Privacy Policy

1. Personal Information We Collect

For the purpose of this Privacy Policy, "Personal Information" means any information relating to an identified or identifiable individual. We obtain Personal Information relating to you from various sources described below.

Where applicable, we indicate whether and why you must provide us with Personal Information, as well as the consequences of failing to do so. If you do not provide Personal Information when requested, you may not be able to use our Service if that information is necessary to provide you with the service.

Registration Information

When you create a Zit Media account, we collect:

• Your name
• Email address
• Password (encrypted and never stored in plain text)
• Time zone

Information from Connected Social Media Accounts

When you connect your social accounts (e.g., Facebook, Instagram, Threads, LinkedIn, TikTok) to Zit Media, we access certain information from those platforms to deliver the Service, including:

• Profile image and display name
• Platform user IDs
• Email address (if granted permission)
• List of Pages, profiles, or organizations you manage
• Access tokens for publishing content on your behalf
• Content of posts you schedule through Zit Media
• Basic engagement data (such as likes, comments, impressions) to the extent permitted by each platform

This data is only used to provide you with the Service you expect and will not be shared with any third parties except as described in this Privacy Policy.

Content You Create

We temporarily store the content you create for scheduling purposes, including:

• Post text, images, and videos you upload
• Scheduled publication times and dates
• Selected target Pages or accounts
• Draft posts and saved content

Automatically Collected Information

When you use our Service, our servers automatically record information, including:

• Device information (browser type, operating system, device type)
• IP address and general location data
• Usage data (features used, pages visited, time spent in app)
• Log data and error reports for debugging and improving our service
• Referral source (how you arrived at our service)

Customer Support

We collect information through your communications with our customer support team, including the contents of messages, screenshots, or other materials you provide.

2. How We Use Your Information

We use the Personal Information we collect for the following purposes:

• Provide Our Services: To create and manage your account, publish and schedule your content to your connected social accounts, and deliver the core functionality of Zit Media
• Authentication & Security: To verify your identity, manage account authentication (including two-factor authentication), and protect against fraud, abuse, or security issues
• Analytics & Insights: To show you metrics about your scheduled posts and help you understand your social media performance
• Communication: To send you service-related announcements, respond to your inquiries, provide customer support, and send important updates about our Service
• Product Improvement: To operate, evaluate, and improve our Service, including developing new features, analyzing how the Service is used, and debugging technical issues
• Personalization: To tailor our Service to your preferences and remember your settings
• Legal Compliance: To comply with legal obligations, enforce our Terms of Service, and protect our legal rights

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

With Social Media Platforms

We use official platform APIs (for example, Meta's Graph API, the LinkedIn API, and TikTok Content Posting API) to publish your content to your connected Pages or profiles. When you schedule a post, we transmit that content to the selected platforms on your behalf. For TikTok specifically, we collect technical information about your device and browser (including IP address, geographic location, language settings, and browser type) to provide the content posting functionality and ensure compliance with TikTok's policies. This data collection is performed by our service for operational and technical purposes, and all data handling complies with TikTok's Developer Terms and data protection requirements.

With Service Providers

We engage trusted third-party service providers to perform functions and provide services to us, such as:

• Cloud hosting and infrastructure (e.g., Vercel, AWS)
• Analytics and performance monitoring
• Email delivery services
• Customer support tools

We only share Personal Information necessary for these providers to perform their functions, and we require them to maintain the privacy and security of the information they process on our behalf.

Legal Requirements

We may disclose your information when required by law, legal process (including subpoenas), or to protect our rights, property, or safety, or the rights, property, or safety of others.

Business Transfers

In connection with a merger, acquisition, reorganization, sale of assets, or similar transaction, your information may be transferred. You will have the opportunity to opt out if the new entity's planned processing differs materially from this Privacy Policy.

4. How We Protect Your Information

We take data security seriously and implement industry-standard measures to protect your Personal Information:

• Encryption: All data transmission is encrypted using SSL/TLS protocols
• Secure Storage: Access tokens and sensitive data are encrypted at rest
• Access Controls: Strict authentication requirements and role-based access controls limit who can access user data
• Regular Audits: We conduct regular security audits and apply updates promptly
• Password Security: We never store your social media passwords—authentication is handled through secure OAuth flows

Please be aware that no security measures are perfect or impenetrable. While we strive to protect your information, we cannot guarantee absolute security. We will make legally-required disclosures of any breach of security, confidentiality, or integrity of your unencrypted Personal Information via email or conspicuous posting on our site in the most expedient time possible.

5. Data Retention

We retain your information only as long as necessary to provide our services and comply with legal obligations. Here's how long we keep different types of data:

• Published posts: Removed from our servers immediately after successful publication to your social media account
• Scheduled posts: Retained until they are published, then automatically deleted
• Draft posts: Retained until you delete them or delete your account
• Account information: Retained until you delete your account
• Logs and analytics data: Retained for 90 days for debugging and service improvement
• Support communications: Retained for up to 2 years to improve customer service

When you delete your account, we will delete or anonymize your Personal Information within 30 days, except where we must retain it to comply with legal obligations or resolve disputes.

