Privacy Policy

1. Information We Collect

1.1 Account Information

When you create a Shopybook account, we collect:

• Name and email address
• Business information (company name, type, address)
• Phone number (optional)
• Profile picture (optional)

1.2 Social Media Account Information

When you connect social media accounts, we collect:

• Social media usernames and profile information
• Access tokens to post on your behalf
• Public profile data from connected platforms
• Post performance metrics and analytics

1.3 Usage Information

We automatically collect:

• Log data (IP address, browser type, operating system)
• Device information
• Usage patterns and feature interactions
• Performance metrics
• Page visits including route names, duration, and session identifiers

This data is used to monitor platform performance, identify popular and underutilized features, and improve user experience. For authenticated users, we track usage under legitimate interest to provide and improve our services. For anonymous visitors, page visit tracking is activated only upon your consent via our tracking consent banner.

1.4 AI-Powered Analytics

We use AI (Claude by Anthropic) to analyze aggregated, anonymized usage patterns to identify usability issues and improve the platform. Specifically:

• No personal data is sent to AI services. We only share aggregated statistics (total visits, page counts, error rates)
• No emails, names, IP addresses, or user IDs are included in AI analysis prompts
• AI analysis is used solely to identify difficult-to-use pages and improve user experience
• Data sent to Anthropic is subject to their privacy policy

2. How We Use Your Information

We use your information to:

• Provide Services: Enable social media posting, scheduling, and analytics
• Account Management: Create and maintain your account
• Communication: Send service updates, notifications, and support
• Improvement: Analyze usage to improve our platform
• Security: Protect against fraud and unauthorized access
• Compliance: Meet legal obligations

3. Social Media Integration

3.1 Data Access

When you connect social media accounts, we:

• Only request permissions necessary for our services
• Store access tokens securely
• Never access private messages or personal data beyond what you authorize
• Post only content you explicitly create and schedule

3.2 Third-Party Platforms

We integrate with:

Each platform has its own privacy policy that also applies to your data.

4. Data Sharing and Disclosure

We may share data only in these situations:

• With Your Consent: When you explicitly authorize sharing
• Service Providers: Trusted partners who help operate our platform
• Legal Requirements: When required by law or legal process
• Business Transfers: In case of merger, acquisition, or sale
• Safety: To protect rights, safety, and security

5. Data Security

We protect your information through:

• Encryption of data in transit and at rest
• Secure access controls and authentication
• Regular security audits and updates
• Limited access to personal data by employees
• Secure data centers and infrastructure

6. Your Rights and Choices

You have the right to:

To exercise these rights, contact us at privacy@shopybook.com

7. Kenya Data Protection Act (DPA) Compliance

• We are registered as a data controller with the Office of the Data Protection Commissioner (ODPC)
• We process personal data lawfully, fairly, and transparently
• We collect data only for specified, explicit, and legitimate purposes
• We minimize data collection to what is necessary for the stated purposes
• We retain data only as long as necessary and delete it upon request
• Cross-border data transfers (including to AI providers like Anthropic) use appropriate safeguards and anonymized data only
• We have appointed a Data Protection Officer who can be reached at privacy@shopybook.com

8. Data Retention

We retain your information:

• As long as your account is active
• As needed to provide services
• To comply with legal obligations
• To resolve disputes and enforce agreements

You can request account deletion at any time, and we will delete your data within 30 days.

9. International Transfers

Your information may be transferred to and processed in countries outside your residence. We ensure adequate protection through:

• Standard contractual clauses
• Adequacy decisions
• Appropriate safeguards

10. Children's Privacy

Shopybook is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately.

11. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or applicable law. We will:

• Post the updated policy on this page
• Update the "Last updated" date
• Notify you of material changes via email or in-app notification

12. Contact Information

For questions about this privacy policy or our data practices, contact us: