This Privacy Policy explains how Iridesa (“Iridesa,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects information when you use our websites, applications, integrations, dashboards, communication tools, social media tools, analytics tools, and related services collectively referred to as the “Service.”
By using the Service, you agree to the collection and use of information as described in this Privacy Policy.
1. Information We Collect
We collect information in the following ways.
A. Information you provide directly
When you create an account, use the Service, join or create a workspace, connect an integration, invite team members, upload content, send messages, create tasks, manage contacts, or use other platform features, we may collect information you choose to provide, including:
- your name;
- your email address;
- your company or organization name;
- your role, title, or team information;
- profile information and profile image;
- workspace, team, and account settings;
- contacts, leads, notes, tasks, calendar items, campaign information, and CRM-related data;
- messages and communications you create, send, receive, or store through the Service;
- files, documents, images, media, and other content you upload or manage;
- social media content, drafts, captions, scheduled posts, published posts, and related metadata;
- preferences, saved layouts, customization settings, and other account-related information.
B. Information from Google sign-in and connected Google services
We use Google account authentication to allow users to sign in. We do not require or store passwords for Google sign-in.
When you sign in with Google or connect supported Google services, we may receive information from your Google account or connected Google services depending on the permissions you grant. This may include:
- your name;
- your email address;
- your profile image;
- your Google account identifier;
- Gmail message metadata or message content when required for user-requested Gmail features;
- Google Calendar event information when required for user-requested calendar features;
- YouTube channel, video, analytics, or related account information when required for user-requested YouTube features.
We only access Google account data and connected Google service data as needed to provide the features you request, such as authentication, Gmail-related workflows, calendar features, YouTube integrations, or other connected-service functionality.
Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements where applicable.
C. Information from Meta/Facebook integrations
If you connect a Facebook account, Facebook Page, Meta Business asset, or other Meta-related integration, we may collect and process information made available through Meta based on the permissions you grant and the Page or asset you choose to connect.
This may include:
- your Facebook account identifier and basic profile information needed for authentication and authorization;
- the Facebook Pages you are authorized to manage;
- the Page name, Page ID, profile image, metadata, and access status;
- Page content metadata, post information, engagement data, and related Page activity;
- Page insights or analytics data, including aggregated or de-identified performance metrics;
- Page access task information, such as whether the connected user has permission to create content or view analytics;
- content you create, schedule, publish, edit, or delete through Iridesa for a connected Facebook Page.
Iridesa uses Meta/Facebook data only to provide the features requested by the user, such as connecting a Facebook Page, displaying Page analytics, confirming the selected Page or business-managed Page asset, and publishing or scheduling Page content.
Iridesa does not publish to personal Facebook profiles. Publishing features are intended for Facebook Pages selected and authorized by the user.
D. Information from other connected third-party services
If you connect other third-party services, APIs, or external accounts, we may collect and process information made available through those services in order to provide the requested functionality.
This may include services such as LinkedIn, YouTube, Google Calendar, Gmail, Google Workspace, website analytics tools, tracking snippets, social media platforms, communication tools, CRM tools, file storage tools, or other integrations supported by Iridesa.
Depending on the integration and permissions granted, this information may include account identifiers, profile information, organization or Page information, posts, messages, analytics, calendar events, email metadata or content, contact information, campaign data, files, and other data necessary to operate the connected feature.
E. Social publishing and scheduled content
If you use Iridesa to create, schedule, publish, edit, or delete content on connected social media platforms, we may collect and process:
- draft content;
- captions, post text, images, files, links, and media;
- scheduled publish dates and times;
- publishing status;
- platform account or Page identifiers;
- post IDs and related metadata returned by the connected platform;
- engagement or performance data where supported by the connected platform.
Iridesa uses this information to create, schedule, publish, display, manage, and track the status of social media content at your direction.
F. Private messages and internal communications
Iridesa may include internal messaging, chat, collaboration, notification, or team communication features. When you use these features, we may collect and store messages, sender and recipient information, timestamps, attachments, read/unread status, reactions, notifications, and related metadata.
