Privacy Policy

Last updated: [Effective Date]

[Company Legal Name] ("we", "us", "our") operates Stanmer Archiving at archiver.mobious.me (the "Service"). The Service lets organizations archive content from social media accounts they own or manage. This policy explains what information we collect, how we use it, and the choices you have.

1. Who this policy applies to

• Customers: organizations that subscribe to the Service, and the users they authorize.
• People whose content appears in a customer's archive, for example someone who commented on a customer's YouTube video or Facebook Page. For that content, our customer is the data controller and we process it on the customer's behalf and according to the customer's instructions.

2. Information we collect

• Account information: name, email address, organization name and a securely hashed password.
• Connected platform data: when you connect a YouTube channel, X account or Facebook Page, we receive an access token and, with your authorization, retrieve that account's content: posts, videos, captions, descriptions, media, comments and replies, engagement counts, and public profile information.
• Usage and security data: sign-in times, IP addresses and actions taken in the Service, recorded in an audit log for security and compliance.
• Billing information: processed by our payment provider, [Payment Processor]. We do not store full payment card numbers.

3. How we use information

We use information only to:

• provide the Service, including archiving, search, export and scheduled synchronization;
• secure accounts and prevent fraud and abuse;
• provide support and communicate with you about the Service;
• process subscription billing; and
• comply with legal obligations.

We do not sell personal information. We do not use archived content for advertising, and we do not use it to train artificial intelligence or machine learning models.

4. Google user data

We request read-only access to YouTube data solely to archive the connected channel for the customer who authorized it. We do not transfer this data to others except as necessary to provide the Service, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to users. Our staff do not read this data except with the customer's permission, when necessary for security purposes, or to comply with applicable law. YouTube data is also subject to the Google Privacy Policy.

5. Meta and X data

We access Facebook Page data and X account data only with the account owner's authorization, and only to archive that account for the customer. Our use of this data complies with the Meta Platform Terms and the X Developer Agreement and Policy.

6. How we share information

We share information only with service providers that help us operate the Service, under agreements that require them to protect it:

• [Hosting / Backup Provider] (infrastructure and backups)
• [Payment Processor] (billing)
• [Email Provider] (transactional email)

We may also disclose information when required by law, to protect the rights and safety of our users or the public, or in connection with a merger, acquisition or sale of assets. A customer's archive is visible only to that customer's authorized users.

7. Security

Data is encrypted in transit using TLS. Platform access tokens are encrypted at rest. Each customer's data is logically isolated from other customers', and security-relevant activity is recorded in an audit log that cannot be altered. No system is perfectly secure; if a breach affects your information, we will notify you as required by law.

8. Retention and deletion

• Archived content is retained until the customer deletes it or closes their account.
• After an account is closed, we delete its data from active systems within [30] days and from backups within [90] days.
• Customers can disconnect a platform account at any time. This stops further collection and deletes our stored access token.
• You can also revoke our access directly from your Google, Facebook or X account settings.

See Data deletion for step-by-step instructions.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict its processing. To exercise these rights, contact [[email protected]]. If your information appears in a customer's archive, we will refer your request to that customer as the data controller and assist them in responding. We will not discriminate against you for exercising these rights.

10. Cookies

We use a single essential cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

11. Children

The Service is intended for businesses and organizations. It is not directed to children under 16, and we do not knowingly collect their personal information.

12. Where data is stored

Data is stored and processed in [the United States].

13. Changes to this policy

We will post any changes on this page and update the date above. If we make material changes, we will notify customers by email before they take effect.

14. Contact us

[Company Legal Name]
[Business Address]
[[email protected]]