Privacy Policy

Effective date: September 13, 2026

S’amores (“S’amores”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal data.

This Privacy Policy explains how we collect, access, use, store, share and protect information when you use the S’amores website, applications, tools and related services (collectively, the “Services”), including when you connect third-party accounts or services to S’amores.

This Privacy Policy applies both to information you provide directly to us and to information that you authorize us to access through connected third-party services.

1. Information We Collect

Depending on the features you use, we may collect or process the following categories of information.

1.1 Information you provide directly

This may include:

• name;
• email address;
• telephone number;
• contact information;
• messages, questions or support requests;
• information submitted through forms;
• content, notes, research, goals, planning information or other information you choose to enter into the Services;
• information you voluntarily provide when subscribing to an email list or other communication.

1.2 Website and technical information

When you use our website or Services, we may automatically receive technical information such as:

• IP address;
• browser and device information;
• operating system;
• pages or features used;
• approximate timestamps of activity;
• cookies and similar technologies;
• diagnostic, security and error information.

We use this information to operate, secure, analyze and improve the Services.

1.3 Information from connected services

If you choose to connect a third-party account or service, S’amores may access information made available through that provider’s authorized API and only within the permissions you grant.

Depending on the integration and permissions selected, this may include information from services such as:

• Meta and Instagram;
• TikTok;
• Google and YouTube;
• Google Analytics;
• Google Ads and YouTube advertising;
• Microsoft OneDrive;
• MailerLite;
• other analytics, advertising, email, storage, website, form or marketing services that you choose to connect.

The information accessed may include, depending on the provider:

• account and profile identifiers;
• account names and authorized account information;
• social media publications and publication metadata;
• publication dates, formats and platform information;
• social media performance metrics;
• audience and follower statistics;
• comments or audience interactions where access is specifically authorized;
• advertising campaign, ad, creative and performance information;
• advertising spend and conversion metrics;
• website and analytics information;
• email marketing statistics;
• subscriber or conversion statistics;
• files or media that you explicitly select or authorize the Services to access;
• other data included within the specific permissions you approve.

S’amores will request only the permissions reasonably necessary to provide the features you choose to use.

Connecting a service does not authorize S’amores to collect all information available in that account.

1.4 Authentication and connection information

When you connect an external service, we may process authentication tokens, connection identifiers and related technical credentials necessary to maintain the authorized connection.

We do not request your password for third-party services.

Authentication credentials and access tokens are used only to provide and maintain the authorized integration and are protected using appropriate security measures.

2. How We Use Information

We may use information for the following purposes:

• to provide and operate the Services;
• to authenticate users and maintain authorized account connections;
• to organize and manage content and publications;
• to schedule or publish content when you explicitly use those features and the connected platform permits them;
• to retrieve and display authorized social media, analytics, advertising or marketing data;
• to analyze content and publication performance;
• to track audience growth and business goals;
• to analyze advertising performance;
• to measure clicks, conversions and marketing outcomes;
• to help evaluate content formats, topics, campaigns and experiments;
• to organize audience questions, interests and research;
• to provide market and audience intelligence where supported;
• to generate marketing recommendations;
• to provide AI-assisted analysis and conversational features;
• to generate drafts, summaries or proposed actions at your request;
• to improve the functionality and reliability of the Services;
• to diagnose technical problems;
• to prevent fraud, misuse and security incidents;
• to respond to requests and provide support;
• to communicate with you about the Services;
• to comply with legal obligations.

S’amores does not automatically publish content, change business goals, alter advertising campaigns or take other consequential actions unless the relevant feature clearly provides for that action and you have authorized it.

3. Connected Accounts and Third-Party APIs

Connected services remain governed by the terms and privacy policies of their respective providers.

When you authorize a connection, S’amores accesses information only through permitted methods and only for the purposes disclosed in this Privacy Policy and within the Services.

You may disconnect supported integrations through the Services where that functionality is available or directly through the relevant third-party provider.

Disconnecting a service prevents future access through that authorization. Data previously obtained may be deleted, de-identified or retained only where permitted and necessary for legitimate historical, legal, security or service purposes, subject to applicable provider requirements and your rights described below.