We process this information to deliver messages, maintain conversation history, support team collaboration, provide notifications, troubleshoot issues, enforce our Terms of Service, and protect the security and integrity of the Service.
G. Website analytics, tracking snippets, and visitor data
If you install or connect an Iridesa tracking snippet, website analytics integration, Cloudflare-related connection, or similar tracking technology, we may collect website activity and technical information from your websites or connected properties.
This may include:
- page views;
- visits and sessions;
- referring pages;
- UTM parameters and campaign attribution data;
- device type;
- browser type;
- operating system;
- IP address or approximate location derived from IP address;
- timestamps;
- conversion events or other activity configured by the user.
You are responsible for providing any notices, cookie banners, consent mechanisms, or disclosures required by applicable law for websites or properties where you install tracking snippets or analytics tools.
H. Usage, device, and diagnostic information
We may automatically collect limited technical and usage information when you use the Service, such as:
- IP address;
- browser type;
- device type;
- operating system;
- referring pages;
- pages viewed;
- session and activity information;
- feature usage;
- approximate location derived from IP address;
- error logs;
- diagnostic information;
- security events;
- performance data.
We use this information to operate, secure, debug, improve, and analyze the Service.
I. Uploaded files and stored content
We may store files, documents, images, media, and other content uploaded, created, imported, synced, or managed by users through the Service, along with related metadata necessary to operate the platform.
2. Information We Do Not Collect
We do not collect or store passwords for Google sign-in, Facebook Login, or other supported third-party authentication providers. Authentication is handled through the applicable third-party provider.
We do not sell personal information.
We do not use connected Google, Meta, or other third-party integration data for unrelated advertising purposes.
We do not publish social media content unless a user initiates, schedules, authorizes, or configures that publishing action through the Service.
3. How We Use Information
We use information to:
- provide, operate, maintain, and improve the Service;
- authenticate users and manage account access;
- create and manage personal workspaces, team workspaces, organizations, roles, and permissions;
- enable integrations and API-based features requested by users;
- connect and manage Facebook Pages, YouTube accounts, Google services, LinkedIn accounts, and other supported services;
- display analytics, insights, and performance information from connected services;
- create, schedule, publish, edit, or delete social media content when initiated by the user;
- sync, organize, or display calendar, email, CRM, task, contact, campaign, and communication data;
- store and display user content and account data;
- send notifications and support internal messaging features;
- provide customer support;
- monitor performance, troubleshoot issues, and debug errors;
- protect the security, integrity, and availability of the Service;
- detect, prevent, and investigate fraud, abuse, unauthorized access, or security incidents;
- enforce our Terms of Service and other policies;
- comply with legal obligations.
4. Legal Bases for Processing
Where required by applicable law, we process personal information on one or more of the following legal bases:
- your consent;
- performance of a contract with you;
- compliance with legal obligations;
- our legitimate interests in operating, securing, improving, and providing the Service;
- protection of the rights, safety, and security of users, Iridesa, or others.
5. How We Share Information
A. Service providers and infrastructure partners
We may share information with vendors, processors, and service providers that help us operate, host, secure, support, and improve the Service.
These may include hosting providers, database providers, cloud infrastructure providers, security providers, DNS and traffic routing providers, analytics providers, logging and monitoring providers, email providers, customer support tools, and similar service providers.
For example, Iridesa may use providers such as Render for application hosting, backend services, worker processes, database hosting, and operational logs, and Cloudflare for DNS, traffic routing, proxy, security, and related network services.
These providers may process information on our behalf only as needed to provide services to Iridesa. We do not sell personal information to these providers.
B. Connected third-party services
If you choose to connect third-party services such as Google, Gmail, Google Calendar, YouTube, Meta/Facebook, LinkedIn, Cloudflare, social media platforms, or other supported integrations, information may be exchanged between Iridesa and those providers as necessary to enable the requested functionality.