6. Your Rights and Choices

You have the following rights regarding your Personal Information:

• Access: You can request a copy of the Personal Information we hold about you
• Correction: You can update or correct inaccurate information through your account settings or by contacting us
• Deletion: You can request deletion of your account and all associated data at any time through your account settings or by emailing privacy@zit.media
• Revoke Access: You can disconnect your connected social accounts at any time through each platform's settings or through Zit Media's account settings
• Data Portability: You can request an export of your data in a machine-readable format
• Opt-Out of Communications: You can unsubscribe from marketing emails by clicking the unsubscribe link in any email or contacting us
• Object to Processing: In certain circumstances, you can object to our processing of your Personal Information

To exercise these rights, please contact us at privacy@zit.media. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

Like many websites, we use cookies and similar technologies to improve your experience, understand how our Service is used, and provide certain features.

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period).

How We Use Cookies

• Essential Cookies: Required for the Service to function, including authentication and security
• Analytics Cookies: Help us understand how visitors use our Service so we can improve it
• Preference Cookies: Remember your settings and preferences for a better experience

Managing Cookies

Most browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or delete cookies. However, if you disable or refuse cookies, some features of our Service may not function properly.

8. Third-Party Services

Our Service integrates with third-party services, including social platforms such as Facebook, Instagram, Threads, LinkedIn, and TikTok. When you use these integrations:

• You authorize Zit Media to access and use information from these services on your behalf
• Your use of third-party services is subject to their own terms and privacy policies
• We have no control over how third-party services use your information once it's shared

Please review the privacy policies of the platforms you connect, including Facebook, Instagram, Threads, LinkedIn, and TikTok. Once content is published to a social platform, it is subject to that platform's data practices and policies.

TikTok-Specific Disclosures: When you use TikTok integration, we act as a data processor on your behalf. We use TikTok's Content Posting API and other developer tools to enable you to upload videos and manage drafts on TikTok from within our platform. We collect and process the following data as required by TikTok's Developer Terms:

• Technical information: IP addresses, device information, browser type, geographic location, and language settings
• TikTok user IDs and access tokens for content posting
• Videos and content you upload through our service to TikTok
• Metadata about your TikTok content (publication times, privacy settings, captions)

We do not sell or disclose TikTok user data for cross-context behavioral advertising. We implement appropriate security measures to protect TikTok Developer Services Data from unauthorized access, alteration, or destruction. TikTok data is retained only as long as necessary to provide you with scheduling services, and in accordance with TikTok's Developer Terms of Service and Data Sharing Agreement.

9. International Data Transfers

Zit Media is based in the United States. Your information may be transferred to and maintained on servers located in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your country.

When we transfer Personal Information from the European Economic Area (EEA), United Kingdom (UK), or Switzerland to other countries, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with this Privacy Policy and applicable data protection laws.

10. Children's Privacy

Our Service is not intended for users under the age of 18. We do not knowingly collect Personal Information from children under 18. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at privacy@zit.media, and we will delete that information from our systems.

11. GDPR Compliance

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR) and similar data protection laws.

Legal Basis for Processing

We process your Personal Information based on the following legal grounds:

• Contract: Processing necessary to provide our Service to you
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our Service, fraud prevention, and security
• Consent: Where you have given explicit consent for specific processing activities
• Legal Obligation: Where processing is necessary to comply with legal requirements

Your GDPR Rights

Under GDPR, you have the right to:

• Access your Personal Information
• Rectify inaccurate Personal Information
• Erase your Personal Information (the "right to be forgotten")
• Restrict processing of your Personal Information
• Data portability
• Object to processing based on legitimate interests
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with a supervisory authority

To exercise these rights, please contact us at privacy@zit.media.

12. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your Personal Information.

Your California Rights

You have the right to:

• Know: Request information about the Personal Information we collect, use, disclose, and sell (if applicable)
• Delete: Request deletion of your Personal Information
• Opt-Out: Opt-out of the "sale" of your Personal Information (Note: We do not sell Personal Information)
• Non-Discrimination: Not be discriminated against for exercising your CCPA rights

Categories of Personal Information

In the preceding 12 months, we have collected the following categories of Personal Information:

• Identifiers (name, email, IP address)
• Internet or network activity (usage data, log data)
• Commercial information (content you create for scheduling)
• Geolocation data (general location based on IP)

We do not sell your Personal Information. We may share your information with service providers as described in this Privacy Policy, but we do not sell it for monetary or other valuable consideration.

To exercise your California privacy rights, please contact us at privacy@zit.media.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will update the "Last updated" date at the top of this page
• For material changes, we will notify you by email or through a prominent notice in our Service
• We encourage you to review this Privacy Policy periodically

Your continued use of our Service after we publish or send a notice about changes to this Privacy Policy means you are consenting to the updated policy.

14. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.