4. Google API Data

If you connect a Google service, S’amores may access Google user data only according to the permissions you authorize and only to provide the relevant user-facing features.

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Where Google Workspace data or other Google API data is subject to Limited Use requirements:

• we use the data only to provide or improve user-facing features that you request;
• we do not sell Google user data;
• we do not rent or license Google user data to data brokers or information resellers;
• we do not use Google user data for targeted, personalized or interest-based advertising;
• we do not use Google user data to determine creditworthiness or for lending purposes;
• we do not transfer Google user data except where permitted by Google policies and with any required user consent;
• human access to such data is restricted to circumstances permitted by applicable Google policies, such as with your explicit consent, for security purposes or where legally required;
• we do not use Google user data to train or improve generalized artificial intelligence or machine-learning models beyond uses specifically permitted by applicable Google policies;
• we request only the Google API scopes necessary for the functionality you choose to use;
• we do not request broader permissions solely for possible future features.

Where Google requires data to be refreshed, deleted or retained for a limited period, S’amores will comply with those requirements.

5. Meta and Instagram API Data

If you connect a Meta service, including Facebook or Instagram, S’amores may access Meta Platform data only according to the permissions you authorize and only for the user-facing features associated with those permissions.

Data obtained through Meta APIs is used only for purposes consistent with the functionality disclosed to you and permitted by Meta’s applicable platform terms and policies.

With respect to data obtained through Meta APIs:

• we do not sell Meta Platform data;
• we do not rent, license or disclose Meta Platform data to data brokers or information resellers;
• we do not use Meta Platform data for unrelated advertising or profiling purposes;
• we do not use Meta Platform data for purposes outside the functionality authorized by the user;
• we do not use Meta Platform data to train or improve generalized artificial intelligence or machine-learning models;
• we limit access to Meta Platform data to systems, service providers and personnel necessary to provide, secure or support the authorized functionality;
• we request only the permissions reasonably necessary for the features you choose to use;
• we delete, de-identify or stop processing Meta Platform data when required by applicable Meta policies, when authorization is revoked, or when a valid deletion request requires us to do so.

Where Meta requires a specific data-deletion mechanism, deauthorization callback, deletion callback, retention period or other provider-specific process, S’amores will follow those requirements for the relevant integration.

6. TikTok API Data

If you connect a TikTok service, S’amores may access TikTok data only according to the permissions you authorize and only for user-facing features associated with those permissions.

TikTok permissions are requested at the scope level, and you may be able to approve only a subset of the scopes requested. You may also revoke authorization through TikTok where supported.

Data obtained through TikTok APIs is used only for purposes consistent with the functionality disclosed to you and permitted by TikTok’s applicable developer terms, policies and product-specific requirements.

With respect to data obtained through TikTok APIs:

• we do not sell TikTok data;
• we do not rent, license or disclose TikTok data to data brokers or information resellers;
• we do not use TikTok data for unrelated advertising or profiling purposes;
• we do not use TikTok data for purposes outside the scope authorized by the user;
• we do not use TikTok data to train or improve generalized artificial intelligence or machine-learning models;
• we limit access to TikTok data to systems, service providers and personnel necessary to provide, secure or support the authorized functionality;
• we request only the permissions reasonably necessary for the features you choose to use;
• we retain or cache TikTok API data only for the period permitted by TikTok’s applicable developer terms, product documentation and data-retention requirements;
• when continued authorization, reauthorization or refresh is required to retain or update TikTok data, we follow the applicable TikTok requirements;
• we delete, de-identify or stop processing TikTok data when required by TikTok’s applicable policies, when authorization is revoked, or when a valid deletion request requires us to do so.

If TikTok imposes provider-specific retention, cache, refresh, revocation or deletion requirements for a particular API product or category of data, those requirements will take precedence over any broader retention period described elsewhere in this Privacy Policy.

7. Artificial Intelligence Features

S’amores may provide optional artificial intelligence features, including marketing analysis, summaries, classification, recommendations and conversational tools such as Ask Marketing.

When an AI feature is used, we may send a limited amount of relevant information to an AI service provider in order to generate the requested result.

