Privacy Policy

1. Information We Collect

We collect information to provide and improve our AI-powered content automation services:

• Account Information: Name and email address used for account creation and management.
• Facebook & Instagram Platform Data: When you connect via Meta, we request the following permissions to enable specific features:
  • public_profile: To identify your account and personalize your experience.
  • business_management: To coordinate your business assets for AI integration and manage business-level settings.
  • instagram_basic & instagram_content_publish: To read your Instagram profile data and publish AI-generated images, videos, and carousels to your Instagram account.
  • pages_manage_posts & pages_show_list: To list your Facebook Pages so you can select which ones to connect, and to publish AI-generated content directly to those Pages.
  • pages_read_engagement: To read post engagement metrics (likes, comments, shares, reach) so our AI can analyze performance and optimize future content strategy.
• Usage Data: We may collect information about how you interact with our service, such as features used and content generated.

2. How We Use Information

We use the data collected exclusively for the following purposes:

• To provide core AI content generation, image design, and video creation features.
• To facilitate the posting and scheduling of content to your authorized Facebook Pages and Instagram accounts via official Meta APIs.
• To analyze page engagement data and provide AI-driven marketing recommendations and content optimization.
• To communicate account-related updates, security alerts, and support responses.
• To improve and develop new features for the platform.

3. Data Sharing & Third Parties

We do not sell your personal data to any third party. We share data only as necessary with:

• AI Sub-processors: Content prompts may be processed by AI models (e.g., OpenAI) to generate your content. No personal identifying information (PII) is used for third-party AI model training without your explicit consent.
• Meta Platforms, Inc.: Data is shared with Meta via their official Graph API to execute your posting, scheduling, and analytics requests.
• Cloud Infrastructure: Your data is stored on industry-standard cloud hosting providers with enterprise-grade security.

4. Data Retention

We retain your personal data only for as long as necessary to provide our services:

• Active Accounts: Data is retained for the duration of your active subscription.
• Closed Accounts: Upon account closure or deletion request, all personal data and generated content are permanently deleted within 30 days.
• Access Tokens: Facebook/Instagram access tokens are stored securely and revoked immediately upon disconnection or account deletion.

5. Data Security

We implement industry-standard security measures to protect your data:

• All data transmission is encrypted using SSL/TLS protocols.
• Access tokens and sensitive credentials are encrypted at rest.
• We enforce strict access controls — only authorized personnel can access production data.
• We conduct regular security audits and vulnerability assessments.
• We use Firebase Hosting with built-in DDoS protection and CDN.

6. Your Rights (CCPA / GDPR)

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Deletion: Request permanent deletion of your data (see our Data Deletion page).
• Right to Object: Object to the processing of your data for certain purposes.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Withdraw Consent: Revoke any previously granted permissions at any time through your Facebook Settings or by contacting us.

To exercise any of these rights, contact us at support@bluescale.media. We will respond within 30 days.

7. Cookies & Tracking Technologies

Our website may use the following technologies:

• Essential Cookies: Required for the website to function properly (authentication, session management).
• Facebook SDK: The Meta JavaScript SDK is loaded to facilitate the Facebook Login flow. This SDK may set cookies as part of the authentication process, governed by Meta's own Cookie Policy.
• Analytics: We may use privacy-respecting analytics to understand general usage patterns. No personally identifiable tracking is performed without consent.

8. Children's Privacy

Blue Ocean AI is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@bluescale.media and we will promptly delete that information.

9. Data Deletion

You may revoke permissions or request full data deletion at any time. Visit our Data Deletion Instructions page for step-by-step instructions, or disconnect the Blue Ocean AI app via your Facebook Privacy Settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. For significant changes, we will notify users via email or a prominent notice on our website. Your continued use of the service after any changes constitutes acceptance of the updated policy.

11. Contact Us

For any privacy-related inquiries or requests, please contact us:

Blue Ocean Marketing Agency, LLC
109 East 17th Street, Suite 25
Cheyenne, WY 82001, USA
Email: support@bluescale.media
Phone: (949) 416-3601