Allred Collective Media ("Allred Collective Media," "we," "us," or "our") operates allredcollective.com (the "Site") and a self-hosted Postiz social media management service at postiz.allredcollective.com (the "Postiz Service"). This Privacy Policy explains what information we collect from visitors and authorized users, how we use it, and the choices you have. By using the Site or Postiz Service, you agree to the practices described here.
Information We Collect
We collect information in the following ways:
- Information you submit directly. When you fill out a contact form, request a free audit, or otherwise reach out through the Site, we collect the information you provide — typically your name, email address, company name, phone number (if given), and the details of your message or project.
- Form processing. Form submissions on this Site are handled by FormSubmit, a third-party form delivery service, which routes your submission to our inbox. We do not independently store submissions in a separate database beyond what arrives by email.
- Local preferences. The Site stores a single, non-identifying preference in your browser's local storage (your light/dark theme selection). This stays on your device and is not transmitted to us.
- Standard technical data. Like most websites, our hosting and infrastructure providers may log basic technical information (such as IP address, browser type, and pages visited) for security and performance purposes.
- Connected-platform information. When an authorized user connects a third-party account to the Postiz Service, we may receive account and profile information; usernames, profile names, account IDs, Page IDs, organization IDs, board IDs, business location IDs, and similar identifiers; OAuth tokens and granted permissions; and content, media, scheduling, and publishing information needed to provide the requested functionality.
Postiz Service and Connected Platforms
The Postiz Service provides social media and online business profile management, scheduling, and publishing functionality. Its primary integrations may include Facebook, Instagram, Threads, LinkedIn, Pinterest, and Google Business Profile. It may also support additional services made available through Postiz. Not all integrations are necessarily enabled or used at all times.
Connected platforms use their own APIs and OAuth authorization systems. Depending on the platform and permissions granted, the Postiz Service may identify accounts, Pages, profiles, organizations, boards, or business locations an authorized user may manage; create and schedule posts; publish text, links, images, videos, Pins, business updates, and other supported content; manage scheduled content; and maintain an authorized integration.
Facebook, Instagram, and Threads
The Postiz Service may use APIs provided by Meta to connect authorized Facebook, Instagram, and Threads accounts. Information received from Meta is used only to connect authorized accounts, identify accounts or Pages the user may manage, create and schedule content, publish supported content at the user's request, and maintain the authorized integration. Meta user data is not sold, rented, or used for unrelated advertising purposes.
The Postiz Service may connect to LinkedIn through LinkedIn APIs and authorization services. Information received from LinkedIn may be used to authenticate authorized users, identify profiles or organizations the user is permitted to manage, and schedule or publish content requested by the user. LinkedIn data is not sold or used for unrelated advertising purposes.
The Postiz Service may connect to Pinterest through Pinterest APIs and authorization services. Information received from Pinterest may be used to authenticate authorized users, identify authorized accounts or boards, and create, schedule, or publish Pins and other supported content requested by the user. Pinterest data is not sold or used for unrelated advertising purposes.
Google Business Profile
The Postiz Service may connect to Google services, including Google Business Profile, through Google APIs and OAuth authorization. When authorized, information received from Google may be used to identify and manage Google Business Profiles and business locations the user is authorized to access, publish supported business updates and media, maintain the authorized connection, and perform other supported actions explicitly requested by the user.
Google user data is not sold, rented, or used for unrelated advertising purposes. Our use and transfer of information received from Google APIs will comply with applicable Google API Services User Data policies and requirements.
How We Use Information
We use the information collected through the Site to:
- Respond to inquiries, quote requests, and audit requests
- Communicate with current and prospective clients about our services
- Improve the content, functionality, and performance of the Site
- Maintain the security and integrity of the Site
- Authenticate users and connected accounts
- Maintain authorized third-party integrations
- Create, schedule, and publish content at an authorized user's request
We do not sell your personal information, and we do not use the information you submit for advertising retargeting.
How We Share Information
We do not share the information you submit with third parties except:
- With service providers who help us operate the Site or deliver our services (such as our form processor or hosting provider), solely for that purpose
- If required by law, subpoena, or other legal process
- To protect the rights, property, or safety of Allred Collective Media, our clients, or others
Information may also be transmitted to a connected platform when necessary to perform an action requested by an authorized user. For example, content intended for Facebook, Instagram, or Threads must be transmitted to Meta; content intended for LinkedIn must be transmitted to LinkedIn; Pins must be transmitted to Pinterest; and Google Business Profile content must be transmitted to Google.
Authentication Tokens and Credentials
Third-party integrations generally use OAuth or similar authorization mechanisms. Where supported, users authorize the Postiz Service without providing their third-party account passwords directly to us. The Postiz Service may store access tokens, refresh tokens, or similar authorization credentials when necessary to maintain a connected account and perform requested actions. These credentials are used only to provide the authorized integration.
Data Storage and Security
We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction. No internet-based service can guarantee absolute security. Users should protect their own login credentials and promptly revoke access to connected platforms if they believe an account or authorization has been compromised.
Data Retention
We retain inquiry, project, and connected-account information only for as long as reasonably necessary to provide the applicable service, maintain authorized integrations, secure the service, and meet legal or accounting obligations. When an integration or account is disconnected, associated authorization information may be deleted when it is no longer required.
Disconnecting Connected Accounts
Authorized users may disconnect connected accounts through the Postiz Service when that functionality is available. Users may also revoke authorization through the account, application, privacy, or security settings provided by the applicable third-party platform. Revoking authorization may prevent the Postiz Service from accessing or publishing to that account.
Your Choices
You may request access to, correction of, or deletion of personal information associated with the Site, Postiz Service, or connected accounts by following our Data Deletion Instructions or emailing [email protected]. Please provide enough information for us to identify the relevant account or integration, and do not send passwords, access tokens, or other sensitive authentication credentials by email. We will respond within a reasonable timeframe.
Third-Party Services
Connected platforms are independently operated and maintain their own privacy policies, terms of service, developer policies, and data practices. Use of Facebook, Instagram, Threads, LinkedIn, Pinterest, Google Business Profile, or another connected service remains subject to the policies and terms of the respective provider.
Children's Privacy
The Site and Postiz Service are intended for business use and are not directed at children under 13. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Continued use of the Site after changes are posted constitutes acceptance of the updated policy.
Contact Us
Questions about this Privacy Policy can be sent to [email protected].