We aim to minimize the information sent and, where practical, use aggregated, structured or de-identified information rather than unnecessary personal information.

For example, marketing analysis generally does not require customer names, telephone numbers, delivery addresses or other direct identifiers.

Information obtained through third-party APIs will not be used with AI features where doing so would violate the applicable provider’s platform terms, developer policies, Limited Use requirements or data-use restrictions.

Data obtained through Google, Meta, TikTok or another connected service will not be used to train or improve generalized artificial intelligence or machine-learning models where such use is prohibited by the relevant provider or applicable law.

AI-generated interpretations, summaries or recommendations are not treated as authoritative facts. The Services may distinguish between:

• measured information;
• deterministic calculations;
• AI-generated interpretations;
• hypotheses or proposed actions.

Where an AI-generated proposal could create or modify a business record or trigger another action, the Services may require explicit confirmation before applying that proposal.

8. Audience and Market Intelligence

Where supported, S’amores may process audience or market signals from:

• connected accounts;
• information you manually enter or import;
• authorized provider APIs;
• licensed data sources;
• publicly available information where collection and use are permitted.

Such information may be used to identify topics, questions, interests, trends or market signals.

External market signals do not automatically represent the views or interests of S’amores customers, followers or users.

We do not intentionally use prohibited scraping methods, bypass technical access controls or collect information through methods that violate applicable provider terms.

Coverage of market or audience information may be incomplete and may vary according to provider availability, account permissions and applicable platform restrictions.

9. Sharing of Information

We may share information only where necessary for the operation of the Services.

9.1 Service providers

We may use companies that help us provide infrastructure or functionality, including:

• hosting and database providers;
• analytics providers;
• cloud storage services;
• email service providers;
• authentication providers;
• artificial intelligence service providers;
• security and monitoring providers;
• other technical processors necessary to operate the Services.

These providers may process information only as necessary to provide their services to us and subject to applicable contractual, platform and legal obligations.

9.2 Connected services

Information may be transmitted to a connected platform when you request an action involving that platform, such as:

• publishing content;
• retrieving analytics;
• obtaining advertising information;
• accessing a selected file;
• synchronizing authorized data.

9.3 Legal requirements

We may disclose information when reasonably necessary to:

• comply with applicable law;
• respond to valid legal process;
• protect our legal rights;
• investigate fraud or security incidents;
• protect users or the public from harm.

9.4 Business transactions

Information may be transferred as part of a merger, acquisition, restructuring or sale of all or part of the business, subject to applicable legal and provider requirements.

We do not sell personal data to data brokers.

We do not sell data obtained through connected APIs.

We do not use data obtained through connected APIs to create advertising profiles for unrelated third parties.

10. Data Retention

We retain personal data only for as long as reasonably necessary to:

• provide the Services;
• maintain information you choose to preserve;
• comply with contractual or platform requirements;
• comply with applicable law;
• resolve disputes;
• maintain security;
• enforce our agreements.

Different categories of information may have different retention periods.

Data obtained from connected services is retained only where permitted by the relevant provider and applicable law.

Where a provider imposes a more restrictive retention or cache period, the provider-specific requirement will apply.

If a connected provider requires information to be deleted, refreshed or otherwise handled differently following revocation, disconnection or another event, we will follow those requirements.

Backups may retain deleted information temporarily until they are overwritten according to the applicable backup retention cycle, unless faster deletion is legally, contractually or platform-required.

11. Disconnecting Third-Party Accounts

You may revoke S’amores’ access to connected services through the relevant provider or through the Services where a disconnect function is available.

After authorization is revoked:

• S’amores will stop requesting new data using that authorization;
• authentication credentials associated with that connection will be invalidated or removed as appropriate;
• scheduled or automated operations dependent on that authorization may stop functioning;
• previously stored information will be handled according to this Privacy Policy, applicable law and the relevant provider’s requirements.

Revoking authorization does not necessarily delete your S’amores account or information that you entered directly into the Services.

12. Data Deletion Requests

You may request deletion of personal information associated with you or your connected account.

To request deletion, email:

[email protected]

with the subject:

Data Deletion Request

Please provide enough information for us to identify the relevant account or connected service.