Your use of connected third-party services is also subject to those providers’ own terms, policies, permissions, and privacy practices.
C. Workspace members and team users
If you use Iridesa as part of a team, organization, or workspace, certain information may be visible to other authorized members of that workspace depending on their role and permissions. This may include profile information, tasks, contacts, leads, messages, files, campaigns, connected account status, social media planning information, analytics, and other workspace content.
Workspace administrators may be able to manage users, roles, settings, integrations, and workspace data.
D. Legal compliance and protection
We may disclose information if required to do so by law, subpoena, court order, legal process, or a valid request from a public authority.
Before disclosing information in response to a legal request, Iridesa reviews the request to determine whether it appears legally valid and appropriately scoped. Where appropriate, Iridesa may seek clarification, narrow the request, object to the request, challenge the request, or require additional legal process.
If disclosure is legally required, Iridesa will disclose only the minimum information reasonably necessary to comply with the request. Iridesa may maintain records of legal requests received, including the request, the response provided, the date of response, the information disclosed if any, and the reasoning for the response.
We may also disclose information when we believe disclosure is reasonably necessary to protect our rights or property, investigate fraud, abuse, security incidents, or policy violations, protect users or others, or enforce our Terms of Service.
E. Safety, illegal content, and abuse reports
Users may report content, activity, or behavior that they believe violates our Terms of Service, applicable law, or platform rules. We may review reported content, account information, workspace activity, files, messages, or related metadata as reasonably necessary to investigate the report, enforce our policies, protect users, comply with legal obligations, or respond to unlawful activity.
If we become aware of content or activity that we believe may be illegal or may create a risk of harm, we may take appropriate action, including restricting access, removing content, preserving records, reporting to appropriate authorities where required or appropriate, or cooperating with lawful requests.
F. Business transfers
If Iridesa is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, information may be transferred as part of that transaction, subject to applicable law and appropriate protections.
6. Third-Party Integration Data
A. Google API data
If you connect Google services to Iridesa, Iridesa’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.
We access Google data only as necessary to provide user-requested features. We do not use Google user data for unrelated advertising. We do not sell Google user data.
B. Gmail data
If you connect Gmail, Iridesa may access Gmail information only as needed to provide user-requested Gmail features. Depending on the feature, this may include email metadata, sender and recipient information, subject lines, message content, attachments, labels, timestamps, and related message data.
Iridesa uses Gmail data to provide requested functionality, such as email-related workflows, CRM activity tracking, user-authorized syncing, message organization, or communication features. Iridesa does not use Gmail data for unrelated advertising and does not sell Gmail data.
C. Google Calendar data
If you connect Google Calendar, Iridesa may access calendar information only as needed to provide user-requested calendar features. This may include calendar names, event titles, event descriptions, attendees, locations, dates, times, availability information, reminders, and related event metadata.
D. YouTube data
If you connect YouTube, Iridesa may access YouTube account, channel, video, analytics, or related data depending on the permissions you grant and the features you use. Iridesa uses this data to provide requested YouTube-related functionality, such as displaying connected account information, analytics, or content-related workflows.
E. Meta/Facebook Platform Data
If you connect Meta or Facebook services, Iridesa may access Platform Data only as permitted by Meta and only as needed to provide the features you request.
This may include Facebook Page identity information, Page metadata, Page profile image, connected Page status, Page tasks, Page content metadata, Page engagement data, Page insights, scheduled or published Page post information, and related data for Pages you are authorized to manage and choose to connect.
Iridesa uses Meta Platform Data to provide Page connection, Page analytics, business-managed Page confirmation, and Page publishing/scheduling functionality. Iridesa does not sell Meta Platform Data. Iridesa does not use Meta Platform Data for unrelated purposes. Iridesa does not access Pages that the authenticated user has not authorized or selected.
F. LinkedIn and other social media data
If you connect LinkedIn or other social media services, Iridesa may access account, organization, Page, profile, content, analytics, publishing, or engagement data depending on the permissions you grant and the features you use.
