Privacy Policy

This policy explains what information EchoLink Solutions (“we”) collects when you use The Portal (the “Service”), how we use it, and the choices you have. We collect only what we need to run the Service, and we do not sell your personal information.

Information we collect

• Account information: your email address and a securely hashed version of your password (we never store the password itself), plus when you accepted our Terms.
• Connected accounts: when you connect a platform, we receive and store what’s needed to post for you — such as access tokens, refresh tokens or keys, and the account’s ID and display name (for example a Page name, @handle, channel, board, subreddit or business location). For most platforms you sign in on the platform’s own page and we never see your password. For a few (such as Ghost, Pulswitch, or the optional Bluesky/WordPress password methods) you give us an app-specific key or password, which we store to post for you.
• Your content: the posts you write and schedule, any photo or video you attach, which accounts they go to, and the result from each platform (such as the post’s ID and link, or the error).
• Billing: our payment processor, Stripe, collects your payment details. We receive your Stripe customer ID, subscription status and renewal date — never your full card number.
• Growth stats: once a day we ask each connected platform for that account’s public follower count and keep the daily number. If you turn on link tracking, links in your posts are replaced with short Portal links; when someone clicks one we count the click (date, platform and post) and send them on to the real page — we don’t store the clicker’s IP address or identity.
• Website visit counter (optional): if you add our counter code to your own website, each page view sends us the page path, the referring site, and the date. We use the visitor’s IP address and browser only briefly, in memory, to tell apart unique visitors for that day; it is never stored and is forgotten within 24 hours. The counter sets no cookies, doesn’t follow visitors across sites, and is skipped for visitors whose browser sends “Do Not Track” or Global Privacy Control. If you install it, you’re responsible for mentioning it in your own site’s privacy notice where your law requires.
• Comments and replies (optional): if you turn on Replies for a brand, we read new comments on that brand’s own Facebook and Instagram posts — the comment text, the commenter’s display name or @username, the time, and which post it’s on — so you can answer them from The Portal. We keep each comment and the reply sent to it. Suggested replies are written by Claude (Anthropic) from the comment and your brand profile; Anthropic processes that text under its own terms.
• Technical data: basic logs such as IP address, browser type and errors, used for security, preventing abuse, and fixing problems.

How we use it

• To provide the Service: sign you in, connect your accounts, prepare your media, and publish your posts where and when you choose.
• To keep connections working: refreshing sign-ins with each platform and alerting you when an account needs reconnecting.
• To bill you, provide support, send essential service emails (such as password resets), and keep the Service secure.

We don’t use your content or connected-account data for advertising, we don’t sell it, and we don’t use it to train AI models.

Data from Google, Meta and other platforms

We access and use data from connected platforms only to provide the features you use — mainly publishing your posts and showing you which accounts, Pages, boards or locations you can post to. The Portal’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We follow the equivalent rules of Meta, X, LinkedIn, Pinterest, Reddit and the other platforms we integrate with.

Who we share it with

• The platforms you choose: your posts and media are sent to the accounts you select, and are then governed by that platform’s privacy policy.
• AI assistants you connect: if you connect Claude (by Anthropic) to your Portal account, Claude can read your connected account names, posts, calendar and library, and create drafts, at your request. Anthropic handles that data under its own terms and privacy policy. You can disconnect it at any time in Settings.
• Service providers who help us run the Service under contract: hosting (Render), database (Neon), payments (Stripe) and email delivery. They may only use the data to provide their service to us.
• Legal reasons: if required by law, or to protect the rights, safety and security of our users, the public, or us.
• Business transfers: if the business is merged or sold, this information may transfer to the new owner under this policy.

How long we keep it

• Attached photos and videos are deleted from our servers shortly after the post is delivered (kept up to 7 days if a post failed, so you can retry). Attachments sent to platforms that display them directly from our link are kept while your account is open.
• Photos and videos you save to your Library stay until you delete them or your account.
• Your post history stays until you remove it or delete your account.
• Daily follower counts, link clicks and website visit totals stay until you delete your account (they’re deleted with it).
• Comments collected for Replies, and the replies sent, are kept for 60 days after they were answered or skipped, then deleted.
• Connected-account tokens are deleted as soon as you disconnect that account.
• When you delete your account, we delete your account, connections, tokens, posts, attachments, growth stats and collected comments right away. Stripe keeps billing records as required by law, and backups and logs roll off within 30 days.

Security

We use HTTPS for everything, hash passwords, sign session cookies, restrict access to stored credentials to the server that needs them, and never send tokens or keys to your browser. No system is perfectly secure, so please use a strong, unique password.

Your choices and rights

• Disconnect any account in one click from Accounts, and revoke access from the platform’s own settings at any time.
• Change your password in Settings, or delete your account and all its data from Settings → Delete account (see Data deletion).
• Depending on where you live (for example California or the EU/UK), you may have rights to access, correct, delete or port your data and to object to certain processing. Email us to exercise them; we will not discriminate against you for doing so.

Children

The Service isn’t for anyone under 18, and we don’t knowingly collect information from children.

International users

The Service is operated from the United States. If you use it from elsewhere, your information will be processed in the United States.

Changes

We’ll post any changes here and update the date above; for material changes we’ll also notify you in the dashboard or by email.

Contact

Privacy questions or requests: interlinkalliance@outlook.com