Do not send passwords, access tokens, secret keys or other authentication credentials.

We may need to verify that you are authorized to make the request.

Following a valid deletion request, we will delete or de-identify applicable information without undue delay, except where retention is:

• required or permitted by law;
• necessary for security;
• required to establish, exercise or defend legal claims;
• required or permitted under applicable provider policies;
• otherwise necessary for a lawful purpose.

There is no fee for submitting a valid data deletion request, except where applicable law permits a fee for manifestly unfounded or excessive requests.

Where a third-party platform provides its own authorization or data-management controls, you may also revoke access directly through that platform.

13. Your Privacy Rights

Depending on where you live, you may have rights including:

• the right to know what personal data we process;
• the right to access your personal data;
• the right to correct inaccurate information;
• the right to request deletion;
• the right to restrict certain processing;
• the right to object to certain processing;
• the right to data portability where applicable;
• the right to withdraw consent where processing is based on consent;
• the right to lodge a complaint with an applicable data-protection authority.

To exercise these rights, contact:

[email protected]

We may request reasonable information to verify your identity before fulfilling a request.

14. Legal Bases for Processing

Where applicable data-protection law requires a legal basis for processing, we may process personal data on the basis of:

• consent, including when you authorize a connected account or optional feature;
• performance of a contract, when processing is necessary to provide the Services you request;
• legitimate interests, including operating, protecting and improving the Services, provided those interests are not overridden by your rights;
• legal obligations, when processing is required by applicable law.

You may withdraw consent for optional processing at any time, although this does not affect processing that occurred lawfully before withdrawal.

15. International Data Transfers

The Services and third-party providers we use may process information in countries other than the country where you live.

Where required, we use appropriate safeguards for international transfers of personal data and require service providers to comply with applicable data-protection obligations.

The privacy and data-transfer practices of independently connected third-party services are also governed by their own policies.

16. Cookies and Similar Technologies

Our website or Services may use cookies or similar technologies for purposes such as:

• essential functionality;
• authentication and security;
• remembering preferences;
• understanding usage;
• analytics.

Where required by law, non-essential cookies will be used only after obtaining appropriate consent.

You may manage cookies through your browser settings and, where available, through cookie controls provided by the website.

17. Data Security

We use reasonable administrative, technical and organizational safeguards designed to protect information against:

• unauthorized access;
• accidental loss;
• alteration;
• disclosure;
• destruction;
• misuse.

Access credentials and third-party authorization tokens are protected, and access is limited to systems, service providers or personnel that require them to deliver or support the Services.

Where appropriate, security measures may include encrypted communications, access controls, server-side credential storage, logging, rate limiting and other safeguards.

However, no online service or storage system can guarantee absolute security.

If we become aware of a data incident, we will take appropriate steps in accordance with applicable legal, contractual and platform requirements.

18. Data Minimization and Least Privilege

We aim to collect and process only information reasonably necessary for the functionality being provided.

Third-party API permissions are requested according to the principle of least privilege.

We do not request broader access merely because that information may be useful for unspecified future features.

Where supported by the provider, permissions may be requested incrementally when a feature requiring that permission is used.

19. Children

The Services are not designed or intentionally directed toward children.

We do not knowingly collect personal data from children in violation of applicable law.

If you believe that a child has provided personal information to us improperly, contact [email protected] so that we can investigate and take appropriate action.

20. Third-Party Services

The Services may contain links to or integrations with third-party websites, platforms and services.

Those third parties operate independently and have their own privacy policies and terms.

This Privacy Policy does not govern information that a third party processes independently of S’amores.

We recommend reviewing the privacy policies, authorization screens and permissions of any service you choose to connect.

21. Changes to This Privacy Policy

We may update this Privacy Policy when:

• our Services change;
• integrations or data practices change;
• legal or regulatory requirements change;
• third-party platform requirements change.

The current version will be published on this website with its effective or updated date.

If a material change affects how previously authorized third-party data is used, we will provide additional notice or obtain renewed consent where required.

22. Contact

For questions, privacy requests or data-deletion requests, contact:

S’amores
Email: [email protected]
Website: samor.es

For data deletion, use the subject line:

Data Deletion Request