-site tracking cookies.

Your choices

You can ask us to see, correct or delete the information you've submitted by contacting us through the contact page.

Garnet Studio (client portal)

Clients use Garnet Studio at /portal to see their content calendar, upload photos and videos, approve posts, message us, and connect social media accounts so we can publish on their behalf.

Account information. We store your name, business name, email address, a securely hashed password, your time zone and notification preference, plus the files, notes and messages you send us.

Connected social accounts. When you connect TikTok, Instagram, Facebook, YouTube or X, you sign in on that platform's own page. We never see your password. The platform gives us your account or page ID, display name, username and profile picture, and access tokens limited to the permissions you approve: publishing videos and photos, and (for Facebook and Instagram) listing the Pages and Instagram professional accounts you manage. Tokens are encrypted at rest. We use approved access to publish content on your Garnet Studio calendar and collect available performance statistics, including views, likes, comments, shares, saves, and aggregate follower or subscriber counts. We store reporting snapshots and display them in your private portal and our client workspace. We do not retrieve your direct-message contents, individual follower lists or ad accounts through this reporting feature. We do not sell or rent platform data.

Google / YouTube. Garnet Studio uses YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service, and Google's handling of your data is covered by the Google Privacy Policy. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke our access at any time from your Google security settings.

Files you upload are stored on our servers so we can edit and publish them. To let a platform fetch a file when it publishes, we create a private link that expires within a few days.

Disconnecting and deletion. Disconnecting an account in the portal deletes its stored tokens right away. You can also remove our access from the platform's own settings. To delete your Studio account, files and connection data, see data deletion.

Public website measurement

We measure public page requests, referral website names, campaign sources, form activity and call/text link clicks. To estimate daily browsers, our measurement logs use a one-way identifier derived from the day, IP address and browser information; it changes daily and is not a verified person count. These measurement records do not contain raw IP addresses, query strings or form contents. First-party session cookies retain referral information and protect event submissions. We do not use this measurement on private account or credit-application screens.

AI-assisted copy

When our team requests AI-generated platform copy, we send the selected business name, the content description entered for that request, and the chosen platforms to Anthropic's Claude API. The copy-writing request does not automatically include uploaded videos, private client notes, messages or social account credentials. Our team can review and edit the generated copy before saving or publishing it.

Reporting records

Disconnecting a social account removes its stored access tokens and stops future reporting collection. Existing content and reporting records can remain in Studio until deleted as part of a client account data-deletion request.

Changes

If this policy changes, we'll update the date at the top of this page.