Privacy and data use

What we store

We store the minimum application data needed to operate the client portal.

• Account email and Supabase Auth user identifier.
• Social account names, IDs, scopes, connection metadata, and token expiration metadata.
• Encrypted OAuth access tokens needed to post or manage connected social accounts.
• Admin-only Make posting target metadata used to route approved automation requests.

What we do not store

Passwords are handled by Supabase Auth and are not stored in our application database or frontend code.

• Plain-text passwords.
• Raw OAuth tokens in browser storage.
• Server-only Supabase service keys or social app secrets in frontend code.

Ownership

All client account data, connected social account data, uploaded content, generated content, and posting assets are owned by you. We use that data only to provide the services you authorize.

Contact

For privacy questions or requests, email support@immersivea.com.