Privacy Policy

1. Introduction

Garden Prayer Publishing LLC (“we,” “us,” or “our”) operates the Garden Prayer Campaign Engine (“Campaign Engine”), a marketing automation platform accessible at campaigns.gardenprayerpublishing.com. This Privacy Policy explains how we collect, use, store, and protect information when you use the Campaign Engine, including its integration with Meta platforms (Facebook and Instagram).

By using the Campaign Engine, you agree to the practices described in this policy. If you do not agree with this policy, please do not use the Campaign Engine.

2. Information We Collect

2.1 Information You Provide

• Account information: Name and email address used to access the Campaign Engine.
• Business information: Business name, industry, target audience details, and marketing strategy content entered into campaign playbooks.
• Content: Text, images, and other media you create or upload for social media campaigns.

2.2 Information from Meta Platforms

When you connect your Meta (Facebook/Instagram) account to the Campaign Engine, we access the following data through the Meta Graph API with your explicit authorization:

2.3 Automatically Collected Information

• Usage data: Pages visited within the Campaign Engine, feature interactions, and timestamps.
• Performance data: Post engagement metrics (likes, comments, shares, reach) collected from Meta's API to score content performance.

3. How We Use Your Information

We use collected information to:

• Operate the Campaign Engine: Create, schedule, and publish social media content to your connected Facebook Page and Instagram account.
• Generate content: Use your playbook strategy (audience segments, messaging pillars, brand positioning) to generate AI-powered social media posts tailored to your business.
• Analyze performance: Score published posts based on engagement data to inform recommendations and improve future content generation.
• Automate scheduling: Queue posts at optimal times for each platform based on your configured cadence and timezone.
• Maintain your connection: Manage and refresh Meta access tokens to ensure uninterrupted service.

4. Data Storage and Security

• Hosting: The Campaign Engine is hosted on Vercel with data stored in Supabase (PostgreSQL), both utilizing industry-standard encryption in transit (TLS) and at rest.
• Access tokens: Meta access tokens are stored securely in our database and are only used to perform authorized actions on your behalf. Tokens are automatically refreshed before expiration.
• Access control: The Campaign Engine is access-controlled. Only authenticated users can view or manage campaign data.
• Retention: We retain your data for as long as your account is active. Upon disconnecting your Meta account or requesting data deletion, we remove associated Meta tokens and cached platform data within 30 days.

5. Data Sharing

We do not share your personal information or Meta data with third parties except in the following limited circumstances:

• Service providers: We use Vercel (hosting), Supabase (database), and Anthropic (AI content generation) as infrastructure providers. These services process data on our behalf under their respective privacy policies and data processing agreements.
• Meta Platforms: Content you create and approve is published to your Facebook Page and/or Instagram account through Meta's API, as directed by you.
• Legal requirements: We may disclose information if required by law, court order, or governmental regulation.

6. Your Rights and Controls

You have the following rights regarding your data:

• Disconnect Meta: You can disconnect your Meta account from the Campaign Engine at any time through the business settings page. This revokes our access to your Facebook Page and Instagram account.
• Revoke via Facebook: You can remove the Campaign Engine's access at any time through Facebook Settings → Business Integrations.
• Data deletion: You may request deletion of your data by contacting us at the email address below. We will process deletion requests within 30 days.
• Access and portability: You may request a copy of the data we hold about you by contacting us.

7. Meta Platform Terms

Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies, including:

• We only request permissions necessary to provide Campaign Engine functionality.
• We do not use Meta data for purposes unrelated to the Campaign Engine's core features.
• We do not sell Meta user data to third parties.
• We do not use Meta data for surveillance or to discriminate against individuals.
• We provide a mechanism for users to request deletion of their data.

8. Data Deletion Requests

To comply with Meta Platform requirements, we support data deletion requests. If you wish to have your data deleted:

• Disconnect your Meta account from the Campaign Engine, or
• Remove the Garden Prayer Campaigns app from your Facebook Business Integrations, or
• Email us at the address below with the subject line “Data Deletion Request”

Upon receiving a deletion request, we will delete your Meta-related data (access tokens, page information, post metrics, and cached content) within 30 days. We will confirm deletion via email.

9. Children's Privacy

The Campaign Engine is a business tool and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy at this URL and updating the “Last Updated” date above. Continued use of the Campaign Engine after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: