Privacy Policy

Saitoc builds and operates content publishing and business operations tools. This policy covers those tools, including the Google-connected tools identified as "validex" on the Google consent screen. It describes the information we access, why we use it, and how to disconnect an account or request deletion.

What we access

When a client connects their Instagram or Facebook account to our publishing tools (via Meta's APIs), we access only what is needed to publish and measure the content they have asked us to manage: the ability to create posts and stories on their pages and professional accounts, read engagement on that content, and read basic page/account metadata. We do not access their followers' personal data, private messages beyond what a client explicitly asks us to manage, or anything unrelated to the content work.

Google account access

Connecting a Google account is optional and requires your authorization. We use basic account information, such as your email address and name, to identify the account you connected. The consent screen lists the permissions requested for the feature you are enabling.

For receipt reconciliation, we request read-only Gmail access to find billing messages and extract receipt information such as vendor, amount, currency, payment date, and invoice or receipt identifiers. This permission technically allows access to the whole mailbox; the finance collector searches for billing evidence. This read-only connection cannot send, edit, or delete email.

Separately authorized Workspace features may use additional permissions to manage mailbox organization, filters, or selected Drive and Sheets resources. Those permissions are not part of the personal read-only receipt connection. For bank-report intake, we check the permissions and file metadata of the designated private Drive folder. Uploading a statement does not mean its transactions have been reconciled.

What we store

We store client-supplied content, captions, schedules, publishing records, and authorized account credentials. Finance records include extracted receipt facts, source identifiers, and reconciliation findings. The receipt collector processes message text for extraction; its durable reports retain extracted facts rather than email prose. Credentials are kept server-side and are not included in public pages.

What we never do

We do not sell data or use it for advertising. Information may be processed by service providers needed to deliver the authorized work, including hosting, storage, email delivery, and AI-assisted analysis. We do not use client data or Google user data to train generalized AI or machine-learning models.

Google API Limited Use

Saitoc's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Service-provider processing of Google user data is subject to those restrictions.

Deletion

You can disconnect Google access in your Google Account connections, or disconnect Meta access through Business Integrations. Disconnecting an account revokes the connection; it does not automatically delete records already collected. To request deletion of stored content, credentials, or derived records, email tudor@saitoc.me.

We retain records needed for the authorized work and applicable accounting or legal obligations. If an obligation prevents immediate deletion of a requested record, we will explain that restriction. Original files you place in your own Drive remain under your control.

Contact

Questions about this policy: tudor@saitoc.me.

Terms of Service · Saitoc