Consultwise LLC · Legal information

Privacy Policy

How S4-Social Loop handles account, business, social-platform, and content information.

Effective date: 2026-09-16

1. Who this policy covers

Consultwise LLC ("we," "us," or "our") operates S4-Social Loop, a service for managing business profiles, creating content, connecting social accounts, and scheduling or publishing posts. This policy covers information handled through our service, not the independent practices of Facebook, Instagram, or other providers.

Businesses and workspace administrators decide what information they add and who may access their workspace. If a business uses the service to process information about you, you may also need to contact that business. We will help identify the appropriate party for a request.

2. Information we handle

• Account and workspace information: names, email addresses, password hashes, membership and access roles, business identifiers, and account status.
• Brand and business information: business names, website addresses, contact details, locations, logos, colors, services, audience descriptions, and other information supplied in the Brand Kit or retrieved from a public business website you ask us to analyze.
• Social connection information: authorized account or Page identifiers, display names, granted permissions, and access or refresh tokens used to connect to a platform.
• Content: drafts, captions, uploaded reference images, generated media, publishing destinations, schedules, and publishing results.
• Engagement information: available post metrics and, where the feature is enabled and authorized, comments, messages, mentions, sender identifiers or names, and related timestamps.
• Operational information: activity records, connection and job errors, AI request inputs and outputs, and technical logs. Hosting services may also record IP addresses, browser details, request paths, and timestamps.

Sources include you, authorized workspace members, connected social platforms, public websites you provide, and service providers that process your requests.

3. How we use information

We use information to provide and secure accounts, manage workspace access, maintain business profiles, connect authorized destinations, create or refine requested content, schedule and publish approved posts, show available engagement information, troubleshoot failures, respond to support and privacy requests, and meet applicable legal obligations.

When data-protection law requires a legal basis, the relevant basis may be performing our agreement with you, legitimate interests in operating and protecting the service, consent where required, or compliance with a legal obligation. The appropriate basis depends on the information, purpose, and our role in the processing.

4. Facebook, Instagram, and other connections

Connecting a platform authorizes the access shown in that platform's permission process. Depending on the permissions and features available, we use the connection to identify destinations, publish or manage requested content, retrieve metrics, or handle authorized inbox activity. We do not need your social-platform password.

You can disconnect a destination in S4-Social Loop and separately remove the app's access through the platform's own settings. Disconnecting removes the local connection; it is not a request to erase all account records, logs, media, or posts already published on that platform. See our Data Deletion Instructions.

5. AI features and uploaded media

When you request an AI feature, we may send the content needed for that request—such as your prompt, caption, business details, brand assets, and uploaded reference image—to the configured AI provider. The application supports OpenAI and Anthropic for applicable features. Providers process information under the relevant service terms and account settings; this policy does not promise that a provider never retains inputs or uses them for model improvement.

AI request inputs, responses, and errors can also appear in our operational logs. Do not upload confidential, sensitive, or third-party information unless you have the right to use it and are comfortable with this processing. Read the AI & Automation Notice for the review duties and feature limitations that apply.

6. Who receives information

Information may be available to authorized workspace members and administrators, our service operators, hosting and infrastructure providers, configured AI providers, and social platforms you connect. Email providers may process support or account messages. Recipients receive information appropriate to their function; their independent services may have their own privacy terms. The Service Provider Notice identifies supported provider categories and explains that only enabled features apply.

We may disclose information when required by law, to respond to a valid legal request, or as necessary to investigate abuse and protect people or the service. Publicly published posts can be seen, copied, and retained by others.

Providers and users may process information in countries other than your own. Applicable transfer requirements and safeguards depend on the processing location and relevant law.

6a. Government Data Request Policy

This section is effective September 18, 2026. It applies to requests from government or public authorities for information held through S4-Social Loop, including information received from connected social platforms. It does not authorize access to our systems or create an automatic reporting arrangement.

