Effective date: October 20, 2026

This Privacy Policy explains how McFarlane Marketing LLC ("McFarlane Marketing," "we," "us") collects, uses, shares and protects information in connection with Social Studio OS, your workspace, the Social Studio OS Community and our website (together, "the Service"). It is written in plain language. If you have a question, email info@mcfarlanemarketing.com.

1. Our role

• For your account, membership and billing information, we decide how and why it is used. We are the controller (or "business") of that information.
• For the content and other people's information you put into your workspace (for example your brand materials, your posts, or personal data of your own clients or audience), you decide the purpose, and we process it on your behalf as your service provider (or "processor"). Our Data Processing Addendum covers that role.

2. Information we collect

• Account and membership information: your name, email address, business name, plan, and sign-in details. Sign-in is handled by our authentication provider; we do not see your password.
• Billing information: payments are handled by our payment provider. We receive your plan, payment status and the last digits and type of your card, but not your full card number.
• Workspace content: brand profiles, voice and audience notes, ideas and stories, posts and captions, images, video, audio, documents, comments, and the other material you add. Voice or video features send audio to a transcription provider to turn speech into text.
• Connected social accounts: when you connect an account, our publishing partner holds the sign-in tokens, and we hold the connection details we need (such as the account name and status). We receive the analytics you authorize, such as followers, reach, impressions, engagement and post performance.
• Ad data (read-only): if you connect a Facebook Page or ad account and grant that permission, we read ad spend and ad performance so we can report it. We do not create, edit, pause or spend money on ads for you. The permission screen shown by our publishing partner may list extra permissions that the partner's service requests (such as ad management). We do not use those to create or change ads.
• Support and communications: messages you send to Help, "Report a problem," email, or the community, and the replies.
• Usage and security information: actions taken in the Service, error logs, and technical details such as browser type and IP address, used to run, secure and improve the Service.
• Community content: what you post in the community, and your public member profile.

We do not collect your social media passwords. We do not knowingly collect information from anyone under 18.

3. How we use information

• to provide, operate, secure and support the Service and your membership;
• to create drafts, recommendations and reports with AI;
• to publish content you approve to the accounts you connect, and to show your analytics;
• to process payments, send receipts, and manage renewals, pauses and cancellations;
• to send service messages such as approvals, reconnection reminders, deletion warnings and security notices;
• to answer questions, fix problems, and improve the Service;
• to keep the community safe and enforce our Terms and Acceptable Use & Community Guidelines;
• to meet legal obligations.

We do not sell your personal information, and we do not share it for advertising. We do not use advertising or cross-site tracking cookies on the Service.

4. Types of service providers who help us

We use trusted providers to run the Service. Each receives only the information it needs for its job and is bound to protect it:

• sign-in and account security;
• database and file storage;
• hosting and delivery;
• AI tools that draft content and recommendations;
• audio transcription;
• email delivery;
• payments and subscription management;
• the community platform;
• scheduling and publishing tools; and
• the social networks you choose to connect (such as Facebook, Instagram, LinkedIn, X, Pinterest and YouTube), limited to the permissions you approve.

A current list of the specific providers is available on request at info@mcfarlanemarketing.com.

5. Artificial intelligence

When you use an AI feature, the relevant content is sent to our AI provider to produce your result. We do not use Your Content to train AI models, and under their current business terms our AI providers do not use it to train theirs. The in-app Help assistant answers questions about using the app. It sees your question and your role and plan, not your workspace contents, and it cannot act on your behalf. Please do not enter passwords or highly sensitive information into AI features or Help.

6. How we share information

We share information only: with the providers in Section 4; with the social networks you connect, to publish and to read analytics; with your workspace team members as you set up; where you ask us to; where the law requires; to protect rights, safety and security; or as part of a merger, financing or sale of the business, with notice to you. Community posts are visible to other community members.

7. How long we keep information

• Account, workspace and content: while your membership is active. After it ends, your workspace is paused and kept for at least 90 days so you can renew or request an export; after that we may delete it, with at least 14 days' email notice.
• Post photos and videos: automatically deleted six (6) months after the post is published; for a post that was never sent, six (6) months after it was created. We email the workspace at least fourteen (14) days before. The post's text, schedule and performance data are not deleted by this.
• Archived Story Bank stories: a story you have used is archived; six (6) months after it was archived, the story, its comments and its attached files are permanently deleted, with an email at least fourteen (14) days beforehand. Moving a story back to Active restarts the clock. Stories that are not archived are not deleted by this schedule.
• Files uploaded for client intake: deleted automatically after they are processed.
• Billing and tax records, and security and audit logs: kept as long as needed for legal, accounting and security purposes.
• Backups: copies in routine backups are removed in their normal cycle.

8. Security

We protect information with encryption for sensitive credentials, separation between workspaces enforced by the database, access controls, secure connections, and monitoring. No method of storage or transmission is completely secure. If we learn of a breach that affects your information, we will notify you and the authorities as the law requires.

9. Your choices and rights

Wherever you live, you can ask us to: tell you what we hold about you, correct it, delete it, give you a copy, or stop using it for a purpose. You can also withdraw consent where we rely on it, and you can disconnect any social account at any time in the Service or in the platform's settings. To make a request, email info@mcfarlanemarketing.com. We may need to confirm who you are. We respond within thirty (30) days (and tell you if we need more time, as the law allows). If you are not happy with our response, tell us and we will review it again; you may also contact your state or national data protection authority.

• California: we do not sell or share personal information as those terms are defined in California law, and we do not use it for cross-context behavioral advertising.
• EU and UK: we process personal data on the legal bases of performing our contract with you, our legitimate interests in running and securing the Service, your consent where you give it, and legal obligations.
• Deleting data from connected platforms: to have information we received through a connected social platform deleted, disconnect the account and email us. We will delete it within thirty (30) days, except for what we must keep by law.

10. Google and YouTube

If you connect YouTube directly, our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. By connecting YouTube you also agree to the YouTube Terms of Service, and Google's Privacy Policy applies. You can revoke our access at Google's security settings.

11. Cookies

The Service uses only the cookies that are necessary to keep you signed in and secure. We do not use advertising or analytics tracking cookies on the Service. Our community platform, payment provider and the social networks use their own cookies under their own policies.

12. International use

We are based in the United States and process information here. If you use the Service from another country, your information will be transferred to and processed in the United States.

13. Changes

We may update this policy. For material changes we will email workspace administrators and update the date above.

14. Contact

McFarlane Marketing LLC, 5245 Elmore Ave., #1112, Davenport, IA 52807 · info@mcfarlanemarketing.com