Privacy Policy

1. Introduction

CleanMind ("we", "our", "us") operates the CleanMind platform, a social media automation service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, and password (hashed). If you sign in with Google, we receive your name, email, and profile picture from Google.

Workspace Information: We collect the workspace name and subdomain you choose during onboarding.

Facebook Data: When you connect a Facebook Page, we collect and store your Facebook Page ID, Page name, and a Page-scoped access token. We use this data solely to publish posts to your Page and retrieve engagement analytics on your behalf.

Content Data: We store the posts, materials, and content you create or upload within the platform.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the CleanMind platform
• Authenticate your identity and manage your account
• Publish content to your connected social media accounts on your behalf
• Retrieve and display analytics from your connected social media accounts
• Communicate with you about your account or our services

4. Facebook Data Usage

We access Facebook data through the official Meta (Facebook) API. We request only the permissions necessary to provide our services, including publishing posts and reading Page insights.

We do not sell, rent, or share your Facebook data with any third parties. We do not use your Facebook data for advertising or any purpose other than providing you with the CleanMind service.

You can disconnect your Facebook Page at any time from the Profile page within your workspace. Upon disconnection, all stored Facebook credentials (Page ID, Page name, and access token) are immediately and permanently deleted from our systems.

5. Data Storage and Security

Your data is stored securely using industry-standard practices. Access tokens are stored in our database and are only used server-side to make API calls on your behalf. We use HTTPS for all data transmission and employ secure authentication mechanisms including JWT-based sessions and HMAC-signed tenant tokens.

6. Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties. We may share information only in the following cases:

• With your explicit consent
• To comply with legal obligations or respond to lawful requests
• To protect our rights, privacy, safety, or property

7. Data Retention and Deletion

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us.

When you disconnect a third-party service (e.g., Facebook), all credentials and tokens related to that service are deleted immediately.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Disconnect third-party services and revoke access at any time

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@cleanmind.world.