Responsibility and legal review

Requests should be directed to [email protected]. Do not send passwords, access tokens, or unnecessary personal information. The responsible company owner or an authorized, designated reviewer coordinates the response and obtains qualified legal advice when needed. Before disclosing personal information, we review the request's authenticity, the authority's identity and powers, legal basis and jurisdiction, scope, deadlines, and applicable restrictions. We seek clarification where validity or our obligations are uncertain. Where we hold information on behalf of a customer, we also consider the customer's role and our applicable contractual obligations.

Unlawful or excessive requests

Where a request appears unlawful or exceeds the authority's powers, we escalate it for legal review and use appropriate available procedures to question, object to, challenge, or seek withdrawal or narrowing of the request, as permitted by law. We record the action taken and the basis for our decision. This is not a promise to litigate every request or disregard a binding legal obligation.

Minimum necessary disclosure

When disclosure is legally required or otherwise lawfully justified, we limit it to information necessary for the specific authorized purpose and scope. We review the response for unrelated information, narrow or redact it where appropriate, and verify the recipient and transmission method. A request does not by itself justify handing over credentials or unrestricted system access; any demand for such access receives separate legal and security review.

Documentation and protection of records

We maintain restricted records of requests, verification and review steps, responsible personnel, decisions and their legal basis, challenges or scope changes, communications, and any information disclosed, including when and to whom. The reviewer documents a retention period appropriate to the request, applicable obligations, and any legal hold. Records are kept only as long as necessary for those purposes, with periodic review, limited access, and protection for legally privileged material where applicable. We avoid unnecessary duplicate personal information in the request register.

Preservation, confidentiality, and urgent requests

We assess preservation duties, confidentiality requirements, and notification restrictions before acting. We do not destroy or alter information subject to a valid preservation obligation. Urgent requests are escalated promptly for verification and legal assessment appropriate to the circumstances; urgency alone does not establish authority to access information. Customer or user notification is assessed against applicable law and contractual duties, including restrictions that may prohibit notification.

Review of this procedure

The responsible reviewer reviews the procedure after a material change or an actual request and addresses identified gaps. Material revisions require approval and an effective date. This policy does not assert that we have or have not received requests or disclosed information in the past.

7. Cookies and security

The application uses session and security cookies to keep users signed in and protect requests. Browser storage may retain interface preferences or work in progress. Connected third-party services can set their own cookies under their policies. See the Cookie Notice.

The application uses access controls, hashed account passwords, and encrypted storage for social connection credentials. These protections do not mean that every stored record or log is encrypted, or that any online service is completely secure.

8. Retention and deletion

Retention depends on why information is held: active accounts and content support the service; operational and audit records help investigate failures, prevent abuse, and meet applicable obligations. Archiving a business or disconnecting a social account is different from permanent deletion.

Our target is to acknowledge a deletion request within 7 calendar days and complete eligible deletion from active systems within 30 calendar days of receipt, after appropriate verification. Applicable law may require a different deadline. We will explain any lawful extension, verification issue, or information that must be retained.

Our backup-retention limit is 90 calendar days. Residual copies in routine backups may remain until those backups expire; retained copies should not be returned to ordinary use, and completed deletions must be reapplied following a recovery. Provider-held copies follow the provider's applicable terms and our available contractual controls.

9. Your choices and requests

You can edit available profile or Brand Kit fields, manage authorized workspace access, and disconnect social destinations. Depending on applicable law, you may also have rights to access, correct, delete, restrict, object to processing, receive a portable copy, withdraw consent, or complain to a relevant regulator. These rights are subject to applicable conditions and exceptions.

Send requests to [email protected]. We may ask for proportionate information to verify your identity and authority over a workspace. Do not send passwords or access tokens. See the deletion request steps and Privacy Choices page for details.

10. Changes

We will identify revisions using the effective date on this page. Where required, we will provide additional notice or obtain consent for material changes before they apply.