Privacy policy

What this app does

Sunfield Social Studio is an invitation-only workspace for brand teams to plan content, store media, review drafts, communicate and authorize supported social accounts. Sunfield Digital Marketing operates the app.

Information processed

We store team usernames, display names, roles, brand assignments, timezone preferences, password hashes and login sessions; uploaded media and editor projects; drafts, calendar items and team messages. Authorized integrations can provide account IDs and names, access/refresh tokens, products, store reports, supported comments and account statistics. The requested permissions appear on the platform’s official consent screen. We do not collect your social platform password.

How information is used and shared

Information supports the features you use: private brand collaboration, account verification, product planning, reporting and publishing you explicitly request. Brand information is visible to authorized members of that brand. Private teammate conversations are limited to their participants. Infrastructure operators can access data for administration, support and security.

The service uses Vercel for application hosting, Turso for records, and configured brand storage such as Cloudinary or Supabase for media. Supported platforms receive the content and credentials necessary for the actions you authorize. Storage providers process uploaded files and delivery requests. We do not sell integration data, use it for advertising or send it to AI model training through this app.

Google and YouTube

When authorized, the app uses YouTube API Services to identify the selected channel, upload user-selected videos and read supported channel statistics/comments. Google data is used only for these user-facing features and necessary operation/security. Sunfield’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

You can revoke access in Google account permissions. See Google’s privacy policy and the YouTube Terms of Service.

Storage, retention and controls

Integration secrets are encrypted on the server. Passwords are hashed. Access is checked by brand and role. Records and media stay while needed for the workspace, until removed or a deletion request is processed. Trashed media is recoverable for 30 days before cleanup; the ten most recent workspace snapshots are retained for recovery. Social activity caches are hidden after 30 days without refresh and expired cache records are removed by maintenance. Disconnecting a social account removes its local tokens, identity and activity cache. Disconnecting does not delete content already posted on that platform.

Request access, corrections or deletion at kauan@sunfieldmarketing.com. We verify ownership before changing brand or account data. For deletion steps and the effect on backups and published content, see Data deletion.

Updates

This page will be updated when the service’s data practices change. Contact Sunfield before authorizing if you need clarification about a requested permission or data use.