Privacy Policy - Blue Ocean AI

1. Information We Collect

We collect information to provide and improve our AI-powered content automation services:

Account Information: Name and email address used for account creation and management.
Facebook & Instagram Platform Data: When you connect via Meta, we request the following permissions:
- public_profile: To identify your account and personalize your experience.
- business_management: Required to route Instagram content publishing through your linked Meta Business Manager, enabling cross-platform AI auto-posting.
- instagram_manage_insights: Provide actionable insights by accessing your legacy Instagram metrics.
- instagram_content_publish: To publish AI-generated content and media directly to your Instagram account.
- instagram_basic: Essential reading of your profile data.
- pages_manage_posts: To automatically manage, create, and publish content to your authorized Facebook Pages on your behalf.
- pages_read_engagement: Read organic likes, comments, and shares to analyze and optimize your future scheduled posts.
- pages_show_list: To securely map which of your Facebook Pages you want to connect to our platform.
Usage Data: Information about features used and content generated within the platform.

2. How We Use Information

We use the data collected exclusively for the following purposes:

To provide core AI content generation, image design, and video creation features.
To facilitate the posting and scheduling of content to your authorized Meta accounts.
To analyze page engagement data for marketing recommendations.
To communicate account-related updates and security alerts.
To improve platform features and develop new AI capabilities.

3. Data Sharing & Third Parties

We do not sell your personal data to any third party. We share data only as necessary with:

AI Sub-processors: Prompts may be processed by AI models (e.g., OpenAI). No PII is used for third-party training without consent.
Meta Platforms, Inc.: Data is shared via official Graph APIs to execute your requests.
Cloud Infrastructure: Your data is stored on secure, industry-standard cloud providers.

4. Data Retention

We retain your personal data only for as long as necessary:

Active Accounts: Data is retained for the duration of your active subscription.
Closed Accounts: All personal data is permanently deleted within 30 days of account closure.
Access Tokens: Revoked immediately upon disconnection or account deletion.

5. Data Security

We implement enterprise-grade security measures:

All data transmission is encrypted using SSL/TLS.
Sensitive credentials and tokens are encrypted at rest.
Strict access controls enforced for all production data.
Regular security audits and vulnerability assessments.
Firebase Hosting with built-in DDoS protection.

6. Your Rights & Data Control

We provide users with comprehensive control over their personal data, in compliance with GDPR, CCPA, and Meta's Platform Data Policy:

Right to Access: Request a full export of all personal and platform data we hold about you.
Right to Correction: Request correction of inaccurate or incomplete data.
Right to Deletion: Request permanent removal of your data via our Compliance Center or manual request.
Right to Data Portability: Obtain your data in a structured, machine-readable format.
Right to Transparency: Know exactly how your Meta Platform Data is used, stored, and protected.
Right to Withdraw Consent: Revoke app permissions at any time via Facebook Business Settings.

Exercise Your Rights: Contact our Data Privacy Officer at support@bluescale.media. We acknowledge all requests within 48 hours and fulfill them within 30 days.

Meta Platform Data Policy

As an official Meta Developer, we strictly adhere to the Meta Platform Data Policy:

Strict Use Limitation: Your Meta data is used only to provide the social media management features you explicitly request.
No Data Selling: We never sell, rent, or trade your Meta user data or page insights to third parties.
Clear Attribution: All content published via our platform is clearly labeled in your Meta dashboard history for your audit trail.
Regular Compliance Sync: Our data handling is audited quarterly to ensure continued alignment with Meta's evolving security standards.

AI Data Transparency

We prioritize the integrity of your brand's data when interacting with Artificial Intelligence:

Zero-Training Guarantee: We hold "Enterprise" agreements with our AI sub-processors (e.g., Google Gemini, OpenAI). Your proprietary brand data and prompts are not used to train their public models.
Content Integrity: AI models are used only for generation and suggestion; no automated decisions regarding your account status are made by AI.
Human-in-the-loop: We strictly enforce a review-before-publish workflow to ensure AI content meets your brand standards.

7. Cookies & Tracking Technologies

Our website uses necessary technologies for functionality:

Essential Cookies: Required for authentication and session management.
Facebook SDK: Loaded to facilitate login, governed by Meta's Cookie Policy.
Analytics: Privacy-respecting analytics for general usage patterns.

8. Children's Privacy

Blue Ocean AI is not directed at children under 13. We do not knowingly collect information from children. If you believe such data exists, contact us for prompt deletion.

9. Data Deletion

You may revoke permissions or request full deletion at any time. Visit our Data Deletion Instructions page for details, or disconnect the app via Facebook Settings.

10. Contact Us

For privacy inquiries, please reach out to:

Blue Ocean Marketing Agency, LLC
109 East 17th Street, Suite 25
Cheyenne, WY 82001, USA
Email: support@bluescale.media
Phone: +1 (216) 494-2400
or Phone: +1 (667) 647-8843