Iridesa uses this data to provide requested social media planning, analytics, publishing, or account management features.
7. User Content and Responsibility
You are responsible for the content you upload, create, send, publish, schedule, store, or otherwise make available through the Service.
You must not use the Service to upload, store, publish, transmit, or manage content that violates applicable law, infringes the rights of others, violates platform rules, or violates our Terms of Service.
When you use Iridesa to publish or schedule content to a connected third-party platform, you are responsible for ensuring that the content complies with that platform’s terms, policies, community standards, advertising rules, and applicable law.
8. Data Storage and Retention
We retain information for as long as reasonably necessary to provide the Service, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce agreements, protect security, and maintain business records.
Uploaded content, account data, workspace data, messages, files, CRM data, integration data, scheduled content, and analytics data may remain stored until deleted by the user, removed through account or workspace administration, disconnected from an integration, or deleted according to our retention practices.
If you disconnect an integration, Iridesa may stop collecting new data from that integration, but previously stored data may remain in your account or workspace unless deleted or unless applicable law or platform rules require deletion.
We may retain limited backup copies, logs, security records, and diagnostic records for a reasonable period for security, compliance, auditing, troubleshooting, disaster recovery, and legal purposes.
9. Account Deletion and Data Deletion
You may request deletion of your account or certain personal information by contacting us at the email listed below or by using any account deletion tools we make available.
If you request deletion, we will delete or de-identify personal information as required by applicable law, subject to exceptions such as legal obligations, security requirements, fraud prevention, dispute resolution, backup retention, or legitimate business records.
If you connected third-party services, you may also need to disconnect Iridesa from those services or revoke permissions through the third-party provider’s account settings.
For Meta/Facebook data deletion requests, you may use our Data Deletion Instructions or contact us at the email below.
10. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure.
These safeguards may include access controls, authentication, encryption in transit, limited access to production systems, logging, monitoring, and other security measures appropriate to the nature of the Service.
However, no system can be guaranteed to be completely secure, and we cannot guarantee absolute security.
11. Your Choices and Rights
Depending on your location and applicable law, you may have rights regarding your personal information, including the right to:
- access personal information we hold about you;
- request correction of inaccurate information;
- request deletion of your information;
- object to or restrict certain processing;
- request portability of certain data;
- withdraw consent where processing is based on consent;
- opt out of certain processing where applicable.
To exercise these rights, contact us at:
[email protected]
You may also control certain information by updating your account settings, disconnecting integrations, deleting content, leaving workspaces, or revoking permissions through connected third-party services.
12. Cookies and Similar Technologies
We and our service providers may use cookies, local storage, pixels, tracking snippets, and similar technologies to operate the Service, remember preferences, maintain sessions, secure accounts, analyze usage, support website analytics, and provide connected features.
If you install an Iridesa tracking snippet or similar technology on your own website, you are responsible for providing any notices, cookie disclosures, consent mechanisms, or opt-out choices required by applicable law.
13. Children’s Privacy
The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13.
If a higher minimum age applies under local law, the Service is not intended for users below that age.
If you believe a child has provided personal information through the Service, contact us and we will take appropriate steps.
14. International Data Transfers
If you use the Service from outside the country where our servers or service providers are located, your information may be transferred to, stored in, and processed in other jurisdictions that may have different data protection laws than your location.
By using the Service, you understand that your information may be processed in the United States or other countries where Iridesa or its service providers operate.
15. Third-Party Services and Links
The Service may interact with or contain links to third-party services, websites, APIs, platforms, or integrations.
We are not responsible for the privacy practices, security, availability, or content of third-party services. Your use of those services is subject to their own terms, policies, and privacy practices.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last Updated” date and may provide additional notice where required.
Your continued use of the Service after changes become effective means you accept the updated Privacy Policy.
17. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Iridesa
Kayla Toomey
[email protected]